{ "ab621424-ed1b-56ea-8cb6-b4d595b6cfa6": { "Event": { "uuid": "ab621424-ed1b-56ea-8cb6-b4d595b6cfa6", "info": "SystemHelpDesk MFC - 4shared (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"4shared\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "856e9d48-7db3-50b9-967d-c5f79b5f4dcf": { "Event": { "uuid": "856e9d48-7db3-50b9-967d-c5f79b5f4dcf", "info": "SystemHelpDesk MFC - A_311_death (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"a_311_death\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1569\"" } ] } }, "bfd90c0d-78a7-517c-bbd8-ed37afa0b78b": { "Event": { "uuid": "bfd90c0d-78a7-517c-bbd8-ed37afa0b78b", "info": "SystemHelpDesk MFC - Acid_drop (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"acid_drop\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "9e8e548a-ae39-57bb-998f-35b508863d31": { "Event": { "uuid": "9e8e548a-ae39-57bb-998f-35b508863d31", "info": "SystemHelpDesk MFC - Adaebook (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"adaebook\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "1c158893-939d-5ff4-bd73-a0d41ede3575": { "Event": { "uuid": "1c158893-939d-5ff4-bd73-a0d41ede3575", "info": "SystemHelpDesk MFC - Addrop (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"addrop\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "524a546d-d27f-53dd-bc16-fbc0fb8f432c": { "Event": { "uuid": "524a546d-d27f-53dd-bc16-fbc0fb8f432c", "info": "SystemHelpDesk MFC - Adposhel (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"adposhel\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.009\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" } ] } }, "1b81a962-e561-5c0b-9027-128792a6451e": { "Event": { "uuid": "1b81a962-e561-5c0b-9027-128792a6451e", "info": "SystemHelpDesk MFC - Aero (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"aero\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "8d1ae7b0-76ef-5c13-b678-312ceec3241a": { "Event": { "uuid": "8d1ae7b0-76ef-5c13-b678-312ceec3241a", "info": "SystemHelpDesk MFC - Agentb (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"agentb\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "fc1777f0-f7c6-593a-9cbc-28d702230f40": { "Event": { "uuid": "fc1777f0-f7c6-593a-9cbc-28d702230f40", "info": "SystemHelpDesk MFC - Agenttesla (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"agenttesla\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1048\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" } ] } }, "4632aff9-77d6-539a-bfe3-4fdd2da6dcff": { "Event": { "uuid": "4632aff9-77d6-539a-bfe3-4fdd2da6dcff", "info": "SystemHelpDesk MFC - Aim_downloader (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"aim_downloader\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1036.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "27c6a40a-9ecc-5ace-b814-c178e2d00227": { "Event": { "uuid": "27c6a40a-9ecc-5ace-b814-c178e2d00227", "info": "SystemHelpDesk MFC - Ainslot (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"ainslot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "c0a50615-02dd-5a80-a12d-38c7ba8721ce": { "Event": { "uuid": "c0a50615-02dd-5a80-a12d-38c7ba8721ce", "info": "SystemHelpDesk MFC - Alien (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"alien\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1404\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1411\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1418\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1437\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1636\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1430\"" } ] } }, "0351f0a9-17c0-5d54-9322-bf5db47d2f07": { "Event": { "uuid": "0351f0a9-17c0-5d54-9322-bf5db47d2f07", "info": "SystemHelpDesk MFC - Allaple (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"allaple\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" } ] } }, "208aa8b2-0689-5740-b468-84fc18de1294": { "Event": { "uuid": "208aa8b2-0689-5740-b468-84fc18de1294", "info": "SystemHelpDesk MFC - Amiboide (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"amiboide\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" } ] } }, "94a8180c-383b-548e-ae15-454e0f8eb07e": { "Event": { "uuid": "94a8180c-383b-548e-ae15-454e0f8eb07e", "info": "SystemHelpDesk MFC - Amonetize (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"amonetize\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1036.005\"" } ] } }, "d38666b4-3ccc-5dc0-8367-6c315b795323": { "Event": { "uuid": "d38666b4-3ccc-5dc0-8367-6c315b795323", "info": "SystemHelpDesk MFC - Apocalypse_rat (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"apocalypse_rat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071\"" } ] } }, "b949900d-3a11-5023-8b46-f5984128c3ec": { "Event": { "uuid": "b949900d-3a11-5023-8b46-f5984128c3ec", "info": "SystemHelpDesk MFC - Apost (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"apost\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "2c427c08-a331-5383-a178-cf9b4b171a0b": { "Event": { "uuid": "2c427c08-a331-5383-a178-cf9b4b171a0b", "info": "SystemHelpDesk MFC - Appset (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"appset\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "70573070-bf23-5de8-9398-7f7e37d5161e": { "Event": { "uuid": "70573070-bf23-5de8-9398-7f7e37d5161e", "info": "SystemHelpDesk MFC - Appster (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"appster\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "d2d925fa-8521-5b3f-b3ee-8f8ef50dc2e3": { "Event": { "uuid": "d2d925fa-8521-5b3f-b3ee-8f8ef50dc2e3", "info": "SystemHelpDesk MFC - Archsms (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"archsms\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1036.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "d85e3282-b13e-5261-a567-dc082f4c43e1": { "Event": { "uuid": "d85e3282-b13e-5261-a567-dc082f4c43e1", "info": "SystemHelpDesk MFC - Ardamax (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"ardamax\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1115\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" } ] } }, "75c4efde-44c4-5733-8a5e-1cdb7df0148e": { "Event": { "uuid": "75c4efde-44c4-5733-8a5e-1cdb7df0148e", "info": "SystemHelpDesk MFC - Asparnet (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"asparnet\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "775cf45a-ee05-547c-be37-1b897eab9a0a": { "Event": { "uuid": "775cf45a-ee05-547c-be37-1b897eab9a0a", "info": "SystemHelpDesk MFC - Atraps (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"atraps\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1115\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "22a021cd-be91-5f78-b992-23fb91528cff": { "Event": { "uuid": "22a021cd-be91-5f78-b992-23fb91528cff", "info": "SystemHelpDesk MFC - Ausiv (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"ausiv\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" } ] } }, "1b0bb8dc-fcf1-56aa-a005-13e9dba3d9f4": { "Event": { "uuid": "1b0bb8dc-fcf1-56aa-a005-13e9dba3d9f4", "info": "SystemHelpDesk MFC - Auslogics (Rogueware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rogueware\"" }, { "name": "mfc:family=\"auslogics\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1491.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" } ] } }, "6d719dba-5fe8-56fa-a5d4-2ea751d64352": { "Event": { "uuid": "6d719dba-5fe8-56fa-a5d4-2ea751d64352", "info": "SystemHelpDesk MFC - Autohk (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"autohk\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "74c6b8c7-998b-529a-8da7-aafb158e03a1": { "Event": { "uuid": "74c6b8c7-998b-529a-8da7-aafb158e03a1", "info": "SystemHelpDesk MFC - Autoit (Packer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Packer\"" }, { "name": "mfc:family=\"autoit\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.007\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "a299a046-d23a-5ac7-a559-9f2d21005761": { "Event": { "uuid": "a299a046-d23a-5ac7-a559-9f2d21005761", "info": "SystemHelpDesk MFC - Azorult (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"azorult\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1539\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "c7a3557d-8058-5050-91ad-f16ca8dd0be1": { "Event": { "uuid": "c7a3557d-8058-5050-91ad-f16ca8dd0be1", "info": "SystemHelpDesk MFC - Babar (Advanced Threat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Advanced Threat\"" }, { "name": "mfc:family=\"babar\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1123\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" } ] } }, "a220e2ce-567b-5197-ba30-6515bfea5aec": { "Event": { "uuid": "a220e2ce-567b-5197-ba30-6515bfea5aec", "info": "SystemHelpDesk MFC - Back_orifice (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"back_orifice\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1049\"" } ] } }, "1238f174-9ed6-52b8-89ee-f8f2405af5a9": { "Event": { "uuid": "1238f174-9ed6-52b8-89ee-f8f2405af5a9", "info": "SystemHelpDesk MFC - Banbra (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"banbra\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "4470973e-1870-5a61-a0fc-527ab66d2076": { "Event": { "uuid": "4470973e-1870-5a61-a0fc-527ab66d2076", "info": "SystemHelpDesk MFC - Bancos (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"bancos\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "612871a5-81d1-5656-a05a-8abca4a37b9e": { "Event": { "uuid": "612871a5-81d1-5656-a05a-8abca4a37b9e", "info": "SystemHelpDesk MFC - Bancteian (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"bancteian\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "0544912f-71eb-5618-832d-d5c30aae1468": { "Event": { "uuid": "0544912f-71eb-5618-832d-d5c30aae1468", "info": "SystemHelpDesk MFC - Bandook (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"bandook\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "77c41eeb-4294-520d-89f5-f5872bef1d1a": { "Event": { "uuid": "77c41eeb-4294-520d-89f5-f5872bef1d1a", "info": "SystemHelpDesk MFC - Banload (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"banload\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "b25927d7-fe90-56d1-9625-4c9395ecfbb5": { "Event": { "uuid": "b25927d7-fe90-56d1-9625-4c9395ecfbb5", "info": "SystemHelpDesk MFC - Barys (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"barys\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "e810d344-6aef-5c60-a0a4-8fbd9f9586e7": { "Event": { "uuid": "e810d344-6aef-5c60-a0a4-8fbd9f9586e7", "info": "SystemHelpDesk MFC - Bayrob (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"bayrob\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1496\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "c71165b3-d2d8-543d-a738-a1d54f60c406": { "Event": { "uuid": "c71165b3-d2d8-543d-a738-a1d54f60c406", "info": "SystemHelpDesk MFC - Beast (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"beast\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" } ] } }, "aebfbaa2-ff4e-5639-b418-3ee990824fe0": { "Event": { "uuid": "aebfbaa2-ff4e-5639-b418-3ee990824fe0", "info": "SystemHelpDesk MFC - Beebone (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"beebone\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "d1b65420-a6e3-5d63-8a42-f4b7f75b255c": { "Event": { "uuid": "d1b65420-a6e3-5d63-8a42-f4b7f75b255c", "info": "SystemHelpDesk MFC - Benjamin (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"benjamin\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1036.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" } ] } }, "23740eb5-ca42-5f30-96c3-0cc246c7d40b": { "Event": { "uuid": "23740eb5-ca42-5f30-96c3-0cc246c7d40b", "info": "SystemHelpDesk MFC - Berbew (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"berbew\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "952a2ea7-1f93-5a68-96b6-7a97108f3625": { "Event": { "uuid": "952a2ea7-1f93-5a68-96b6-7a97108f3625", "info": "SystemHelpDesk MFC - Bersek (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"bersek\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1043\"" } ] } }, "de16a653-07cf-5bd1-a69e-eba92acd0924": { "Event": { "uuid": "de16a653-07cf-5bd1-a69e-eba92acd0924", "info": "SystemHelpDesk MFC - Bestafera (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"bestafera\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "13c78802-350a-5929-9f5f-13c94e51e5a1": { "Event": { "uuid": "13c78802-350a-5929-9f5f-13c94e51e5a1", "info": "SystemHelpDesk MFC - Bifrose (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"bifrose\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "d3726bee-a446-5a5a-a825-72ab5d7524c4": { "Event": { "uuid": "d3726bee-a446-5a5a-a825-72ab5d7524c4", "info": "SystemHelpDesk MFC - Bifrost (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"bifrost\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1014\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" } ] } }, "c619d0df-174f-55fc-b8d1-10fe27a87cb2": { "Event": { "uuid": "c619d0df-174f-55fc-b8d1-10fe27a87cb2", "info": "SystemHelpDesk MFC - Binder (Hacktool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Hacktool\"" }, { "name": "mfc:family=\"binder\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1036.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "2fb8ba7a-6b86-5bbc-a42c-dd75e1c64dd1": { "Event": { "uuid": "2fb8ba7a-6b86-5bbc-a42c-dd75e1c64dd1", "info": "SystemHelpDesk MFC - Bitmin (Coinminer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Coinminer\"" }, { "name": "mfc:family=\"bitmin\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1496\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "6f579d71-af6d-5437-b41f-b38fc229c3c9": { "Event": { "uuid": "6f579d71-af6d-5437-b41f-b38fc229c3c9", "info": "SystemHelpDesk MFC - Bitrep (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"bitrep\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "f2bbae7a-3f8d-53bf-9333-1a655ae555f4": { "Event": { "uuid": "f2bbae7a-3f8d-53bf-9333-1a655ae555f4", "info": "SystemHelpDesk MFC - Black (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"black\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "ad8316c3-4db3-5ed2-a33e-9e86cfa9f941": { "Event": { "uuid": "ad8316c3-4db3-5ed2-a33e-9e86cfa9f941", "info": "SystemHelpDesk MFC - Blackenergy (Advanced Threat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Advanced Threat\"" }, { "name": "mfc:family=\"blackenergy\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1485\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "c675e388-6a5f-5aa2-a875-7f1e61cf20c8": { "Event": { "uuid": "c675e388-6a5f-5aa2-a875-7f1e61cf20c8", "info": "SystemHelpDesk MFC - Blackmoon (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"blackmoon\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1565.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" } ] } }, "95cfd2f2-08f5-50c4-ba9b-07a9279a4ac4": { "Event": { "uuid": "95cfd2f2-08f5-50c4-ba9b-07a9279a4ac4", "info": "SystemHelpDesk MFC - Bladabindi (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"bladabindi\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1123\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" } ] } }, "c4cbda05-4fca-551f-b20e-009aff47e447": { "Event": { "uuid": "c4cbda05-4fca-551f-b20e-009aff47e447", "info": "SystemHelpDesk MFC - Blasterx (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"blasterx\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1489\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1190\"" } ] } }, "e179afea-f51e-5788-a54d-0097aef6518b": { "Event": { "uuid": "e179afea-f51e-5788-a54d-0097aef6518b", "info": "SystemHelpDesk MFC - Bloored (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"bloored\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "7d4b139b-cf5d-5171-931f-edf6e472ba80": { "Event": { "uuid": "7d4b139b-cf5d-5171-931f-edf6e472ba80", "info": "SystemHelpDesk MFC - Bozok (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"bozok\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1140\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566\"" } ] } }, "66c90124-7cee-553f-b2bc-f437c86386fa": { "Event": { "uuid": "66c90124-7cee-553f-b2bc-f437c86386fa", "info": "SystemHelpDesk MFC - Brambul (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"brambul\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1110.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1570\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1046\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "000fe405-b2d4-5dfe-91ff-a7eb8c77bbf7": { "Event": { "uuid": "000fe405-b2d4-5dfe-91ff-a7eb8c77bbf7", "info": "SystemHelpDesk MFC - Brontok (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"brontok\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "0f270599-c391-5d09-bc52-5b2566ef1303": { "Event": { "uuid": "0f270599-c391-5d09-bc52-5b2566ef1303", "info": "SystemHelpDesk MFC - Browsefox (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"browsefox\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "e096ca6f-37c9-546e-91ae-914cf3767abd": { "Event": { "uuid": "e096ca6f-37c9-546e-91ae-914cf3767abd", "info": "SystemHelpDesk MFC - Browserio (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"browserio\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1036.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "cec0910f-ca8e-564a-8fec-bdfeed7501ea": { "Event": { "uuid": "cec0910f-ca8e-564a-8fec-bdfeed7501ea", "info": "SystemHelpDesk MFC - Brutus (Tool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Tool\"" }, { "name": "mfc:family=\"brutus\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1110\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1078\"" } ] } }, "67c9f30e-4e6d-5c87-8812-46be39d66d33": { "Event": { "uuid": "67c9f30e-4e6d-5c87-8812-46be39d66d33", "info": "SystemHelpDesk MFC - Bsymem (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"bsymem\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" } ] } }, "5962047f-3007-5260-a26f-be8aa02707c7": { "Event": { "uuid": "5962047f-3007-5260-a26f-be8aa02707c7", "info": "SystemHelpDesk MFC - Bump_rat (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"bump_rat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1048\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1046\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090\"" } ] } }, "786c8269-d32c-5247-9bb9-3e23573f0567": { "Event": { "uuid": "786c8269-d32c-5247-9bb9-3e23573f0567", "info": "SystemHelpDesk MFC - Bunitu (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"bunitu\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "fe2b9633-3ca8-51d4-b72f-29bb2fc6a71b": { "Event": { "uuid": "fe2b9633-3ca8-51d4-b72f-29bb2fc6a71b", "info": "SystemHelpDesk MFC - Buterat (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"buterat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "3c32a363-6bbc-52b3-aa95-517755958411": { "Event": { "uuid": "3c32a363-6bbc-52b3-aa95-517755958411", "info": "SystemHelpDesk MFC - Buzus (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"buzus\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "ac9f01e0-3d35-5610-959b-3907cf590c18": { "Event": { "uuid": "ac9f01e0-3d35-5610-959b-3907cf590c18", "info": "SystemHelpDesk MFC - Byfh (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"byfh\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "530a68c5-292f-5796-9087-2e7a4422ed28": { "Event": { "uuid": "530a68c5-292f-5796-9087-2e7a4422ed28", "info": "SystemHelpDesk MFC - Bypassuac (Hacktool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Hacktool\"" }, { "name": "mfc:family=\"bypassuac\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1548.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1574.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "4de0b7d5-57bc-58b3-8bed-7e99aeb21ccd": { "Event": { "uuid": "4de0b7d5-57bc-58b3-8bed-7e99aeb21ccd", "info": "SystemHelpDesk MFC - Cambot (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"cambot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "b2bcd4a2-0055-56dd-b877-e4cc676fcc62": { "Event": { "uuid": "b2bcd4a2-0055-56dd-b877-e4cc676fcc62", "info": "SystemHelpDesk MFC - Carbanak (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"carbanak\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "bdfba028-7fe9-5fd5-bcbf-55e9da48b920": { "Event": { "uuid": "bdfba028-7fe9-5fd5-bcbf-55e9da48b920", "info": "SystemHelpDesk MFC - Carberp (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"carberp\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1542.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "e24c5835-d3b7-5c0a-a278-a18cd9c50f8b": { "Event": { "uuid": "e24c5835-d3b7-5c0a-a278-a18cd9c50f8b", "info": "SystemHelpDesk MFC - Cardspy (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"cardspy\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "9362800d-29b0-5159-8575-f873331ca450": { "Event": { "uuid": "9362800d-29b0-5159-8575-f873331ca450", "info": "SystemHelpDesk MFC - Casper (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"casper\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "a3489fbb-71fc-52db-8d29-dca771487bf7": { "Event": { "uuid": "a3489fbb-71fc-52db-8d29-dca771487bf7", "info": "SystemHelpDesk MFC - Cassiopeia (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"cassiopeia\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "a036e91b-5005-504f-ae34-464c1b704561": { "Event": { "uuid": "a036e91b-5005-504f-ae34-464c1b704561", "info": "SystemHelpDesk MFC - Celesty (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"celesty\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "b79657fe-c863-5188-b4ab-7739adffb857": { "Event": { "uuid": "b79657fe-c863-5188-b4ab-7739adffb857", "info": "SystemHelpDesk MFC - Cerber (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"cerber\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1124\"" } ] } }, "24d03e0a-32aa-51a9-ae32-7d91842597c1": { "Event": { "uuid": "24d03e0a-32aa-51a9-ae32-7d91842597c1", "info": "SystemHelpDesk MFC - Cerberus (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"cerberus\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1626\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1629\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1628\"" } ] } }, "c4a6e598-8e3d-5c55-bbb9-a833074e0311": { "Event": { "uuid": "c4a6e598-8e3d-5c55-bbb9-a833074e0311", "info": "SystemHelpDesk MFC - Cerbu (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"cerbu\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "e4faaf46-2e27-546f-833e-6569d0175196": { "Event": { "uuid": "e4faaf46-2e27-546f-833e-6569d0175196", "info": "SystemHelpDesk MFC - Chapak (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"chapak\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1106\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "7cbf2749-0199-5f58-b2b3-b0942c51a538": { "Event": { "uuid": "7cbf2749-0199-5f58-b2b3-b0942c51a538", "info": "SystemHelpDesk MFC - Cheatengine (Pua Tool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua Tool\"" }, { "name": "mfc:family=\"cheatengine\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" } ] } }, "215c7d78-bd7c-58ba-9f75-22d46efae063": { "Event": { "uuid": "215c7d78-bd7c-58ba-9f75-22d46efae063", "info": "SystemHelpDesk MFC - Chindo (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"chindo\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "3c715787-a425-5b77-baa8-ab9f45195d31": { "Event": { "uuid": "3c715787-a425-5b77-baa8-ab9f45195d31", "info": "SystemHelpDesk MFC - Chir (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"chir\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1114.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "e749e7b5-e657-5db8-a0cd-0d171f1f8c5d": { "Event": { "uuid": "e749e7b5-e657-5db8-a0cd-0d171f1f8c5d", "info": "SystemHelpDesk MFC - Chopper (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"chopper\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1505.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" } ] } }, "ecf95278-8796-5b99-8008-0c6cfc5ed202": { "Event": { "uuid": "ecf95278-8796-5b99-8008-0c6cfc5ed202", "info": "SystemHelpDesk MFC - Chthonic (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"chthonic\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" } ] } }, "2477462a-b1f0-5754-8615-117fb788dbc5": { "Event": { "uuid": "2477462a-b1f0-5754-8615-117fb788dbc5", "info": "SystemHelpDesk MFC - Cia (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"cia\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "e64cc8b3-fb15-569a-a458-14be62ce83e6": { "Event": { "uuid": "e64cc8b3-fb15-569a-a458-14be62ce83e6", "info": "SystemHelpDesk MFC - Cloudscout (Advanced Threat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Advanced Threat\"" }, { "name": "mfc:family=\"cloudscout\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1539\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1550.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "901d166c-b0c3-5ca1-885f-f35767794cfe": { "Event": { "uuid": "901d166c-b0c3-5ca1-885f-f35767794cfe", "info": "SystemHelpDesk MFC - Cobalt (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"cobalt\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1001.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021\"" } ] } }, "87ac9fa2-dea5-5470-ab35-193874db05fa": { "Event": { "uuid": "87ac9fa2-dea5-5470-ab35-193874db05fa", "info": "SystemHelpDesk MFC - Cobaltstrike (Hacktool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Hacktool\"" }, { "name": "mfc:family=\"cobaltstrike\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1573.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "da711e02-9d4c-5ba1-9cd5-5b6cbbb45e3c": { "Event": { "uuid": "da711e02-9d4c-5ba1-9cd5-5b6cbbb45e3c", "info": "SystemHelpDesk MFC - Coins (Cryptominer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Cryptominer\"" }, { "name": "mfc:family=\"coins\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1496\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "955aa1a5-a968-54b1-8c93-06c146752088": { "Event": { "uuid": "955aa1a5-a968-54b1-8c93-06c146752088", "info": "SystemHelpDesk MFC - Coinstealer (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"coinstealer\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1115\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "76f13292-a407-573c-a08c-3074e242d8d2": { "Event": { "uuid": "76f13292-a407-573c-a08c-3074e242d8d2", "info": "SystemHelpDesk MFC - Coma (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"coma\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1485\"" } ] } }, "96404428-f21d-5171-85d9-e727d9ec1d83": { "Event": { "uuid": "96404428-f21d-5171-85d9-e727d9ec1d83", "info": "SystemHelpDesk MFC - Conficker (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"conficker\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" } ] } }, "6948e81c-3280-5dce-bf25-c7905f198ca1": { "Event": { "uuid": "6948e81c-3280-5dce-bf25-c7905f198ca1", "info": "SystemHelpDesk MFC - Confuser (Packer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Packer\"" }, { "name": "mfc:family=\"confuser\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1620\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1129\"" } ] } }, "84490ea8-bf7a-5dea-b52c-43819e2b783e": { "Event": { "uuid": "84490ea8-bf7a-5dea-b52c-43819e2b783e", "info": "SystemHelpDesk MFC - Convertad (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"convertad\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "63739c6b-229c-5cca-b8e7-12170eae5ee8": { "Event": { "uuid": "63739c6b-229c-5cca-b8e7-12170eae5ee8", "info": "SystemHelpDesk MFC - Cool_remote_control (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"cool_remote_control\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" } ] } }, "38ed79ad-d8a3-5d9b-8a7f-cb54ade32b73": { "Event": { "uuid": "38ed79ad-d8a3-5d9b-8a7f-cb54ade32b73", "info": "SystemHelpDesk MFC - Coolvibes (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"coolvibes\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" } ] } }, "6d4095fd-059f-5b18-895d-4a38ccea2062": { "Event": { "uuid": "6d4095fd-059f-5b18-895d-4a38ccea2062", "info": "SystemHelpDesk MFC - Cosmicduke (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"cosmicduke\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1546.003\"" } ] } }, "fc899d0e-fe55-539d-acde-c97bc382c879": { "Event": { "uuid": "fc899d0e-fe55-539d-acde-c97bc382c879", "info": "SystemHelpDesk MFC - Cosmu (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"cosmu\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" } ] } }, "5906daf9-fcc2-5928-8f06-10427cb9fa51": { "Event": { "uuid": "5906daf9-fcc2-5928-8f06-10427cb9fa51", "info": "SystemHelpDesk MFC - Cryptolocker (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"cryptolocker\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "33aff287-b60a-5b05-8f87-a1dadfa616e6": { "Event": { "uuid": "33aff287-b60a-5b05-8f87-a1dadfa616e6", "info": "SystemHelpDesk MFC - Cryptowall (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"cryptowall\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" } ] } }, "3b88d1c3-5aad-57df-ad95-89f66fc32670": { "Event": { "uuid": "3b88d1c3-5aad-57df-ad95-89f66fc32670", "info": "SystemHelpDesk MFC - Crysis (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"crysis\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1078.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1047\"" } ] } }, "861ec5fe-0b27-5583-9f0e-c4b4c952d611": { "Event": { "uuid": "861ec5fe-0b27-5583-9f0e-c4b4c952d611", "info": "SystemHelpDesk MFC - Crytex (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"crytex\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1078.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "70569daf-5705-522a-a6a8-34389c981c60": { "Event": { "uuid": "70569daf-5705-522a-a6a8-34389c981c60", "info": "SystemHelpDesk MFC - Csdimonetize (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"csdimonetize\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "d8b1ebaf-c169-5182-b66b-12a172cfb7a5": { "Event": { "uuid": "d8b1ebaf-c169-5182-b66b-12a172cfb7a5", "info": "SystemHelpDesk MFC - Cuegoe (Advanced Threat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Advanced Threat\"" }, { "name": "mfc:family=\"cuegoe\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "7f9212ab-f44e-538f-9435-7ca7d39b53f7": { "Event": { "uuid": "7f9212ab-f44e-538f-9435-7ca7d39b53f7", "info": "SystemHelpDesk MFC - Cutwail (Botnet) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Botnet\"" }, { "name": "mfc:family=\"cutwail\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1014\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" } ] } }, "3637f93d-45f2-55ec-be97-0c089847334e": { "Event": { "uuid": "3637f93d-45f2-55ec-be97-0c089847334e", "info": "SystemHelpDesk MFC - Cybergate (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"cybergate\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "5e39fc76-3ac0-5294-8760-efa9dec2dc01": { "Event": { "uuid": "5e39fc76-3ac0-5294-8760-efa9dec2dc01", "info": "SystemHelpDesk MFC - Cybernetic (Botnet) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Botnet\"" }, { "name": "mfc:family=\"cybernetic\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "66e70239-384e-5e30-a7d9-46dbe17bb0f4": { "Event": { "uuid": "66e70239-384e-5e30-a7d9-46dbe17bb0f4", "info": "SystemHelpDesk MFC - Cyn (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"cyn\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" } ] } }, "1e80b8c2-1a47-50d8-856e-b2f91b7910f7": { "Event": { "uuid": "1e80b8c2-1a47-50d8-856e-b2f91b7910f7", "info": "SystemHelpDesk MFC - Danabot (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"danabot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1572\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" } ] } }, "dc3d5838-4752-56be-9633-651db2f978de": { "Event": { "uuid": "dc3d5838-4752-56be-9633-651db2f978de", "info": "SystemHelpDesk MFC - Dapato (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"dapato\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "e7e2903a-b020-5996-a0c7-9dc76bbc3e84": { "Event": { "uuid": "e7e2903a-b020-5996-a0c7-9dc76bbc3e84", "info": "SystemHelpDesk MFC - Darkgate (Loader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Loader\"" }, { "name": "mfc:family=\"darkgate\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1574.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" } ] } }, "ad8bafe2-5928-5410-a479-13ce87993b2b": { "Event": { "uuid": "ad8bafe2-5928-5410-a479-13ce87993b2b", "info": "SystemHelpDesk MFC - Darkhotel (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"darkhotel\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1195.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1553.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "8be99119-cf02-54c4-b57b-e6efd6aea789": { "Event": { "uuid": "8be99119-cf02-54c4-b57b-e6efd6aea789", "info": "SystemHelpDesk MFC - Darkkomet (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"darkkomet\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" } ] } }, "59628a29-6cb9-5751-a76f-60981f889c27": { "Event": { "uuid": "59628a29-6cb9-5751-a76f-60981f889c27", "info": "SystemHelpDesk MFC - Daws (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"daws\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" } ] } }, "f2b15ade-dc07-5034-b379-de55963c2a3d": { "Event": { "uuid": "f2b15ade-dc07-5034-b379-de55963c2a3d", "info": "SystemHelpDesk MFC - Dealply (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"dealply\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" } ] } }, "5e9db0b1-063b-561c-a0cf-4699828a20d6": { "Event": { "uuid": "5e9db0b1-063b-561c-a0cf-4699828a20d6", "info": "SystemHelpDesk MFC - Delf (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"delf\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "c7cbaae8-ece2-57cd-91cf-e596b63187c0": { "Event": { "uuid": "c7cbaae8-ece2-57cd-91cf-e596b63187c0", "info": "SystemHelpDesk MFC - Delphi (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"delphi\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "8ff3182d-02ac-5ff1-a0f7-15427b6bd1ec": { "Event": { "uuid": "8ff3182d-02ac-5ff1-a0f7-15427b6bd1ec", "info": "SystemHelpDesk MFC - Detnat (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"detnat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1106\"" } ] } }, "3cd26e70-64a7-521f-97c1-84e05a66c7ba": { "Event": { "uuid": "3cd26e70-64a7-521f-97c1-84e05a66c7ba", "info": "SystemHelpDesk MFC - Dfay (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"dfay\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "77433263-2324-5cdb-b182-8f6940942acc": { "Event": { "uuid": "77433263-2324-5cdb-b182-8f6940942acc", "info": "SystemHelpDesk MFC - Dinwod (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"dinwod\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "246f365d-9443-56f6-85cf-03424d5a3fab": { "Event": { "uuid": "246f365d-9443-56f6-85cf-03424d5a3fab", "info": "SystemHelpDesk MFC - Disfa (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"disfa\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "2506df19-54ef-55fc-a949-2533180c49e7": { "Event": { "uuid": "2506df19-54ef-55fc-a949-2533180c49e7", "info": "SystemHelpDesk MFC - Dlguide (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"dlguide\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "b5c8e011-b940-52fc-837c-fa0504ca7130": { "Event": { "uuid": "b5c8e011-b940-52fc-837c-fa0504ca7130", "info": "SystemHelpDesk MFC - Dlhelper (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"dlhelper\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1036.005\"" } ] } }, "96cbb279-2e2c-5e15-ae11-46a70451bfb0": { "Event": { "uuid": "96cbb279-2e2c-5e15-ae11-46a70451bfb0", "info": "SystemHelpDesk MFC - Dllinject (Hacktool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Hacktool\"" }, { "name": "mfc:family=\"dllinject\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1036.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1106\"" } ] } }, "9e0c62d5-70f7-5c6c-991c-239007002584": { "Event": { "uuid": "9e0c62d5-70f7-5c6c-991c-239007002584", "info": "SystemHelpDesk MFC - Dlsponsor (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"dlsponsor\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" } ] } }, "a9630450-3a30-5fc1-9f84-dd34ccc8542b": { "Event": { "uuid": "a9630450-3a30-5fc1-9f84-dd34ccc8542b", "info": "SystemHelpDesk MFC - Dnschanger (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"dnschanger\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1565.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1200\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "09318ac9-2ad5-53bf-a1f5-e50d6ae3b516": { "Event": { "uuid": "09318ac9-2ad5-53bf-a1f5-e50d6ae3b516", "info": "SystemHelpDesk MFC - Dofoil (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"dofoil\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1036.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "e1c4e8da-82aa-594c-8402-1bf4c6e8e2e1": { "Event": { "uuid": "e1c4e8da-82aa-594c-8402-1bf4c6e8e2e1", "info": "SystemHelpDesk MFC - Domaiq (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"domaiq\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "af3581fb-0140-5900-9e18-117c6f6a436a": { "Event": { "uuid": "af3581fb-0140-5900-9e18-117c6f6a436a", "info": "SystemHelpDesk MFC - Dorkbot (Botnet) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Botnet\"" }, { "name": "mfc:family=\"dorkbot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "4b4acaba-5849-565b-8963-4632e7272cab": { "Event": { "uuid": "4b4acaba-5849-565b-8963-4632e7272cab", "info": "SystemHelpDesk MFC - Dotdo (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"dotdo\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1557.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090.001\"" } ] } }, "9439522d-c791-5492-9297-41429ea49a78": { "Event": { "uuid": "9439522d-c791-5492-9297-41429ea49a78", "info": "SystemHelpDesk MFC - Dovs (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"dovs\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "579ac2ff-b0b7-5a62-bd9c-705aa921e21f": { "Event": { "uuid": "579ac2ff-b0b7-5a62-bd9c-705aa921e21f", "info": "SystemHelpDesk MFC - Downloadadmin (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"downloadadmin\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "7efbbbec-a381-5a57-b4e3-ed8f39e7fa79": { "Event": { "uuid": "7efbbbec-a381-5a57-b4e3-ed8f39e7fa79", "info": "SystemHelpDesk MFC - Downloadhelper (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"downloadhelper\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "5a88d650-5855-51a1-abcf-0254e6552c72": { "Event": { "uuid": "5a88d650-5855-51a1-abcf-0254e6552c72", "info": "SystemHelpDesk MFC - Dridex (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"dridex\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1001.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "d08c8f4f-b8fc-5ae8-b192-908b582e833a": { "Event": { "uuid": "d08c8f4f-b8fc-5ae8-b192-908b582e833a", "info": "SystemHelpDesk MFC - Driverpack (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"driverpack\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "d8e92194-a91d-540f-8fbf-c4bdf1b0aad3": { "Event": { "uuid": "d8e92194-a91d-540f-8fbf-c4bdf1b0aad3", "info": "SystemHelpDesk MFC - Drolnux (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"drolnux\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "c7b54212-e413-5af7-97cc-f76fe8a4c747": { "Event": { "uuid": "c7b54212-e413-5af7-97cc-f76fe8a4c747", "info": "SystemHelpDesk MFC - Dynamer (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"dynamer\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1129\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1620\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "6e7c995e-8e4e-5642-b493-fa15f304c89f": { "Event": { "uuid": "6e7c995e-8e4e-5642-b493-fa15f304c89f", "info": "SystemHelpDesk MFC - Ekstak (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"ekstak\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "1c928e65-546b-52c6-824f-4456fa39617b": { "Event": { "uuid": "1c928e65-546b-52c6-824f-4456fa39617b", "info": "SystemHelpDesk MFC - Elemental (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"elemental\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "8ada00d3-9a55-5ad7-a47b-a908e188b592": { "Event": { "uuid": "8ada00d3-9a55-5ad7-a47b-a908e188b592", "info": "SystemHelpDesk MFC - Emotet (Loader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Loader\"" }, { "name": "mfc:family=\"emotet\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1114.002\"" } ] } }, "1b54e3f1-7b8b-507e-92ca-6940663a42bf": { "Event": { "uuid": "1b54e3f1-7b8b-507e-92ca-6940663a42bf", "info": "SystemHelpDesk MFC - Enigmaprotector (Packer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Packer\"" }, { "name": "mfc:family=\"enigmaprotector\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1622\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1140\"" } ] } }, "7373ac88-0821-5058-b8b9-d71349dd001c": { "Event": { "uuid": "7373ac88-0821-5058-b8b9-d71349dd001c", "info": "SystemHelpDesk MFC - Eorezo (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"eorezo\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "eb6be7fe-f632-5765-b180-422455a1c18b": { "Event": { "uuid": "eb6be7fe-f632-5765-b180-422455a1c18b", "info": "SystemHelpDesk MFC - Equationdrug (Advanced Threat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Advanced Threat\"" }, { "name": "mfc:family=\"equationdrug\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1068\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1542.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1014\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1070.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1560.003\"" } ] } }, "6a74f729-2b40-55e8-94ce-2caec379e4af": { "Event": { "uuid": "6a74f729-2b40-55e8-94ce-2caec379e4af", "info": "SystemHelpDesk MFC - Erazer (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"erazer\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1106\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1485\"" } ] } }, "eb7dc067-c7e8-5b07-9394-08ffefd33560": { "Event": { "uuid": "eb7dc067-c7e8-5b07-9394-08ffefd33560", "info": "SystemHelpDesk MFC - Erazer_lite (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"erazer_lite\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1106\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071\"" } ] } }, "4c4b50b9-1be0-5b8c-a4bd-1304321823f6": { "Event": { "uuid": "4c4b50b9-1be0-5b8c-a4bd-1304321823f6", "info": "SystemHelpDesk MFC - Expiro (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"expiro\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" } ] } }, "a6ce6be4-9081-566e-9b46-905726d1c1d6": { "Event": { "uuid": "a6ce6be4-9081-566e-9b46-905726d1c1d6", "info": "SystemHelpDesk MFC - Explorerhijack (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"explorerhijack\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1106\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "2b6e7762-19a9-5ffd-ae11-10ba9e2f79b7": { "Event": { "uuid": "2b6e7762-19a9-5ffd-ae11-10ba9e2f79b7", "info": "SystemHelpDesk MFC - Extenbro (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"extenbro\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" } ] } }, "69d0c0d3-8f50-5477-8159-848e7ee2445d": { "Event": { "uuid": "69d0c0d3-8f50-5477-8159-848e7ee2445d", "info": "SystemHelpDesk MFC - Eyestye (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"eyestye\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1014\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "0ebd1824-03aa-52ac-bfb7-e0720117e8bf": { "Event": { "uuid": "0ebd1824-03aa-52ac-bfb7-e0720117e8bf", "info": "SystemHelpDesk MFC - Fareit (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"fareit\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1539\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1552.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "607b681f-9e2f-5ca9-abb5-81af10b0fd0a": { "Event": { "uuid": "607b681f-9e2f-5ca9-abb5-81af10b0fd0a", "info": "SystemHelpDesk MFC - Farfli (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"farfli\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1571\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "4fb73399-b192-52ea-bbfd-6084d82d5532": { "Event": { "uuid": "4fb73399-b192-52ea-bbfd-6084d82d5532", "info": "SystemHelpDesk MFC - Fearless_key_spy (Spyware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Spyware\"" }, { "name": "mfc:family=\"fearless_key_spy\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1115\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" } ] } }, "ae08ac62-554f-5772-a695-6439659edfff": { "Event": { "uuid": "ae08ac62-554f-5772-a695-6439659edfff", "info": "SystemHelpDesk MFC - Fearless_lite (Spyware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Spyware\"" }, { "name": "mfc:family=\"fearless_lite\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1115\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "209ad1a6-6b64-5b8b-80fb-d1ebca9c81fb": { "Event": { "uuid": "209ad1a6-6b64-5b8b-80fb-d1ebca9c81fb", "info": "SystemHelpDesk MFC - Filetour (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"filetour\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1496\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "016c72d0-bb23-524d-9a36-0c27b388bd5b": { "Event": { "uuid": "016c72d0-bb23-524d-9a36-0c27b388bd5b", "info": "SystemHelpDesk MFC - Firseria (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"firseria\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "188075ff-0246-5cb4-a0dd-60f5c1396b2c": { "Event": { "uuid": "188075ff-0246-5cb4-a0dd-60f5c1396b2c", "info": "SystemHelpDesk MFC - Flux (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"flux\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "8533cbea-6014-5905-ad8a-8656c550a878": { "Event": { "uuid": "8533cbea-6014-5905-ad8a-8656c550a878", "info": "SystemHelpDesk MFC - Flystudio (Packer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Packer\"" }, { "name": "mfc:family=\"flystudio\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1140\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "520eb54f-33f9-585d-9513-7f80b09f592d": { "Event": { "uuid": "520eb54f-33f9-585d-9513-7f80b09f592d", "info": "SystemHelpDesk MFC - Formbook (Spyware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Spyware\"" }, { "name": "mfc:family=\"formbook\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "8622fa06-71e5-5ab6-85b0-1b130ada6219": { "Event": { "uuid": "8622fa06-71e5-5ab6-85b0-1b130ada6219", "info": "SystemHelpDesk MFC - Fsysna (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"fsysna\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "da8c1d28-93bf-5afe-8cc0-1db843643f9b": { "Event": { "uuid": "da8c1d28-93bf-5afe-8cc0-1db843643f9b", "info": "SystemHelpDesk MFC - Fuerboos (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"fuerboos\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "e4470e8b-88d0-59a6-93f4-9a8f65873901": { "Event": { "uuid": "e4470e8b-88d0-59a6-93f4-9a8f65873901", "info": "SystemHelpDesk MFC - Fusioncore (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"fusioncore\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "350aea0a-6959-550f-8f13-92e19ec5f828": { "Event": { "uuid": "350aea0a-6959-550f-8f13-92e19ec5f828", "info": "SystemHelpDesk MFC - Gamarue (Loader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Loader\"" }, { "name": "mfc:family=\"gamarue\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1140\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "eb25dceb-b6cd-5e86-8cfb-b7bd32b43d49": { "Event": { "uuid": "eb25dceb-b6cd-5e86-8cfb-b7bd32b43d49", "info": "SystemHelpDesk MFC - Game (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"game\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1057\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "2fad00a3-f770-5032-8f64-0ad8d7579c8a": { "Event": { "uuid": "2fad00a3-f770-5032-8f64-0ad8d7579c8a", "info": "SystemHelpDesk MFC - Gamehack (Pua Tool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua Tool\"" }, { "name": "mfc:family=\"gamehack\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1548.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "831fd42c-ddb0-5cab-84b1-0e2df9d188e2": { "Event": { "uuid": "831fd42c-ddb0-5cab-84b1-0e2df9d188e2", "info": "SystemHelpDesk MFC - Gamemodding (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"gamemodding\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "658dcec1-0625-5307-a775-7e2e0e69d276": { "Event": { "uuid": "658dcec1-0625-5307-a775-7e2e0e69d276", "info": "SystemHelpDesk MFC - Gandcrab (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"gandcrab\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1489\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "b29ede18-5f93-58bd-901c-2390f1bdecf5": { "Event": { "uuid": "b29ede18-5f93-58bd-901c-2390f1bdecf5", "info": "SystemHelpDesk MFC - Gandcrypt (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"gandcrypt\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1489\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" } ] } }, "74f1b3df-e3e3-5b92-aa2e-97ec2d28b91c": { "Event": { "uuid": "74f1b3df-e3e3-5b92-aa2e-97ec2d28b91c", "info": "SystemHelpDesk MFC - Ganelp (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"ganelp\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "db5cf749-d81e-5c10-8072-a56e3b29935d": { "Event": { "uuid": "db5cf749-d81e-5c10-8072-a56e3b29935d", "info": "SystemHelpDesk MFC - Gator (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"gator\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" } ] } }, "ec271c7d-cdf7-52e7-9271-bfad77ef98e3": { "Event": { "uuid": "ec271c7d-cdf7-52e7-9271-bfad77ef98e3", "info": "SystemHelpDesk MFC - Genkryptik (Packer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Packer\"" }, { "name": "mfc:family=\"genkryptik\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" } ] } }, "f485213c-e222-55c0-a1a8-6696037aa9fa": { "Event": { "uuid": "f485213c-e222-55c0-a1a8-6696037aa9fa", "info": "SystemHelpDesk MFC - Gepys (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"gepys\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "b55a7ed3-eb8e-51ed-a348-52e1a8ffee50": { "Event": { "uuid": "b55a7ed3-eb8e-51ed-a348-52e1a8ffee50", "info": "SystemHelpDesk MFC - Gh0st (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"gh0st\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1123\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1573\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "d46a93f7-d6aa-537b-8fea-ecd5220c02e5": { "Event": { "uuid": "d46a93f7-d6aa-537b-8fea-ecd5220c02e5", "info": "SystemHelpDesk MFC - Ghost (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"ghost\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" } ] } }, "0e7aecd8-8221-5fb2-866b-4df7f977d0e3": { "Event": { "uuid": "0e7aecd8-8221-5fb2-866b-4df7f977d0e3", "info": "SystemHelpDesk MFC - Glupteba (Botnet) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Botnet\"" }, { "name": "mfc:family=\"glupteba\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1068\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1496\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090\"" } ] } }, "096f4670-071a-581d-8812-32c2e338a3eb": { "Event": { "uuid": "096f4670-071a-581d-8812-32c2e338a3eb", "info": "SystemHelpDesk MFC - Gofot (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"gofot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "ac7b7843-4308-5ec6-a6b6-3eb46ee104b5": { "Event": { "uuid": "ac7b7843-4308-5ec6-a6b6-3eb46ee104b5", "info": "SystemHelpDesk MFC - Gootkit (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"gootkit\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" } ] } }, "13d0649a-e6c0-5c6a-b63d-4dc038eb4d88": { "Event": { "uuid": "13d0649a-e6c0-5c6a-b63d-4dc038eb4d88", "info": "SystemHelpDesk MFC - Gozi (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"gozi\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" } ] } }, "911f7528-bf2c-5a02-8eb8-e28ccaf340ff": { "Event": { "uuid": "911f7528-bf2c-5a02-8eb8-e28ccaf340ff", "info": "SystemHelpDesk MFC - Goznym (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"goznym\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" } ] } }, "289e8f0f-c604-5f13-b866-fdcc7efeae3f": { "Event": { "uuid": "289e8f0f-c604-5f13-b866-fdcc7efeae3f", "info": "SystemHelpDesk MFC - Guildma (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"guildma\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1197\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "4a0626ac-0ae6-5ad9-bbef-5feb174d79f9": { "Event": { "uuid": "4a0626ac-0ae6-5ad9-bbef-5feb174d79f9", "info": "SystemHelpDesk MFC - Hack_a_tack (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"hack_a_tack\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "7af7364f-5382-5c2d-b8d8-fc1fd83b1204": { "Event": { "uuid": "7af7364f-5382-5c2d-b8d8-fc1fd83b1204", "info": "SystemHelpDesk MFC - Hafen (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"hafen\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "1a9a1f21-1ec9-592a-b133-043a3a18c3ab": { "Event": { "uuid": "1a9a1f21-1ec9-592a-b133-043a3a18c3ab", "info": "SystemHelpDesk MFC - Hav_rat (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"hav_rat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "39f411d1-84ff-52c9-83c0-056ff9b14746": { "Event": { "uuid": "39f411d1-84ff-52c9-83c0-056ff9b14746", "info": "SystemHelpDesk MFC - Hawkeyekeylogger (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"hawkeyekeylogger\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1115\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "5e825609-a46c-5d73-9682-30626178927d": { "Event": { "uuid": "5e825609-a46c-5d73-9682-30626178927d", "info": "SystemHelpDesk MFC - Hematite (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"hematite\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1574.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "fc1293b3-5072-57b9-a6be-9d675fa7b7e2": { "Event": { "uuid": "fc1293b3-5072-57b9-a6be-9d675fa7b7e2", "info": "SystemHelpDesk MFC - Hermes (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"hermes\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1070.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "f82494cd-01ea-5dce-b585-2e6d8d10295d": { "Event": { "uuid": "f82494cd-01ea-5dce-b585-2e6d8d10295d", "info": "SystemHelpDesk MFC - Hesv (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"hesv\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "733de091-e6b3-5a41-8593-7a7abb4a544c": { "Event": { "uuid": "733de091-e6b3-5a41-8593-7a7abb4a544c", "info": "SystemHelpDesk MFC - Hijacker (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"hijacker\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "7cef9c4b-5e64-574c-abe9-3d7c00e2fc18": { "Event": { "uuid": "7cef9c4b-5e64-574c-abe9-3d7c00e2fc18", "info": "SystemHelpDesk MFC - Hoax (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"hoax\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "705872b8-2caf-5fe5-9d32-37f9c939b8f8": { "Event": { "uuid": "705872b8-2caf-5fe5-9d32-37f9c939b8f8", "info": "SystemHelpDesk MFC - Hotbar (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"hotbar\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "88891cf2-db4b-50ab-a45c-56823d6ecd96": { "Event": { "uuid": "88891cf2-db4b-50ab-a45c-56823d6ecd96", "info": "SystemHelpDesk MFC - Hpdefender (Rogue Antivirus) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rogue Antivirus\"" }, { "name": "mfc:family=\"hpdefender\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1491.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" } ] } }, "89390860-61d1-53eb-a219-5caaeb46f46f": { "Event": { "uuid": "89390860-61d1-53eb-a219-5caaeb46f46f", "info": "SystemHelpDesk MFC - Hploki (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"hploki\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "6b6123d9-8185-5382-9701-1b6641dc8eba": { "Event": { "uuid": "6b6123d9-8185-5382-9701-1b6641dc8eba", "info": "SystemHelpDesk MFC - Hue (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"hue\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "16cb48c8-6deb-5342-81f4-f0af77f01c0d": { "Event": { "uuid": "16cb48c8-6deb-5342-81f4-f0af77f01c0d", "info": "SystemHelpDesk MFC - Hupigon (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"hupigon\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" } ] } }, "12eddd43-70fb-5ffa-8a45-5b5ab7961c64": { "Event": { "uuid": "12eddd43-70fb-5ffa-8a45-5b5ab7961c64", "info": "SystemHelpDesk MFC - Hworld (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"hworld\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "d540f92d-7148-561c-83d6-9fbf82aa8610": { "Event": { "uuid": "d540f92d-7148-561c-83d6-9fbf82aa8610", "info": "SystemHelpDesk MFC - Hydracrypt (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"hydracrypt\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "daaab3f6-ade5-5bb0-9a2c-2f07aeced9dc": { "Event": { "uuid": "daaab3f6-ade5-5bb0-9a2c-2f07aeced9dc", "info": "SystemHelpDesk MFC - Icecold_reloaded (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"icecold_reloaded\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1123\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "6147e4ae-2be0-5e0f-9160-16a98505dfb4": { "Event": { "uuid": "6147e4ae-2be0-5e0f-9160-16a98505dfb4", "info": "SystemHelpDesk MFC - Icedid (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"icedid\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" } ] } }, "8801b7a0-3b89-5472-a940-7b07d00fe98b": { "Event": { "uuid": "8801b7a0-3b89-5472-a940-7b07d00fe98b", "info": "SystemHelpDesk MFC - Icloader (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"icloader\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "7c5b0521-44fa-5335-8aec-6f90620a8346": { "Event": { "uuid": "7c5b0521-44fa-5335-8aec-6f90620a8346", "info": "SystemHelpDesk MFC - Indiloadz (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"indiloadz\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" } ] } }, "e0b334d2-5aa3-5063-b3ca-6bc6a6ffc298": { "Event": { "uuid": "e0b334d2-5aa3-5063-b3ca-6bc6a6ffc298", "info": "SystemHelpDesk MFC - Infector_ng_2004 (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"infector_ng_2004\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "909692c6-019b-58a6-85df-51896f21abc5": { "Event": { "uuid": "909692c6-019b-58a6-85df-51896f21abc5", "info": "SystemHelpDesk MFC - Installcore (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"installcore\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "d6df8d12-7cba-5f00-8055-2a18c5213d84": { "Event": { "uuid": "d6df8d12-7cba-5f00-8055-2a18c5213d84", "info": "SystemHelpDesk MFC - Installmonster (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"installmonster\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "9d82c606-86bb-55a3-9f00-e62c898b2322": { "Event": { "uuid": "9d82c606-86bb-55a3-9f00-e62c898b2322", "info": "SystemHelpDesk MFC - Institution_2004 (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"institution_2004\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "f468aa4a-c9f5-55ba-bb5b-9ea78ec13321": { "Event": { "uuid": "f468aa4a-c9f5-55ba-bb5b-9ea78ec13321", "info": "SystemHelpDesk MFC - Ipamor (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"ipamor\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "2a6b41cc-a968-59f7-be66-4424dd209c77": { "Event": { "uuid": "2a6b41cc-a968-59f7-be66-4424dd209c77", "info": "SystemHelpDesk MFC - Ircbot (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"ircbot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1046\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" } ] } }, "144164ab-2fe0-540e-a9b4-4c9d21be747a": { "Event": { "uuid": "144164ab-2fe0-540e-a9b4-4c9d21be747a", "info": "SystemHelpDesk MFC - Istartsurf (Browser Hijacker) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Browser Hijacker\"" }, { "name": "mfc:family=\"istartsurf\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "adedfcd3-546f-5020-926d-b97c2a214fce": { "Event": { "uuid": "adedfcd3-546f-5020-926d-b97c2a214fce", "info": "SystemHelpDesk MFC - Jacard (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"jacard\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "d83127ba-2e32-57cb-af29-bb2fc95c2db3": { "Event": { "uuid": "d83127ba-2e32-57cb-af29-bb2fc95c2db3", "info": "SystemHelpDesk MFC - Jaiko (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"jaiko\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "9fb0eafc-d9ef-5c92-8753-81bd9199cbfc": { "Event": { "uuid": "9fb0eafc-d9ef-5c92-8753-81bd9199cbfc", "info": "SystemHelpDesk MFC - Jbonblanc (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"jbonblanc\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "b04863b3-c751-514f-bd19-e67c1498b267": { "Event": { "uuid": "b04863b3-c751-514f-bd19-e67c1498b267", "info": "SystemHelpDesk MFC - Jeefo (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"jeefo\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "8df01636-b601-5ad9-84d9-61cf769326f3": { "Event": { "uuid": "8df01636-b601-5ad9-84d9-61cf769326f3", "info": "SystemHelpDesk MFC - Jimmy (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"jimmy\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1078.002\"" } ] } }, "ec59782d-5195-532e-8a52-8dc3bbd8ecc0": { "Event": { "uuid": "ec59782d-5195-532e-8a52-8dc3bbd8ecc0", "info": "SystemHelpDesk MFC - Johnnie (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"johnnie\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1046\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "a8308cb3-93f2-5b58-bac3-484c0dd17dff": { "Event": { "uuid": "a8308cb3-93f2-5b58-bac3-484c0dd17dff", "info": "SystemHelpDesk MFC - Joker (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"joker\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1404\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1418\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1437\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1412\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1432\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1636\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1411\"" } ] } }, "0c26ea4d-23e2-5c14-a5e1-347bbea452bc": { "Event": { "uuid": "0c26ea4d-23e2-5c14-a5e1-347bbea452bc", "info": "SystemHelpDesk MFC - Jps (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"jps\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "70dbaadb-3b26-5fa2-869f-5a810d04df5e": { "Event": { "uuid": "70dbaadb-3b26-5fa2-869f-5a810d04df5e", "info": "SystemHelpDesk MFC - Jps_virus_maker (Tool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Tool\"" }, { "name": "mfc:family=\"jps_virus_maker\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1587.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "17004073-6c28-5511-8425-00ba634c19b0": { "Event": { "uuid": "17004073-6c28-5511-8425-00ba634c19b0", "info": "SystemHelpDesk MFC - Juicypotato (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"juicypotato\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1134.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1068\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1548.002\"" } ] } }, "a5da6fca-068f-5a8c-a07b-fd568f2f8419": { "Event": { "uuid": "a5da6fca-068f-5a8c-a07b-fd568f2f8419", "info": "SystemHelpDesk MFC - Kaseya (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"kaseya\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1574.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1199\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1190\"" } ] } }, "4b75d14e-71ed-5c61-ab8a-fe1f31681177": { "Event": { "uuid": "4b75d14e-71ed-5c61-ab8a-fe1f31681177", "info": "SystemHelpDesk MFC - Kasidet (Pos Malware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pos Malware\"" }, { "name": "mfc:family=\"kasidet\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.002\"" } ] } }, "e0ef7276-80e7-5b94-a793-eabc4d6d8b8b": { "Event": { "uuid": "e0ef7276-80e7-5b94-a793-eabc4d6d8b8b", "info": "SystemHelpDesk MFC - Kelihos (Spam Bot) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Spam Bot\"" }, { "name": "mfc:family=\"kelihos\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1114.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1560.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" } ] } }, "65611c62-b293-55a0-9270-893397991c6c": { "Event": { "uuid": "65611c62-b293-55a0-9270-893397991c6c", "info": "SystemHelpDesk MFC - Khalesi (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"khalesi\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "b04f999d-372a-5ae3-beea-21fb5364a4f7": { "Event": { "uuid": "b04f999d-372a-5ae3-beea-21fb5364a4f7", "info": "SystemHelpDesk MFC - Killdisk (Wiper) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Wiper\"" }, { "name": "mfc:family=\"killdisk\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1561.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1561.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1070.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1078.002\"" } ] } }, "ba0fe17c-2f4b-554d-a536-30ce427e8420": { "Event": { "uuid": "ba0fe17c-2f4b-554d-a536-30ce427e8420", "info": "SystemHelpDesk MFC - Killproc (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"killproc\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1057\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1489\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1106\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "335f0c0e-3a6f-5831-9cc8-629bc4824aa2": { "Event": { "uuid": "335f0c0e-3a6f-5831-9cc8-629bc4824aa2", "info": "SystemHelpDesk MFC - Kingsoft (Advanced Threat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Advanced Threat\"" }, { "name": "mfc:family=\"kingsoft\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1546.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" } ] } }, "85318020-c848-5a01-b979-5c49ba1cd824": { "Event": { "uuid": "85318020-c848-5a01-b979-5c49ba1cd824", "info": "SystemHelpDesk MFC - Kolab (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"kolab\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "44495006-26da-5030-a2be-4235245f79ed": { "Event": { "uuid": "44495006-26da-5030-a2be-4235245f79ed", "info": "SystemHelpDesk MFC - Kolabc (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"kolabc\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1489\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" } ] } }, "4c4d751c-0a33-550a-a4f7-19133ca3b63a": { "Event": { "uuid": "4c4d751c-0a33-550a-a4f7-19133ca3b63a", "info": "SystemHelpDesk MFC - Koobface (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"koobface\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "ca954212-61b5-513e-b656-b21680538e69": { "Event": { "uuid": "ca954212-61b5-513e-b656-b21680538e69", "info": "SystemHelpDesk MFC - Kovter (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"kovter\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "b2d37e28-876b-59f9-8011-8fcd6ebcada9": { "Event": { "uuid": "b2d37e28-876b-59f9-8011-8fcd6ebcada9", "info": "SystemHelpDesk MFC - Kuaiba (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"kuaiba\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "763b73ab-b3b8-517d-8fec-4301648054ad": { "Event": { "uuid": "763b73ab-b3b8-517d-8fec-4301648054ad", "info": "SystemHelpDesk MFC - Kuaizip (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"kuaizip\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "fd669d99-0c6b-50fa-87a2-b8e5eda3c06a": { "Event": { "uuid": "fd669d99-0c6b-50fa-87a2-b8e5eda3c06a", "info": "SystemHelpDesk MFC - Kuzitui (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"kuzitui\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "3982047b-a60f-5f13-9c07-995906578d86": { "Event": { "uuid": "3982047b-a60f-5f13-9c07-995906578d86", "info": "SystemHelpDesk MFC - Lamer (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"lamer\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" } ] } }, "46207369-28ee-5298-a55b-578822965d6b": { "Event": { "uuid": "46207369-28ee-5298-a55b-578822965d6b", "info": "SystemHelpDesk MFC - Lanfiltrator (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"lanfiltrator\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1046\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1087.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1135\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "a56a85b4-eb44-582a-b977-a85463ee1b79": { "Event": { "uuid": "a56a85b4-eb44-582a-b977-a85463ee1b79", "info": "SystemHelpDesk MFC - Laqma (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"laqma\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1014\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "323b4114-bec0-56f4-a0ac-5165f5023f7b": { "Event": { "uuid": "323b4114-bec0-56f4-a0ac-5165f5023f7b", "info": "SystemHelpDesk MFC - Lethic (Spam Bot) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Spam Bot\"" }, { "name": "mfc:family=\"lethic\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "bd8b2f6b-12e4-564a-b369-f68623b3edda": { "Event": { "uuid": "bd8b2f6b-12e4-564a-b369-f68623b3edda", "info": "SystemHelpDesk MFC - Linkury (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"linkury\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1546.015\"" } ] } }, "a4d76989-fbbe-5984-acc8-722aa54afefb": { "Event": { "uuid": "a4d76989-fbbe-5984-acc8-722aa54afefb", "info": "SystemHelpDesk MFC - Llac (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"llac\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "869bb830-7f10-5a98-9376-f13aa954c127": { "Event": { "uuid": "869bb830-7f10-5a98-9376-f13aa954c127", "info": "SystemHelpDesk MFC - Lmir (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"lmir\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "796b912c-4b0d-5fb6-81a8-8cd2acff503b": { "Event": { "uuid": "796b912c-4b0d-5fb6-81a8-8cd2acff503b", "info": "SystemHelpDesk MFC - Loadmoney (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"loadmoney\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "9e96b77b-225f-5435-aa11-6ba6e0a02c7a": { "Event": { "uuid": "9e96b77b-225f-5435-aa11-6ba6e0a02c7a", "info": "SystemHelpDesk MFC - Lockbit (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"lockbit\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1489\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1484.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "63864939-5347-5ba7-93dc-1a4d9aa7eabe": { "Event": { "uuid": "63864939-5347-5ba7-93dc-1a4d9aa7eabe", "info": "SystemHelpDesk MFC - Locky (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"locky\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "c0b1bf50-df59-58a4-bcd6-3807c3bea060": { "Event": { "uuid": "c0b1bf50-df59-58a4-bcd6-3807c3bea060", "info": "SystemHelpDesk MFC - Lokibot (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"lokibot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "a1a5adfe-64ff-5b88-aa4c-308245570bbe": { "Event": { "uuid": "a1a5adfe-64ff-5b88-aa4c-308245570bbe", "info": "SystemHelpDesk MFC - Lolbot (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"lolbot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "96c3080e-4754-54e2-abfa-7bf9d02139af": { "Event": { "uuid": "96c3080e-4754-54e2-abfa-7bf9d02139af", "info": "SystemHelpDesk MFC - Lost_door (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"lost_door\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1123\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "1bd3fa1b-37d8-5029-9561-80c7ca107af3": { "Event": { "uuid": "1bd3fa1b-37d8-5029-9561-80c7ca107af3", "info": "SystemHelpDesk MFC - Lotoor (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"lotoor\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1444\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1404\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1426\"" } ] } }, "1e28db66-e1d8-55dd-9f01-66e4d38d9f3c": { "Event": { "uuid": "1e28db66-e1d8-55dd-9f01-66e4d38d9f3c", "info": "SystemHelpDesk MFC - Ludbaruma (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"ludbaruma\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "9e104faa-64fa-5f66-a16c-2720a4148352": { "Event": { "uuid": "9e104faa-64fa-5f66-a16c-2720a4148352", "info": "SystemHelpDesk MFC - Maener (Cryptominer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Cryptominer\"" }, { "name": "mfc:family=\"maener\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1496\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "27170deb-1983-5651-a992-405214e87c12": { "Event": { "uuid": "27170deb-1983-5651-a992-405214e87c12", "info": "SystemHelpDesk MFC - Magania (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"magania\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "9b19d214-071e-5d9b-9672-e69dbca9c791": { "Event": { "uuid": "9b19d214-071e-5d9b-9672-e69dbca9c791", "info": "SystemHelpDesk MFC - Mailru (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"mailru\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "708fe03f-2b77-5cb6-ac8a-f5ee4762aefd": { "Event": { "uuid": "708fe03f-2b77-5cb6-ac8a-f5ee4762aefd", "info": "SystemHelpDesk MFC - Mansabo (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"mansabo\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1057\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "245b786f-ebcb-5241-8289-0d2b20876992": { "Event": { "uuid": "245b786f-ebcb-5241-8289-0d2b20876992", "info": "SystemHelpDesk MFC - Mekotio (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"mekotio\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "6f007b34-2a48-55e7-ad18-1e05465a7ff3": { "Event": { "uuid": "6f007b34-2a48-55e7-ad18-1e05465a7ff3", "info": "SystemHelpDesk MFC - Memery (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"memery\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "468a4d64-c4f9-5811-a995-b72846106509": { "Event": { "uuid": "468a4d64-c4f9-5811-a995-b72846106509", "info": "SystemHelpDesk MFC - Mepaow (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"mepaow\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "08d2ef70-3e4a-500a-85a8-360aace55719": { "Event": { "uuid": "08d2ef70-3e4a-500a-85a8-360aace55719", "info": "SystemHelpDesk MFC - Messiah (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"messiah\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "7fd5b454-b0f5-5251-987a-78ac089d9fbe": { "Event": { "uuid": "7fd5b454-b0f5-5251-987a-78ac089d9fbe", "info": "SystemHelpDesk MFC - Meterpreter (Hacktool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Hacktool\"" }, { "name": "mfc:family=\"meterpreter\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "28770748-8a0c-5b59-bac8-58eee8a7c8ca": { "Event": { "uuid": "28770748-8a0c-5b59-bac8-58eee8a7c8ca", "info": "SystemHelpDesk MFC - Midie (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"midie\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "3dd266fe-e059-5708-bd07-4607015052c7": { "Event": { "uuid": "3dd266fe-e059-5708-bd07-4607015052c7", "info": "SystemHelpDesk MFC - Mikey (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"mikey\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "7b5719e3-86d4-56fc-af63-1b5c496f2eea": { "Event": { "uuid": "7b5719e3-86d4-56fc-af63-1b5c496f2eea", "info": "SystemHelpDesk MFC - Mintluks (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"mintluks\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "38657c08-ad26-5caa-9da6-3b8179e8f07c": { "Event": { "uuid": "38657c08-ad26-5caa-9da6-3b8179e8f07c", "info": "SystemHelpDesk MFC - Mira (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"mira\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "30c5d991-d9e3-54ea-aa2b-4b5d7a4eef68": { "Event": { "uuid": "30c5d991-d9e3-54ea-aa2b-4b5d7a4eef68", "info": "SystemHelpDesk MFC - Mirai (Botnet) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Botnet\"" }, { "name": "mfc:family=\"mirai\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1110.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1499.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1046\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "51da948d-5963-596a-84bc-cdaba8befc0a": { "Event": { "uuid": "51da948d-5963-596a-84bc-cdaba8befc0a", "info": "SystemHelpDesk MFC - Mogoogwi (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"mogoogwi\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "e55a3cd8-bfa7-5aea-80d3-ebb9d7115b5f": { "Event": { "uuid": "e55a3cd8-bfa7-5aea-80d3-ebb9d7115b5f", "info": "SystemHelpDesk MFC - Msilperseus (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"msilperseus\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "a6b90b77-23a4-5c68-8a1e-8b31b6819b82": { "Event": { "uuid": "a6b90b77-23a4-5c68-8a1e-8b31b6819b82", "info": "SystemHelpDesk MFC - Mudrop (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"mudrop\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1070.004\"" } ] } }, "f76cc08a-1199-573a-ac21-4482770b2293": { "Event": { "uuid": "f76cc08a-1199-573a-ac21-4482770b2293", "info": "SystemHelpDesk MFC - Multiplug (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"multiplug\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "4012da7c-6ed2-5c4e-8cc0-6750e93a9c07": { "Event": { "uuid": "4012da7c-6ed2-5c4e-8cc0-6750e93a9c07", "info": "SystemHelpDesk MFC - Murofet (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"murofet\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1102.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "75642f40-65b1-542f-9435-3fb6fb2f904c": { "Event": { "uuid": "75642f40-65b1-542f-9435-3fb6fb2f904c", "info": "SystemHelpDesk MFC - Mydoom (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"mydoom\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1114.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "23c04a0d-ba61-524d-a434-f4b9dabecf8a": { "Event": { "uuid": "23c04a0d-ba61-524d-a434-f4b9dabecf8a", "info": "SystemHelpDesk MFC - Mywebsearch (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"mywebsearch\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1036.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "84168cd3-9727-5a34-9891-608ca19c148c": { "Event": { "uuid": "84168cd3-9727-5a34-9891-608ca19c148c", "info": "SystemHelpDesk MFC - Nakoctb (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"nakoctb\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1489\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" } ] } }, "426b00c3-ceb3-58ff-9c3d-ea8347e54d66": { "Event": { "uuid": "426b00c3-ceb3-58ff-9c3d-ea8347e54d66", "info": "SystemHelpDesk MFC - Nanobot (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"nanobot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1573.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "42fe870f-41d2-53f2-af42-4fc4534aab15": { "Event": { "uuid": "42fe870f-41d2-53f2-af42-4fc4534aab15", "info": "SystemHelpDesk MFC - Nanocore (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"nanocore\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "647a96aa-fc38-5985-b231-d0009ab19461": { "Event": { "uuid": "647a96aa-fc38-5985-b231-d0009ab19461", "info": "SystemHelpDesk MFC - Necurs (Spam Bot) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Spam Bot\"" }, { "name": "mfc:family=\"necurs\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1014\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" } ] } }, "00c81f2e-0f84-59fd-a8d9-b0eb8c4ef2a1": { "Event": { "uuid": "00c81f2e-0f84-59fd-a8d9-b0eb8c4ef2a1", "info": "SystemHelpDesk MFC - Nemesis (Bootkit) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Bootkit\"" }, { "name": "mfc:family=\"nemesis\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1542.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "71690d0b-b779-5ca6-8cbd-435825c5a498": { "Event": { "uuid": "71690d0b-b779-5ca6-8cbd-435825c5a498", "info": "SystemHelpDesk MFC - Neoreklami (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"neoreklami\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.009\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "3e859413-6941-5076-b29e-66818d81c394": { "Event": { "uuid": "3e859413-6941-5076-b29e-66818d81c394", "info": "SystemHelpDesk MFC - Neshta (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"neshta\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "a351c7d4-3b44-5a56-9173-1ec2cab95466": { "Event": { "uuid": "a351c7d4-3b44-5a56-9173-1ec2cab95466", "info": "SystemHelpDesk MFC - Netbus (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"netbus\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" } ] } }, "b3c6f248-26f8-570d-a948-2b294f99c7ee": { "Event": { "uuid": "b3c6f248-26f8-570d-a948-2b294f99c7ee", "info": "SystemHelpDesk MFC - Netsky (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"netsky\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1114.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1560.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" } ] } }, "aa140c1b-4008-535d-b8c6-e8345f7e08cb": { "Event": { "uuid": "aa140c1b-4008-535d-b8c6-e8345f7e08cb", "info": "SystemHelpDesk MFC - Netsphere (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"netsphere\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "61bc496d-bd8d-593e-9e0e-c4ec93ea5bbf": { "Event": { "uuid": "61bc496d-bd8d-593e-9e0e-c4ec93ea5bbf", "info": "SystemHelpDesk MFC - Netwire (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"netwire\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090.001\"" } ] } }, "22788544-40d6-5293-9d22-b04b72a38728": { "Event": { "uuid": "22788544-40d6-5293-9d22-b04b72a38728", "info": "SystemHelpDesk MFC - Netwiredrc (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"netwiredrc\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" } ] } }, "200ad6b1-dcd8-5369-b914-25283242bbfd": { "Event": { "uuid": "200ad6b1-dcd8-5369-b914-25283242bbfd", "info": "SystemHelpDesk MFC - Neurevt (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"neurevt\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "8639da5a-662a-51e3-90d3-00d9ee9d5d5f": { "Event": { "uuid": "8639da5a-662a-51e3-90d3-00d9ee9d5d5f", "info": "SystemHelpDesk MFC - Neutrinopos (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"neutrinopos\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "e42810b9-5f36-5c26-b784-82834f7f8663": { "Event": { "uuid": "e42810b9-5f36-5c26-b784-82834f7f8663", "info": "SystemHelpDesk MFC - Ngrbot (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"ngrbot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "979e2b3a-995e-5ca9-91e6-3408457a5a94": { "Event": { "uuid": "979e2b3a-995e-5ca9-91e6-3408457a5a94", "info": "SystemHelpDesk MFC - Nisloder (Loader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Loader\"" }, { "name": "mfc:family=\"nisloder\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" } ] } }, "e5a8ad76-4509-53e2-9a80-60adbbceeb36": { "Event": { "uuid": "e5a8ad76-4509-53e2-9a80-60adbbceeb36", "info": "SystemHelpDesk MFC - Nitol (Ddos Bot) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ddos Bot\"" }, { "name": "mfc:family=\"nitol\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "663c1282-3f4e-55cd-a230-19182e90cac4": { "Event": { "uuid": "663c1282-3f4e-55cd-a230-19182e90cac4", "info": "SystemHelpDesk MFC - Njrat (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"njrat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1123\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" } ] } }, "9ffea771-f277-5765-8925-598feba7f24f": { "Event": { "uuid": "9ffea771-f277-5765-8925-598feba7f24f", "info": "SystemHelpDesk MFC - Noobyprotect (Packer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Packer\"" }, { "name": "mfc:family=\"noobyprotect\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1620\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1129\"" } ] } }, "6a684c7f-c5c4-5e45-ba4a-c1659bc6cd40": { "Event": { "uuid": "6a684c7f-c5c4-5e45-ba4a-c1659bc6cd40", "info": "SystemHelpDesk MFC - Noon (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"noon\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "5f65228a-0199-5a05-bcfe-2422d6ae5327": { "Event": { "uuid": "5f65228a-0199-5a05-bcfe-2422d6ae5327", "info": "SystemHelpDesk MFC - Nuclear_rat (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"nuclear_rat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1123\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "4623f4ee-b069-5e56-833a-88f83f4865d8": { "Event": { "uuid": "4623f4ee-b069-5e56-833a-88f83f4865d8", "info": "SystemHelpDesk MFC - Nymaim (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"nymaim\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "e4d11bba-b876-5791-a69b-e09eebaa0521": { "Event": { "uuid": "e4d11bba-b876-5791-a69b-e09eebaa0521", "info": "SystemHelpDesk MFC - Nymeria (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"nymeria\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" } ] } }, "af4822cc-7d27-5aa7-a89b-108116ff0d57": { "Event": { "uuid": "af4822cc-7d27-5aa7-a89b-108116ff0d57", "info": "SystemHelpDesk MFC - Obsidium (Packer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Packer\"" }, { "name": "mfc:family=\"obsidium\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1622\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1140\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "4ee8dc6c-452d-5e10-8ced-8c85cc0a0019": { "Event": { "uuid": "4ee8dc6c-452d-5e10-8ced-8c85cc0a0019", "info": "SystemHelpDesk MFC - Occamy (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"occamy\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "27c4f7ba-db18-5c0b-8e93-c8e7563a24ee": { "Event": { "uuid": "27c4f7ba-db18-5c0b-8e93-c8e7563a24ee", "info": "SystemHelpDesk MFC - Olgames (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"olgames\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" } ] } }, "230d7397-9657-560f-8afd-66883f52facb": { "Event": { "uuid": "230d7397-9657-560f-8afd-66883f52facb", "info": "SystemHelpDesk MFC - Omaneat (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"omaneat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "c25d031e-27c4-57c3-bf9b-45e6db311648": { "Event": { "uuid": "c25d031e-27c4-57c3-bf9b-45e6db311648", "info": "SystemHelpDesk MFC - Opencandy (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"opencandy\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "f5b7d5b1-2609-5b10-87e6-bf5fae30d005": { "Event": { "uuid": "f5b7d5b1-2609-5b10-87e6-bf5fae30d005", "info": "SystemHelpDesk MFC - Opensupdater (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"opensupdater\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1553.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "6745649b-cbdf-56a7-b20e-28d374d1a575": { "Event": { "uuid": "6745649b-cbdf-56a7-b20e-28d374d1a575", "info": "SystemHelpDesk MFC - Orcus (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"orcus\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "3cde562c-23de-52bb-aa7b-f0c9c78af262": { "Event": { "uuid": "3cde562c-23de-52bb-aa7b-f0c9c78af262", "info": "SystemHelpDesk MFC - Palevo (Botnet) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Botnet\"" }, { "name": "mfc:family=\"palevo\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" } ] } }, "93ad1fc5-fb19-5532-8035-316f8b53297b": { "Event": { "uuid": "93ad1fc5-fb19-5532-8035-316f8b53297b", "info": "SystemHelpDesk MFC - Parite (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"parite\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1485\"" } ] } }, "dc75ea7e-d085-598e-9342-c706177e407a": { "Event": { "uuid": "dc75ea7e-d085-598e-9342-c706177e407a", "info": "SystemHelpDesk MFC - Petya (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"petya\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1047\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1561.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1569.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" } ] } }, "593005fa-83b3-5e2b-b1c1-4db0a34c083f": { "Event": { "uuid": "593005fa-83b3-5e2b-b1c1-4db0a34c083f", "info": "SystemHelpDesk MFC - Phorpiex (Botnet) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Botnet\"" }, { "name": "mfc:family=\"phorpiex\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1115\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1496\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" } ] } }, "a65e8cb6-d6a2-5296-8d3b-52541e443695": { "Event": { "uuid": "a65e8cb6-d6a2-5296-8d3b-52541e443695", "info": "SystemHelpDesk MFC - Phpw (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"phpw\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "d1852471-3932-51f1-9641-3dbe825e9660": { "Event": { "uuid": "d1852471-3932-51f1-9641-3dbe825e9660", "info": "SystemHelpDesk MFC - Picsys (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"picsys\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "438a801d-8772-5fef-b6b9-8ef8b4f5ea21": { "Event": { "uuid": "438a801d-8772-5fef-b6b9-8ef8b4f5ea21", "info": "SystemHelpDesk MFC - Pikabot (Loader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Loader\"" }, { "name": "mfc:family=\"pikabot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "4488a4c8-1e29-5df2-8b26-af4ff44137c2": { "Event": { "uuid": "4488a4c8-1e29-5df2-8b26-af4ff44137c2", "info": "SystemHelpDesk MFC - Pioneer (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"pioneer\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "bec20126-d939-574c-b171-ef3d14a2d5c2": { "Event": { "uuid": "bec20126-d939-574c-b171-ef3d14a2d5c2", "info": "SystemHelpDesk MFC - Playtech (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"playtech\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "235335eb-cde9-5f3d-a270-e4a3317b7563": { "Event": { "uuid": "235335eb-cde9-5f3d-a270-e4a3317b7563", "info": "SystemHelpDesk MFC - Plugx (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"plugx\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1574.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" } ] } }, "bd969a78-9ff7-5a79-a1cb-30ce094dfe72": { "Event": { "uuid": "bd969a78-9ff7-5a79-a1cb-30ce094dfe72", "info": "SystemHelpDesk MFC - Pluto (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"pluto\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "ff3d125a-b9e6-5073-93b6-36ff5f03739a": { "Event": { "uuid": "ff3d125a-b9e6-5073-93b6-36ff5f03739a", "info": "SystemHelpDesk MFC - Poison (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"poison\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "84906282-13c6-523a-9c96-830c77a888f3": { "Event": { "uuid": "84906282-13c6-523a-9c96-830c77a888f3", "info": "SystemHelpDesk MFC - Pony (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"pony\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1552.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" } ] } }, "4d19d7be-3064-52fa-b3ab-1872ed1fc031": { "Event": { "uuid": "4d19d7be-3064-52fa-b3ab-1872ed1fc031", "info": "SystemHelpDesk MFC - Ponystealer (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"ponystealer\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1552.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "3a8f4175-2cd5-56b3-8448-3831374d4c0f": { "Event": { "uuid": "3a8f4175-2cd5-56b3-8448-3831374d4c0f", "info": "SystemHelpDesk MFC - Powp (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"powp\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "440598ff-5733-5c58-aef7-a11765244f8f": { "Event": { "uuid": "440598ff-5733-5c58-aef7-a11765244f8f", "info": "SystemHelpDesk MFC - Predator (Spyware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Spyware\"" }, { "name": "mfc:family=\"predator\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1190\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1203\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1068\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1123\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "b070e18f-a9e0-5a20-8253-e9a9ceefd0bd": { "Event": { "uuid": "b070e18f-a9e0-5a20-8253-e9a9ceefd0bd", "info": "SystemHelpDesk MFC - Prepscram (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"prepscram\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "75d42d20-05ef-526b-aab1-8415412c4697": { "Event": { "uuid": "75d42d20-05ef-526b-aab1-8415412c4697", "info": "SystemHelpDesk MFC - Presenoker (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"presenoker\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "36ed6f96-841d-5e75-9274-b33f1fcc6800": { "Event": { "uuid": "36ed6f96-841d-5e75-9274-b33f1fcc6800", "info": "SystemHelpDesk MFC - Prjraptor (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"prjraptor\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1057\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "abeb7b3f-8b40-5fdc-8bbd-b43a52ef5274": { "Event": { "uuid": "abeb7b3f-8b40-5fdc-8bbd-b43a52ef5274", "info": "SystemHelpDesk MFC - Processhijack (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"processhijack\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "ed00ae36-f708-52cd-a603-c5af353491bc": { "Event": { "uuid": "ed00ae36-f708-52cd-a603-c5af353491bc", "info": "SystemHelpDesk MFC - Pterodo (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"pterodo\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" } ] } }, "d3fcb90f-1171-512f-bd90-52d1e00106e5": { "Event": { "uuid": "d3fcb90f-1171-512f-bd90-52d1e00106e5", "info": "SystemHelpDesk MFC - Pykspa (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"pykspa\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "bd9c8aa6-df9c-592f-b97a-4af68c0e9b8e": { "Event": { "uuid": "bd9c8aa6-df9c-592f-b97a-4af68c0e9b8e", "info": "SystemHelpDesk MFC - Pynamer (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"pynamer\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.006\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "c0c6b309-e114-5e65-a629-c52d36477fd9": { "Event": { "uuid": "c0c6b309-e114-5e65-a629-c52d36477fd9", "info": "SystemHelpDesk MFC - Qbot (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"qbot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1078\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "5314c477-26ad-5e0e-94e1-eb4165be59d2": { "Event": { "uuid": "5314c477-26ad-5e0e-94e1-eb4165be59d2", "info": "SystemHelpDesk MFC - Qhost (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"qhost\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1565.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" } ] } }, "bd313e47-233a-5482-a5f0-523478663c8a": { "Event": { "uuid": "bd313e47-233a-5482-a5f0-523478663c8a", "info": "SystemHelpDesk MFC - Qjwmonkey (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"qjwmonkey\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "791d0fdc-6be6-58d2-b886-f3891dc49978": { "Event": { "uuid": "791d0fdc-6be6-58d2-b886-f3891dc49978", "info": "SystemHelpDesk MFC - Qqpass (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"qqpass\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" } ] } }, "343a3dee-f72b-574c-a153-db3ed77baefd": { "Event": { "uuid": "343a3dee-f72b-574c-a153-db3ed77baefd", "info": "SystemHelpDesk MFC - Quasar (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"quasar\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1123\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090.001\"" } ] } }, "b2d6e1e9-36bf-5ff9-9d12-5b931e249adb": { "Event": { "uuid": "b2d6e1e9-36bf-5ff9-9d12-5b931e249adb", "info": "SystemHelpDesk MFC - Quasarrat (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"quasarrat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1573.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "e76e1992-b46f-5f92-ac0f-ad0d73ebcdf9": { "Event": { "uuid": "e76e1992-b46f-5f92-ac0f-ad0d73ebcdf9", "info": "SystemHelpDesk MFC - Ramnit (Worm Banker) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm Banker\"" }, { "name": "mfc:family=\"ramnit\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "2712e579-c57e-5058-bd92-06fe2fff5d03": { "Event": { "uuid": "2712e579-c57e-5058-bd92-06fe2fff5d03", "info": "SystemHelpDesk MFC - Razy (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"razy\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1115\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "8afc86f6-dcff-55f3-bc02-edaedbe05613": { "Event": { "uuid": "8afc86f6-dcff-55f3-bc02-edaedbe05613", "info": "SystemHelpDesk MFC - Rbot (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"rbot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1110.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "e471eb75-fdc3-578a-9246-821bb001104e": { "Event": { "uuid": "e471eb75-fdc3-578a-9246-821bb001104e", "info": "SystemHelpDesk MFC - Rebhip (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"rebhip\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1564.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "b0d6e0e7-8575-524c-9f77-023572e7fb68": { "Event": { "uuid": "b0d6e0e7-8575-524c-9f77-023572e7fb68", "info": "SystemHelpDesk MFC - Reconyc (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"reconyc\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" } ] } }, "be5c412f-e525-508a-a93b-3a5c3e46319e": { "Event": { "uuid": "be5c412f-e525-508a-a93b-3a5c3e46319e", "info": "SystemHelpDesk MFC - Regrun (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"regrun\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "c9704c6c-65ef-56f4-ab50-3b63b2d4c75c": { "Event": { "uuid": "c9704c6c-65ef-56f4-ab50-3b63b2d4c75c", "info": "SystemHelpDesk MFC - Regsup (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"regsup\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" } ] } }, "cb15b3c9-04ff-5b46-92c6-8a941877d988": { "Event": { "uuid": "cb15b3c9-04ff-5b46-92c6-8a941877d988", "info": "SystemHelpDesk MFC - Relevantknowledge (Spyware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Spyware\"" }, { "name": "mfc:family=\"relevantknowledge\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "fe4dd00e-6fee-508f-9f83-8288dc057a48": { "Event": { "uuid": "fe4dd00e-6fee-508f-9f83-8288dc057a48", "info": "SystemHelpDesk MFC - Remcos (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"remcos\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "83213c80-a7a5-5d96-a972-14c5fbdebd87": { "Event": { "uuid": "83213c80-a7a5-5d96-a972-14c5fbdebd87", "info": "SystemHelpDesk MFC - Remoteadmin (Hacktool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Hacktool\"" }, { "name": "mfc:family=\"remoteadmin\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1219\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" } ] } }, "136f6130-47f0-561f-b703-0df6d60c332a": { "Event": { "uuid": "136f6130-47f0-561f-b703-0df6d60c332a", "info": "SystemHelpDesk MFC - Revetrat (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"revetrat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "c313ec80-18b2-5ee0-88ae-19d75026f745": { "Event": { "uuid": "c313ec80-18b2-5ee0-88ae-19d75026f745", "info": "SystemHelpDesk MFC - Ribaj (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"ribaj\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1539\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "180fb640-41e7-526a-9ba8-eacd899b757a": { "Event": { "uuid": "180fb640-41e7-526a-9ba8-eacd899b757a", "info": "SystemHelpDesk MFC - Rodecap (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"rodecap\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" } ] } }, "d661fb38-f555-5611-91ab-95d5571693f7": { "Event": { "uuid": "d661fb38-f555-5611-91ab-95d5571693f7", "info": "SystemHelpDesk MFC - Rozena (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"rozena\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "a614a74f-8233-5e14-9426-8e1faf0c7ec0": { "Event": { "uuid": "a614a74f-8233-5e14-9426-8e1faf0c7ec0", "info": "SystemHelpDesk MFC - Rubinurd (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"rubinurd\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1203\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "5fd638cd-5f74-52a8-8dfd-e8bedd388c38": { "Event": { "uuid": "5fd638cd-5f74-52a8-8dfd-e8bedd388c38", "info": "SystemHelpDesk MFC - Ruskill (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"ruskill\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "a0bb4620-2415-5dae-bdde-6714c7bd1bef": { "Event": { "uuid": "a0bb4620-2415-5dae-bdde-6714c7bd1bef", "info": "SystemHelpDesk MFC - Rustock (Advanced Threat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Advanced Threat\"" }, { "name": "mfc:family=\"rustock\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1014\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1114.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" } ] } }, "dedb05a3-fe8e-5296-9860-16d2028a40a6": { "Event": { "uuid": "dedb05a3-fe8e-5296-9860-16d2028a40a6", "info": "SystemHelpDesk MFC - Ryuk (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"ryuk\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1068\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "af041302-5cfc-52ee-b486-c1df43980638": { "Event": { "uuid": "af041302-5cfc-52ee-b486-c1df43980638", "info": "SystemHelpDesk MFC - Safebytes (Rogueware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rogueware\"" }, { "name": "mfc:family=\"safebytes\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1491.001\"" } ] } }, "7c13dbd9-6cbe-508a-ba29-b07023269774": { "Event": { "uuid": "7c13dbd9-6cbe-508a-ba29-b07023269774", "info": "SystemHelpDesk MFC - Salgorea (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"salgorea\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1574.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "d49be135-bf49-5b31-8e13-154346da6b10": { "Event": { "uuid": "d49be135-bf49-5b31-8e13-154346da6b10", "info": "SystemHelpDesk MFC - Sality (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"sality\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1080\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" } ] } }, "26debb87-a3b5-51a1-a37a-b3a42c567ca8": { "Event": { "uuid": "26debb87-a3b5-51a1-a37a-b3a42c567ca8", "info": "SystemHelpDesk MFC - Scar (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"scar\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "924cfc39-1b5c-5e92-9cb4-7964be00eb08": { "Event": { "uuid": "924cfc39-1b5c-5e92-9cb4-7964be00eb08", "info": "SystemHelpDesk MFC - Scarab (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"scarab\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "dbce3790-dbc1-5de6-a207-4e8a22c1dc44": { "Event": { "uuid": "dbce3790-dbc1-5de6-a207-4e8a22c1dc44", "info": "SystemHelpDesk MFC - Scarsi (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"scarsi\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "a02c0ec2-bf71-5bd9-9ffa-8a74ca585063": { "Event": { "uuid": "a02c0ec2-bf71-5bd9-9ffa-8a74ca585063", "info": "SystemHelpDesk MFC - Schoolbus (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"schoolbus\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" } ] } }, "9a899556-7296-5a22-b207-fc57ef4049fd": { "Event": { "uuid": "9a899556-7296-5a22-b207-fc57ef4049fd", "info": "SystemHelpDesk MFC - Screenconnect (Hacktool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Hacktool\"" }, { "name": "mfc:family=\"screenconnect\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1219\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1190\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "1a761e91-7c01-5df9-b3cd-75205d87e26a": { "Event": { "uuid": "1a761e91-7c01-5df9-b3cd-75205d87e26a", "info": "SystemHelpDesk MFC - Sdbot (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"sdbot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1046\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498.001\"" } ] } }, "f7fc6ca9-31e5-5151-860e-aacf3f677efc": { "Event": { "uuid": "f7fc6ca9-31e5-5151-860e-aacf3f677efc", "info": "SystemHelpDesk MFC - Seed (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"seed\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1036.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "cb9bb0ee-a361-5a88-b1fe-40d3e3d6e64d": { "Event": { "uuid": "cb9bb0ee-a361-5a88-b1fe-40d3e3d6e64d", "info": "SystemHelpDesk MFC - Serenity_rat (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"serenity_rat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "0b36bae8-c20f-551c-a1fd-acd997076574": { "Event": { "uuid": "0b36bae8-c20f-551c-a1fd-acd997076574", "info": "SystemHelpDesk MFC - Sfone (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"sfone\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "bb7a2829-2bc0-51d9-947c-2c6a8a2430b4": { "Event": { "uuid": "bb7a2829-2bc0-51d9-947c-2c6a8a2430b4", "info": "SystemHelpDesk MFC - Shade (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"shade\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "d64fcb4f-166d-5e9d-8c15-b35cf4b5e2cf": { "Event": { "uuid": "d64fcb4f-166d-5e9d-8c15-b35cf4b5e2cf", "info": "SystemHelpDesk MFC - Shadowbrokers (Advanced Threat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Advanced Threat\"" }, { "name": "mfc:family=\"shadowbrokers\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1068\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.006\"" } ] } }, "db8da238-0a3c-54bb-bad7-7580b24c0465": { "Event": { "uuid": "db8da238-0a3c-54bb-bad7-7580b24c0465", "info": "SystemHelpDesk MFC - Shakblades (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"shakblades\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "c011b6c6-bd13-5e96-940c-b5317b6af213": { "Event": { "uuid": "c011b6c6-bd13-5e96-940c-b5317b6af213", "info": "SystemHelpDesk MFC - Shelma (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"shelma\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "92f4d0e0-ef71-5058-a191-2d9738cd68e1": { "Event": { "uuid": "92f4d0e0-ef71-5058-a191-2d9738cd68e1", "info": "SystemHelpDesk MFC - Shiotob (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"shiotob\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "455220a1-c13d-57cc-95c2-9649d78eaaaa": { "Event": { "uuid": "455220a1-c13d-57cc-95c2-9649d78eaaaa", "info": "SystemHelpDesk MFC - Shipup (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"shipup\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "f140d664-7cab-5e65-af88-7e590ebbd28b": { "Event": { "uuid": "f140d664-7cab-5e65-af88-7e590ebbd28b", "info": "SystemHelpDesk MFC - Shiz (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"shiz\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "bde655de-5951-5136-8d16-dc48867de1a1": { "Event": { "uuid": "bde655de-5951-5136-8d16-dc48867de1a1", "info": "SystemHelpDesk MFC - Shodi (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"shodi\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1057\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "dd597a09-fb98-5202-8d7a-0848e9564cd9": { "Event": { "uuid": "dd597a09-fb98-5202-8d7a-0848e9564cd9", "info": "SystemHelpDesk MFC - Shylock (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"shylock\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" } ] } }, "d7234c66-126f-57d3-871e-880b9e2b5fab": { "Event": { "uuid": "d7234c66-126f-57d3-871e-880b9e2b5fab", "info": "SystemHelpDesk MFC - Simbot (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"simbot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1573.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "21f1d11d-8e50-5a3c-945c-951cb5073d00": { "Event": { "uuid": "21f1d11d-8e50-5a3c-945c-951cb5073d00", "info": "SystemHelpDesk MFC - Simda (Botnet) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Botnet\"" }, { "name": "mfc:family=\"simda\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "a7dc5dd9-48b7-52b4-929e-6f0d8f0f98d8": { "Event": { "uuid": "a7dc5dd9-48b7-52b4-929e-6f0d8f0f98d8", "info": "SystemHelpDesk MFC - Sinique (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"sinique\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "8876e110-cec3-5bcb-8c27-e05c819868d9": { "Event": { "uuid": "8876e110-cec3-5bcb-8c27-e05c819868d9", "info": "SystemHelpDesk MFC - Sinowal (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"sinowal\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1542.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1014\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "5dd6a996-357c-5592-a0b7-c1fa6f54bab7": { "Event": { "uuid": "5dd6a996-357c-5592-a0b7-c1fa6f54bab7", "info": "SystemHelpDesk MFC - Sivis (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"sivis\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1106\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1485\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1140\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "08944076-f6ac-5b67-812c-7c1e1c3b297f": { "Event": { "uuid": "08944076-f6ac-5b67-812c-7c1e1c3b297f", "info": "SystemHelpDesk MFC - Skeeyah (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"skeeyah\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" } ] } }, "6e784d4e-a0c9-5891-9639-de75697d3768": { "Event": { "uuid": "6e784d4e-a0c9-5891-9639-de75697d3768", "info": "SystemHelpDesk MFC - Skorik (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"skorik\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "1992938b-a6ca-5e00-893c-50508b641e96": { "Event": { "uuid": "1992938b-a6ca-5e00-893c-50508b641e96", "info": "SystemHelpDesk MFC - Skypespam (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"skypespam\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "c9cd6a66-e57c-5675-a859-d25cc517e9ec": { "Event": { "uuid": "c9cd6a66-e57c-5675-a859-d25cc517e9ec", "info": "SystemHelpDesk MFC - Slimware (Rogueware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rogueware\"" }, { "name": "mfc:family=\"slimware\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "bd8478b7-2a83-51e6-ba11-33ebf2d94ab6": { "Event": { "uuid": "bd8478b7-2a83-51e6-ba11-33ebf2d94ab6", "info": "SystemHelpDesk MFC - Smokeloader (Loader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Loader\"" }, { "name": "mfc:family=\"smokeloader\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "671b2fec-29e7-5318-9672-bfe10f22819e": { "Event": { "uuid": "671b2fec-29e7-5318-9672-bfe10f22819e", "info": "SystemHelpDesk MFC - Snake (Advanced Threat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Advanced Threat\"" }, { "name": "mfc:family=\"snake\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1014\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1573.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1571\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1068\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "0cef2ddc-a5f2-55d2-9d93-767c3d13f1c1": { "Event": { "uuid": "0cef2ddc-a5f2-55d2-9d93-767c3d13f1c1", "info": "SystemHelpDesk MFC - Snarasite (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"snarasite\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "049b5b4b-f034-5130-9e5f-2a8eeca81823": { "Event": { "uuid": "049b5b4b-f034-5130-9e5f-2a8eeca81823", "info": "SystemHelpDesk MFC - Snojan (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"snojan\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "e8090e31-ad32-5cc5-8ba9-e5f8c9d919b0": { "Event": { "uuid": "e8090e31-ad32-5cc5-8ba9-e5f8c9d919b0", "info": "SystemHelpDesk MFC - Socelars (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"socelars\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1539\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.001\"" } ] } }, "9a19b314-46a1-545e-8bae-dc83b287eaf5": { "Event": { "uuid": "9a19b314-46a1-545e-8bae-dc83b287eaf5", "info": "SystemHelpDesk MFC - Socks (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"socks\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1572\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1571\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" } ] } }, "68485215-a91e-5c85-b995-fd345a1f8a25": { "Event": { "uuid": "68485215-a91e-5c85-b995-fd345a1f8a25", "info": "SystemHelpDesk MFC - Soft32dl (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"soft32dl\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "e80c8133-e8d9-58be-a7b6-ac072a2ddde2": { "Event": { "uuid": "e80c8133-e8d9-58be-a7b6-ac072a2ddde2", "info": "SystemHelpDesk MFC - Softcnapp (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"softcnapp\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "a8cb74b9-8d25-5b5a-a845-eeb6fb782341": { "Event": { "uuid": "a8cb74b9-8d25-5b5a-a845-eeb6fb782341", "info": "SystemHelpDesk MFC - Softpulse (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"softpulse\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "5cdd35aa-e363-5e99-90cb-2b722dbafcff": { "Event": { "uuid": "5cdd35aa-e363-5e99-90cb-2b722dbafcff", "info": "SystemHelpDesk MFC - Speedingupmypc (Pup) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pup\"" }, { "name": "mfc:family=\"speedingupmypc\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "0e6163c2-405b-5c08-b5b6-ff867454feaa": { "Event": { "uuid": "0e6163c2-405b-5c08-b5b6-ff867454feaa", "info": "SystemHelpDesk MFC - Spigot (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"spigot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "082716e0-7f5b-57af-89ca-a705f2936bf8": { "Event": { "uuid": "082716e0-7f5b-57af-89ca-a705f2936bf8", "info": "SystemHelpDesk MFC - Spyeye (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"spyeye\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1115\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "c54406db-7b7e-53e2-b9e7-a93d3be5a78b": { "Event": { "uuid": "c54406db-7b7e-53e2-b9e7-a93d3be5a78b", "info": "SystemHelpDesk MFC - Spygate (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"spygate\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" } ] } }, "ccda0ab0-fa3e-50b4-b67c-1a1851790f7a": { "Event": { "uuid": "ccda0ab0-fa3e-50b4-b67c-1a1851790f7a", "info": "SystemHelpDesk MFC - Spytector (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"spytector\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1115\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1048.003\"" } ] } }, "f537f158-2514-54ab-ba95-22e5c92bc064": { "Event": { "uuid": "f537f158-2514-54ab-ba95-22e5c92bc064", "info": "SystemHelpDesk MFC - Stantinko (Botnet) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Botnet\"" }, { "name": "mfc:family=\"stantinko\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1546.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1496\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1102.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" } ] } }, "e3c4d415-5a68-5718-8830-bf346fb90e79": { "Event": { "uuid": "e3c4d415-5a68-5718-8830-bf346fb90e79", "info": "SystemHelpDesk MFC - Startsurf (Browser Hijacker) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Browser Hijacker\"" }, { "name": "mfc:family=\"startsurf\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "aa4743ca-23c0-5c9d-9804-78d3e7d44614": { "Event": { "uuid": "aa4743ca-23c0-5c9d-9804-78d3e7d44614", "info": "SystemHelpDesk MFC - Steam (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"steam\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1114\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "90c965a7-4475-5ec2-a5d9-6654616b9fb6": { "Event": { "uuid": "90c965a7-4475-5ec2-a5d9-6654616b9fb6", "info": "SystemHelpDesk MFC - Stop (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"stop\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" } ] } }, "aeb8ec64-dd55-540a-bd9f-64c77d3d8a90": { "Event": { "uuid": "aeb8ec64-dd55-540a-bd9f-64c77d3d8a90", "info": "SystemHelpDesk MFC - Storm (Botnet) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Botnet\"" }, { "name": "mfc:family=\"storm\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1560.001\"" } ] } }, "79192a0a-277b-5ce4-85fe-1b8864801e2e": { "Event": { "uuid": "79192a0a-277b-5ce4-85fe-1b8864801e2e", "info": "SystemHelpDesk MFC - Stormattack (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"stormattack\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "6e51b56d-f08d-5491-b389-8a4dc244c3db": { "Event": { "uuid": "6e51b56d-f08d-5491-b389-8a4dc244c3db", "info": "SystemHelpDesk MFC - Stream_rat (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"stream_rat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1123\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "16d6f186-d76e-51e2-98c2-90887cb69db8": { "Event": { "uuid": "16d6f186-d76e-51e2-98c2-90887cb69db8", "info": "SystemHelpDesk MFC - Subseven (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"subseven\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "3a0bc800-226f-5a40-8a25-86430d68d5fd": { "Event": { "uuid": "3a0bc800-226f-5a40-8a25-86430d68d5fd", "info": "SystemHelpDesk MFC - Sugar (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"sugar\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1016\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "9f5b9ed2-de1b-5bb5-b455-10699c176840": { "Event": { "uuid": "9f5b9ed2-de1b-5bb5-b455-10699c176840", "info": "SystemHelpDesk MFC - Swisyn (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"swisyn\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1106\"" } ] } }, "b8f12292-c77d-57e8-b1b9-8b75843da916": { "Event": { "uuid": "b8f12292-c77d-57e8-b1b9-8b75843da916", "info": "SystemHelpDesk MFC - Swizzor (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"swizzor\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "17f97b93-2c8e-5326-83c3-3e98ca7b1304": { "Event": { "uuid": "17f97b93-2c8e-5326-83c3-3e98ca7b1304", "info": "SystemHelpDesk MFC - Swrort (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"swrort\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "8ae7b869-da0c-57bc-ae6f-458211ebf6f0": { "Event": { "uuid": "8ae7b869-da0c-57bc-ae6f-458211ebf6f0", "info": "SystemHelpDesk MFC - Synrat (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"synrat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "aa923a93-140c-5054-93e0-515961eaea83": { "Event": { "uuid": "aa923a93-140c-5054-93e0-515961eaea83", "info": "SystemHelpDesk MFC - Sysn (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"sysn\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "268fda70-0e02-588e-a13a-bc4599e1d885": { "Event": { "uuid": "268fda70-0e02-588e-a13a-bc4599e1d885", "info": "SystemHelpDesk MFC - Sytro (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"sytro\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" } ] } }, "b5365088-0af7-57c7-a997-a5928639e8aa": { "Event": { "uuid": "b5365088-0af7-57c7-a997-a5928639e8aa", "info": "SystemHelpDesk MFC - Taranis (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"taranis\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1057\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "7baadef3-567d-51fb-878e-c99cd52a870d": { "Event": { "uuid": "7baadef3-567d-51fb-878e-c99cd52a870d", "info": "SystemHelpDesk MFC - Temonde (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"temonde\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" } ] } }, "c97f6e55-98c1-5680-8350-5f990b2bfd5e": { "Event": { "uuid": "c97f6e55-98c1-5680-8350-5f990b2bfd5e", "info": "SystemHelpDesk MFC - Tempedreve (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"tempedreve\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" } ] } }, "44a3851d-92eb-511e-8377-e1558c5270d0": { "Event": { "uuid": "44a3851d-92eb-511e-8377-e1558c5270d0", "info": "SystemHelpDesk MFC - Tenga (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"tenga\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "1614531d-608d-52a6-b13f-755f268af7a8": { "Event": { "uuid": "1614531d-608d-52a6-b13f-755f268af7a8", "info": "SystemHelpDesk MFC - Terabit_virus_maker (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"terabit_virus_maker\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "249a4c61-df60-5058-ab05-512818c5bff5": { "Event": { "uuid": "249a4c61-df60-5058-ab05-512818c5bff5", "info": "SystemHelpDesk MFC - Teslacrypt (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"teslacrypt\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "b3a59da0-7909-5612-b27a-22b433bd9de4": { "Event": { "uuid": "b3a59da0-7909-5612-b27a-22b433bd9de4", "info": "SystemHelpDesk MFC - Tiggre (Cryptominer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Cryptominer\"" }, { "name": "mfc:family=\"tiggre\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1496\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1057\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "5d7d0440-cf3d-5896-9442-f6130e82e692": { "Event": { "uuid": "5d7d0440-cf3d-5896-9442-f6130e82e692", "info": "SystemHelpDesk MFC - Tinba (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"tinba\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1111\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "7865fbf8-6865-5ad0-9d9d-cf53b6fa8313": { "Event": { "uuid": "7865fbf8-6865-5ad0-9d9d-cf53b6fa8313", "info": "SystemHelpDesk MFC - Tinyloader (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"tinyloader\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" } ] } }, "1c6e2367-3b48-555b-88e7-559f8d4e6d61": { "Event": { "uuid": "1c6e2367-3b48-555b-88e7-559f8d4e6d61", "info": "SystemHelpDesk MFC - Tofsee (Spam Bot) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Spam Bot\"" }, { "name": "mfc:family=\"tofsee\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1496\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "fe81656b-6ad2-5530-8694-981ea7d5a521": { "Event": { "uuid": "fe81656b-6ad2-5530-8694-981ea7d5a521", "info": "SystemHelpDesk MFC - Trickbot (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"trickbot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "6c4c84d4-7300-559c-a8b2-af11afa871e8": { "Event": { "uuid": "6c4c84d4-7300-559c-a8b2-af11afa871e8", "info": "SystemHelpDesk MFC - Trickster (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"trickster\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1087.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "d680b2a4-edbc-57c0-a5fa-c304db0fe3fb": { "Event": { "uuid": "d680b2a4-edbc-57c0-a5fa-c304db0fe3fb", "info": "SystemHelpDesk MFC - Triusor (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"triusor\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1106\"" } ] } }, "2ddbbdac-0c94-5105-a3e0-36ca0a5ab90a": { "Event": { "uuid": "2ddbbdac-0c94-5105-a3e0-36ca0a5ab90a", "info": "SystemHelpDesk MFC - Trojna (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"trojna\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "79191a6c-8ebe-5068-b479-b596a2dc1b32": { "Event": { "uuid": "79191a6c-8ebe-5068-b479-b596a2dc1b32", "info": "SystemHelpDesk MFC - Troldesh (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"troldesh\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "2cb67266-fed0-53eb-8c5a-494157102462": { "Event": { "uuid": "2cb67266-fed0-53eb-8c5a-494157102462", "info": "SystemHelpDesk MFC - Turkojan (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"turkojan\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "37eb3ac6-1a88-5f4e-9c0a-0e19ac991e6e": { "Event": { "uuid": "37eb3ac6-1a88-5f4e-9c0a-0e19ac991e6e", "info": "SystemHelpDesk MFC - Turla (Advanced Threat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Advanced Threat\"" }, { "name": "mfc:family=\"turla\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1542.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1546.015\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "36ca73ef-7dc3-5b7b-b5fb-2740ce58196c": { "Event": { "uuid": "36ca73ef-7dc3-5b7b-b5fb-2740ce58196c", "info": "SystemHelpDesk MFC - Tweakbit (Rogueware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rogueware\"" }, { "name": "mfc:family=\"tweakbit\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1491.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" } ] } }, "e8e78d42-f549-583b-ac76-8f6cbc5d4d85": { "Event": { "uuid": "e8e78d42-f549-583b-ac76-8f6cbc5d4d85", "info": "SystemHelpDesk MFC - Uk_splitter (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"uk_splitter\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1036.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "ebecb75c-6f05-565c-be2b-1d44a2f70151": { "Event": { "uuid": "ebecb75c-6f05-565c-be2b-1d44a2f70151", "info": "SystemHelpDesk MFC - Ulise (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"ulise\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" } ] } }, "c8c213c7-af7e-52f9-90a9-eb9e51cc7253": { "Event": { "uuid": "c8c213c7-af7e-52f9-90a9-eb9e51cc7253", "info": "SystemHelpDesk MFC - Ulysses (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"ulysses\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "935b9e20-3fb6-53aa-b63d-6186419b2911": { "Event": { "uuid": "935b9e20-3fb6-53aa-b63d-6186419b2911", "info": "SystemHelpDesk MFC - Umbra (Loader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Loader\"" }, { "name": "mfc:family=\"umbra\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" } ] } }, "a6b40455-0ff5-505a-933b-7e26ad3bf1cd": { "Event": { "uuid": "a6b40455-0ff5-505a-933b-7e26ad3bf1cd", "info": "SystemHelpDesk MFC - Uniblue (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"uniblue\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "9a6a0fe9-90d1-5a4f-9ba8-a70b2f96ab5c": { "Event": { "uuid": "9a6a0fe9-90d1-5a4f-9ba8-a70b2f96ab5c", "info": "SystemHelpDesk MFC - Universal1337 (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"universal1337\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1048.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" } ] } }, "86ded339-b4a6-5326-8525-b619d26c1d1a": { "Event": { "uuid": "86ded339-b4a6-5326-8525-b619d26c1d1a", "info": "SystemHelpDesk MFC - Unruy (Click Fraud) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Click Fraud\"" }, { "name": "mfc:family=\"unruy\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1564.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "4ecab93d-eaf7-520b-a584-4d3349b76a0e": { "Event": { "uuid": "4ecab93d-eaf7-520b-a584-4d3349b76a0e", "info": "SystemHelpDesk MFC - Unwaders (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"unwaders\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "c7ec7f62-a3a3-5fbd-81b2-05ba915108d4": { "Event": { "uuid": "c7ec7f62-a3a3-5fbd-81b2-05ba915108d4", "info": "SystemHelpDesk MFC - Upatre (Downloader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Downloader\"" }, { "name": "mfc:family=\"upatre\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1573.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "c86817b6-6a68-53d6-8714-e950cbdddfc5": { "Event": { "uuid": "c86817b6-6a68-53d6-8714-e950cbdddfc5", "info": "SystemHelpDesk MFC - Urelas (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"urelas\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "618878ce-cc0b-5b27-91a0-1183c3a35d14": { "Event": { "uuid": "618878ce-cc0b-5b27-91a0-1183c3a35d14", "info": "SystemHelpDesk MFC - Ursnif (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"ursnif\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "ebbfc58f-0e86-56b8-8fe1-5e95445de6a0": { "Event": { "uuid": "ebbfc58f-0e86-56b8-8fe1-5e95445de6a0", "info": "SystemHelpDesk MFC - Ursu (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"ursu\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" } ] } }, "18cdc871-1578-5c16-8802-b7fbc84542a5": { "Event": { "uuid": "18cdc871-1578-5c16-8802-b7fbc84542a5", "info": "SystemHelpDesk MFC - Vampire (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"vampire\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "35752139-a8cf-5d26-a5dc-8437450193bc": { "Event": { "uuid": "35752139-a8cf-5d26-a5dc-8437450193bc", "info": "SystemHelpDesk MFC - Vawtrak (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"vawtrak\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.003\"" } ] } }, "4f485b19-e3e5-593e-a720-8803044c431c": { "Event": { "uuid": "4f485b19-e3e5-593e-a720-8803044c431c", "info": "SystemHelpDesk MFC - Vbclone (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"vbclone\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497\"" } ] } }, "1ad8c451-fe11-5dd1-a31e-dcf55f998f01": { "Event": { "uuid": "1ad8c451-fe11-5dd1-a31e-dcf55f998f01", "info": "SystemHelpDesk MFC - Vbkryjetor (Packer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Packer\"" }, { "name": "mfc:family=\"vbkryjetor\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1106\"" } ] } }, "50724df3-7628-5c56-add0-18d6885a6d8e": { "Event": { "uuid": "50724df3-7628-5c56-add0-18d6885a6d8e", "info": "SystemHelpDesk MFC - Vbs_worm_generator (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"vbs_worm_generator\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "0b158878-b50c-503b-8678-c1c08b303957": { "Event": { "uuid": "0b158878-b50c-503b-8678-c1c08b303957", "info": "SystemHelpDesk MFC - Vidar (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"vidar\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1114.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1102.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1070.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" } ] } }, "69cded13-b730-556c-a121-42bcbe857325": { "Event": { "uuid": "69cded13-b730-556c-a121-42bcbe857325", "info": "SystemHelpDesk MFC - Vigorf (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"vigorf\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "4f455ea8-1996-5ccc-9266-db08d303b621": { "Event": { "uuid": "4f455ea8-1996-5ccc-9266-db08d303b621", "info": "SystemHelpDesk MFC - Viking (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"viking\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "1b4b017e-56a1-5b96-826f-1a41e1af706b": { "Event": { "uuid": "1b4b017e-56a1-5b96-826f-1a41e1af706b", "info": "SystemHelpDesk MFC - Vilsel (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"vilsel\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "1c47cb50-cde3-53c9-befe-3193369433c6": { "Event": { "uuid": "1c47cb50-cde3-53c9-befe-3193369433c6", "info": "SystemHelpDesk MFC - Vindor (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"vindor\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "274fa96f-44c7-5665-8d24-52106001f7f5": { "Event": { "uuid": "274fa96f-44c7-5665-8d24-52106001f7f5", "info": "SystemHelpDesk MFC - Virlock (Ransomware File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware File Infector\"" }, { "name": "mfc:family=\"virlock\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.009\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1070.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" } ] } }, "1d7b3a06-26e9-5385-b962-6cb658354109": { "Event": { "uuid": "1d7b3a06-26e9-5385-b962-6cb658354109", "info": "SystemHelpDesk MFC - Virut (File Infector) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"File Infector\"" }, { "name": "mfc:family=\"virut\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1140\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "a228163a-260e-5f46-a03f-7eaf87ac86e2": { "Event": { "uuid": "a228163a-260e-5f46-a03f-7eaf87ac86e2", "info": "SystemHelpDesk MFC - Vittalia (Pua) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua\"" }, { "name": "mfc:family=\"vittalia\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "12e639cc-8c9d-56d6-8320-273625fe49db": { "Event": { "uuid": "12e639cc-8c9d-56d6-8320-273625fe49db", "info": "SystemHelpDesk MFC - Vittaliaent (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"vittaliaent\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "af61a1fb-e196-5663-9dad-684449fcba3c": { "Event": { "uuid": "af61a1fb-e196-5663-9dad-684449fcba3c", "info": "SystemHelpDesk MFC - Vmprotbad (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"vmprotbad\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1140\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "87044133-9d3a-569d-ac9e-20bb8ff061a1": { "Event": { "uuid": "87044133-9d3a-569d-ac9e-20bb8ff061a1", "info": "SystemHelpDesk MFC - Vobfus (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"vobfus\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "018de0f3-6775-51cb-9a75-c5a894c79779": { "Event": { "uuid": "018de0f3-6775-51cb-9a75-c5a894c79779", "info": "SystemHelpDesk MFC - Vtflooder (Pua Tool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua Tool\"" }, { "name": "mfc:family=\"vtflooder\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "453379eb-2d48-5315-b247-30a622bd086a": { "Event": { "uuid": "453379eb-2d48-5315-b247-30a622bd086a", "info": "SystemHelpDesk MFC - Vundo (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"vundo\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "5b924eb3-3a88-54a8-8b94-ab9acbdc235d": { "Event": { "uuid": "5b924eb3-3a88-54a8-8b94-ab9acbdc235d", "info": "SystemHelpDesk MFC - Wabot (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"wabot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1046\"" } ] } }, "f3babd9e-9a3f-5b6b-a0b6-9d40e2bc47d0": { "Event": { "uuid": "f3babd9e-9a3f-5b6b-a0b6-9d40e2bc47d0", "info": "SystemHelpDesk MFC - Wajam (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"wajam\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1556\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" } ] } }, "83da19d2-ac18-5d7c-adae-9d61fb7c9ae0": { "Event": { "uuid": "83da19d2-ac18-5d7c-adae-9d61fb7c9ae0", "info": "SystemHelpDesk MFC - Wakme (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"wakme\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "d91743ae-6785-5c5b-a64c-acd26881bd41": { "Event": { "uuid": "d91743ae-6785-5c5b-a64c-acd26881bd41", "info": "SystemHelpDesk MFC - Waldek (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"waldek\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "6f9faefb-9e44-5fda-a599-aa060f25847e": { "Event": { "uuid": "6f9faefb-9e44-5fda-a599-aa060f25847e", "info": "SystemHelpDesk MFC - Wannacry (Ransomware Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware Worm\"" }, { "name": "mfc:family=\"wannacry\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "624defdd-831d-5f0d-922f-6c5b990537b5": { "Event": { "uuid": "624defdd-831d-5f0d-922f-6c5b990537b5", "info": "SystemHelpDesk MFC - Wapomi (Worm Banker) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm Banker\"" }, { "name": "mfc:family=\"wapomi\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.009\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.004\"" } ] } }, "17f5b79e-61c5-52bd-83a2-e0c3a3951983": { "Event": { "uuid": "17f5b79e-61c5-52bd-83a2-e0c3a3951983", "info": "SystemHelpDesk MFC - Warezov (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"warezov\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "d907e50c-753f-5463-bde2-12ead47eccf0": { "Event": { "uuid": "d907e50c-753f-5463-bde2-12ead47eccf0", "info": "SystemHelpDesk MFC - Wdfload (Advanced Threat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Advanced Threat\"" }, { "name": "mfc:family=\"wdfload\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1014\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "5063cbb7-3056-5701-aaef-e885a485aa42": { "Event": { "uuid": "5063cbb7-3056-5701-aaef-e885a485aa42", "info": "SystemHelpDesk MFC - Wecod (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"wecod\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "2e859dfb-61b2-5144-a2e9-ebf7a0eacbe5": { "Event": { "uuid": "2e859dfb-61b2-5144-a2e9-ebf7a0eacbe5", "info": "SystemHelpDesk MFC - Wews (Exploit) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Exploit\"" }, { "name": "mfc:family=\"wews\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1203\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.007\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" } ] } }, "7559d184-30f8-5f03-8319-466f45706daf": { "Event": { "uuid": "7559d184-30f8-5f03-8319-466f45706daf", "info": "SystemHelpDesk MFC - Winactivator (Pua Tool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua Tool\"" }, { "name": "mfc:family=\"winactivator\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1053.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" } ] } }, "6f4c80bb-9817-5bfa-b144-83134e2f84fa": { "Event": { "uuid": "6f4c80bb-9817-5bfa-b144-83134e2f84fa", "info": "SystemHelpDesk MFC - Winnti (Backdoor) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Backdoor\"" }, { "name": "mfc:family=\"winnti\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1195.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1574.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1014\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1552.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "081f2414-ca34-5783-bee5-faf170ee8fd6": { "Event": { "uuid": "081f2414-ca34-5783-bee5-faf170ee8fd6", "info": "SystemHelpDesk MFC - Winsecsrv (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"winsecsrv\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1036.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "f5f983df-dcc7-5f10-8c16-37d9f9025264": { "Event": { "uuid": "f5f983df-dcc7-5f10-8c16-37d9f9025264", "info": "SystemHelpDesk MFC - Winwrapper (Pua Tool) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Pua Tool\"" }, { "name": "mfc:family=\"winwrapper\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "743a473d-8594-5cef-8b58-5cce571b1746": { "Event": { "uuid": "743a473d-8594-5cef-8b58-5cce571b1746", "info": "SystemHelpDesk MFC - Wizrem (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"wizrem\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "4994d47f-b70a-5a37-bf9d-a1d84286df1d": { "Event": { "uuid": "4994d47f-b70a-5a37-bf9d-a1d84286df1d", "info": "SystemHelpDesk MFC - Wizzmonetize (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"wizzmonetize\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1543.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" } ] } }, "12ec3e47-313a-5551-9d75-3dfa3bfcdf0c": { "Event": { "uuid": "12ec3e47-313a-5551-9d75-3dfa3bfcdf0c", "info": "SystemHelpDesk MFC - Wronginf (Rogue Antivirus) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rogue Antivirus\"" }, { "name": "mfc:family=\"wronginf\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1491.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" } ] } }, "8355f805-2604-5093-9a2d-264158c4bc8f": { "Event": { "uuid": "8355f805-2604-5093-9a2d-264158c4bc8f", "info": "SystemHelpDesk MFC - Xmrig (Cryptominer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Cryptominer\"" }, { "name": "mfc:family=\"xmrig\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1496\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "eeca31e4-dc16-599e-a8fa-e82a6544807f": { "Event": { "uuid": "eeca31e4-dc16-599e-a8fa-e82a6544807f", "info": "SystemHelpDesk MFC - Xtrat (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"xtrat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" } ] } }, "8a9d76eb-51d2-5755-b848-88111288ddb4": { "Event": { "uuid": "8a9d76eb-51d2-5755-b848-88111288ddb4", "info": "SystemHelpDesk MFC - Y3k_rat (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"y3k_rat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "525ff805-e63f-5b66-941b-9d2227357218": { "Event": { "uuid": "525ff805-e63f-5b66-941b-9d2227357218", "info": "SystemHelpDesk MFC - Yakes (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"yakes\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "fb77ad0f-144d-5905-ae09-d47e12a57afd": { "Event": { "uuid": "fb77ad0f-144d-5905-ae09-d47e12a57afd", "info": "SystemHelpDesk MFC - Yobrowser (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"yobrowser\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "4a76d71f-9916-582d-abf0-9baa00b31ae2": { "Event": { "uuid": "4a76d71f-9916-582d-abf0-9baa00b31ae2", "info": "SystemHelpDesk MFC - Youxun (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"youxun\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1189\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1176\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "b9e8b0d0-ae36-5e5d-977c-d5105518123d": { "Event": { "uuid": "b9e8b0d0-ae36-5e5d-977c-d5105518123d", "info": "SystemHelpDesk MFC - Yunsip (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"yunsip\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "6cd023ff-f045-587a-be84-fe15df6fb3f3": { "Event": { "uuid": "6cd023ff-f045-587a-be84-fe15df6fb3f3", "info": "SystemHelpDesk MFC - Z_dem0n (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"z_dem0n\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "1152ce44-7d8c-525b-a97f-e084a8d26f26": { "Event": { "uuid": "1152ce44-7d8c-525b-a97f-e084a8d26f26", "info": "SystemHelpDesk MFC - Zamg (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"zamg\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "9eb05733-a2e3-5d2c-8b41-1841f76f57d7": { "Event": { "uuid": "9eb05733-a2e3-5d2c-8b41-1841f76f57d7", "info": "SystemHelpDesk MFC - Zbot (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"zbot\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1090.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" } ] } }, "166f0b6d-d98d-5980-bb5b-d6cd804df110": { "Event": { "uuid": "166f0b6d-d98d-5980-bb5b-d6cd804df110", "info": "SystemHelpDesk MFC - Zdengo (Adware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Adware\"" }, { "name": "mfc:family=\"zdengo\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1112\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" } ] } }, "bfad1207-fdc4-5304-9e19-91da83c65305": { "Event": { "uuid": "bfad1207-fdc4-5304-9e19-91da83c65305", "info": "SystemHelpDesk MFC - Zegost (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"zegost\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1014\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" } ] } }, "bf5f32a0-93cb-5d30-b6a7-1d1be49a1786": { "Event": { "uuid": "bf5f32a0-93cb-5d30-b6a7-1d1be49a1786", "info": "SystemHelpDesk MFC - Zepfod (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"zepfod\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "41da39d0-36b3-5840-9f5f-44801f209e0f": { "Event": { "uuid": "41da39d0-36b3-5840-9f5f-44801f209e0f", "info": "SystemHelpDesk MFC - Zeusvm (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"zeusvm\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" } ] } }, "2c81a5ac-8b7c-58cf-8261-fe9ee4ccc73f": { "Event": { "uuid": "2c81a5ac-8b7c-58cf-8261-fe9ee4ccc73f", "info": "SystemHelpDesk MFC - Zombierat (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"zombierat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" } ] } }, "5018edbf-2661-5276-8030-9ccb20def4ca": { "Event": { "uuid": "5018edbf-2661-5276-8030-9ccb20def4ca", "info": "SystemHelpDesk MFC - Zpevdo (Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Trojan\"" }, { "name": "mfc:family=\"zpevdo\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.004\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "af0fb10e-f616-5abf-8e30-23f8604e3335": { "Event": { "uuid": "af0fb10e-f616-5abf-8e30-23f8604e3335", "info": "SystemHelpDesk MFC - Zusy (Banking Trojan) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Banking Trojan\"" }, { "name": "mfc:family=\"zusy\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1185\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1566.002\"" } ] } }, "e83cc9fb-bc99-5b65-8c2e-657fed1ff42a": { "Event": { "uuid": "e83cc9fb-bc99-5b65-8c2e-657fed1ff42a", "info": "SystemHelpDesk MFC - Redline (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"redline\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1539\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "d4002067-db38-593a-a583-2dfb856400fb": { "Event": { "uuid": "d4002067-db38-593a-a583-2dfb856400fb", "info": "SystemHelpDesk MFC - Lumma (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"lumma\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1539\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1553.005\"" } ] } }, "70540376-56d0-5f3f-b472-622c5da95ce3": { "Event": { "uuid": "70540376-56d0-5f3f-b472-622c5da95ce3", "info": "SystemHelpDesk MFC - Asyncrat (Rat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Rat\"" }, { "name": "mfc:family=\"asyncrat\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1125\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1123\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" } ] } }, "f97c9ad6-d6b0-5c87-ab78-3bbdb94ac524": { "Event": { "uuid": "f97c9ad6-d6b0-5c87-ab78-3bbdb94ac524", "info": "SystemHelpDesk MFC - Stealc (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"stealc\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1539\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" } ] } }, "5d011152-db17-5126-9f4c-af46ce55888e": { "Event": { "uuid": "5d011152-db17-5126-9f4c-af46ce55888e", "info": "SystemHelpDesk MFC - Bumblebee (Loader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Loader\"" }, { "name": "mfc:family=\"bumblebee\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1047\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1497.001\"" } ] } }, "d621eea2-5147-5040-b088-4ee561c138f7": { "Event": { "uuid": "d621eea2-5147-5040-b088-4ee561c138f7", "info": "SystemHelpDesk MFC - Conti (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"conti\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1068\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "96cfd1d0-1f1f-5a34-a60a-cb04df9cdb68": { "Event": { "uuid": "96cfd1d0-1f1f-5a34-a60a-cb04df9cdb68", "info": "SystemHelpDesk MFC - Revil (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"revil\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1190\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" } ] } }, "696aefc9-553e-5bdf-8c19-539b9fa4d54c": { "Event": { "uuid": "696aefc9-553e-5bdf-8c19-539b9fa4d54c", "info": "SystemHelpDesk MFC - Darkside (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"darkside\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1490\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1562.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003.001\"" } ] } }, "ea5be0f8-deef-5ff5-8f3f-28c923da1ef9": { "Event": { "uuid": "ea5be0f8-deef-5ff5-8f3f-28c923da1ef9", "info": "SystemHelpDesk MFC - Clop (Ransomware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "1", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Ransomware\"" }, { "name": "mfc:family=\"clop\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1190\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1505.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1486\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1021.002\"" } ] } }, "31462da7-ac8e-54bf-aed4-d4da72b9d560": { "Event": { "uuid": "31462da7-ac8e-54bf-aed4-d4da72b9d560", "info": "SystemHelpDesk MFC - Stuxnet (Advanced Threat) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Advanced Threat\"" }, { "name": "mfc:family=\"stuxnet\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1204.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1091\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1068\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" } ] } }, "5e4aedde-333a-523e-96aa-20cb3706b3b5": { "Event": { "uuid": "5e4aedde-333a-523e-96aa-20cb3706b3b5", "info": "SystemHelpDesk MFC - Pegasus (Spyware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Spyware\"" }, { "name": "mfc:family=\"pegasus\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1203\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1404\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1636\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1418\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1432\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1430\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1412\"" } ] } }, "81ffa23a-7cf3-5785-b6bb-8b02c886e6c3": { "Event": { "uuid": "81ffa23a-7cf3-5785-b6bb-8b02c886e6c3", "info": "SystemHelpDesk MFC - Raccoon (Infostealer) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Infostealer\"" }, { "name": "mfc:family=\"raccoon\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1539\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1041\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } }, "f19d9a6a-f306-50ca-bd95-7fea6fbba7e9": { "Event": { "uuid": "f19d9a6a-f306-50ca-bd95-7fea6fbba7e9", "info": "SystemHelpDesk MFC - Bazarloader (Loader) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Loader\"" }, { "name": "mfc:family=\"bazarloader\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1568.002\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055.012\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1082\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1105\"" } ] } }, "fde735de-35e7-5e34-9ac5-6e2f1c2c2970": { "Event": { "uuid": "fde735de-35e7-5e34-9ac5-6e2f1c2c2970", "info": "SystemHelpDesk MFC - Sasser (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"sasser\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1083\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" } ] } }, "c175d5e3-b6ad-58bd-8aed-73daa6f0672f": { "Event": { "uuid": "c175d5e3-b6ad-58bd-8aed-73daa6f0672f", "info": "SystemHelpDesk MFC - Blaster (Worm) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Worm\"" }, { "name": "mfc:family=\"blaster\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1210\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1059\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1547.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1498\"" } ] } }, "89f0dfa5-6aff-54f1-ac18-0abc0322a245": { "Event": { "uuid": "89f0dfa5-6aff-54f1-ac18-0abc0322a245", "info": "SystemHelpDesk MFC - Candiru (Spyware) Threat Profile & Indicators", "date": "2026-10-16", "threat_level_id": "2", "analysis": "2", "timestamp": "1792167519", "distribution": "3", "orgc_id": "1", "Orgc": { "name": "SystemHelpDesk MSP Threat Research", "uuid": "d4e5f6a7-b8c9-4d0e-1f2a-3b4c5d6e7f8a" }, "Tag": [ { "name": "tlp:white" }, { "name": "misp-galaxy:threat-category=\"Spyware\"" }, { "name": "mfc:family=\"candiru\"" }, { "name": "mfc:publisher=\"SystemHelpDesk MSP\"" }, { "name": "mfc:author=\"Ricky Jordan\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1203\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1068\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1055\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1056.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1113\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1123\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1555.003\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1539\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1005\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1071.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1003.001\"" }, { "name": "misp-galaxy:mitre-attack-pattern=\"T1027\"" } ] } } }