{
	"id": "75cd63cb-c0d5-4f0a-9842-3aaa81b17fd6",
	"created_at": "2026-04-06T00:09:48.84981Z",
	"updated_at": "2026-04-10T03:31:36.852173Z",
	"deleted_at": null,
	"sha1_hash": "1347898b2ae47b14d4be89d34d586308eccfa0c6",
	"title": "WASSONITE",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 25752,
	"plain_text": "WASSONITE\r\nBy September 4, 2025 11:25 AM\r\nArchived: 2026-04-05 13:35:03 UTC\r\nDragos threat intelligence leverages the Dragos Platform, our threat operations center, and other sources to\r\nprovide comprehensive insight into threats affecting industrial control security and safety worldwide. Dragos does\r\nnot corroborate nor conduct political attribution to threat activity. Dragos instead focuses on threat behaviors and\r\nappropriate detection and response. Read more about Dragos’s approach to categorizing threat activity and\r\nattribution.\r\nDragos does not publicly describe ICS threat group technical details except in extraordinary circumstances in\r\norder to limit tradecraft proliferation. However, full details threat group tools, techniques, procedures, and\r\ninfrastructure are available to network defenders via Dragos WorldView.\r\nSource: https://www.dragos.com/threat/wassonite/\r\nhttps://www.dragos.com/threat/wassonite/\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MISPGALAXY",
		"Malpedia",
		"MITRE"
	],
	"references": [
		"https://www.dragos.com/threat/wassonite/"
	],
	"report_names": [
		"wassonite"
	],
	"threat_actors": [
		{
			"id": "90615eb1-13f5-49e8-b8f5-d0df9b8bd946",
			"created_at": "2024-12-25T02:00:03.652379Z",
			"updated_at": "2026-04-10T02:00:03.797373Z",
			"deleted_at": null,
			"main_name": "Wassonite",
			"aliases": [],
			"source_name": "MISPGALAXY:Wassonite",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "a9bca241-5f6f-4a30-8184-c16da1a23c55",
			"created_at": "2022-10-25T16:07:24.38908Z",
			"updated_at": "2026-04-10T02:00:04.971876Z",
			"deleted_at": null,
			"main_name": "Wassonite",
			"aliases": [],
			"source_name": "ETDA:Wassonite",
			"tools": [
				"Dtrack",
				"Mimikatz",
				"Preft",
				"TroyRAT"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434188,
	"ts_updated_at": 1775791896,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/1347898b2ae47b14d4be89d34d586308eccfa0c6.pdf",
		"text": "https://archive.orkl.eu/1347898b2ae47b14d4be89d34d586308eccfa0c6.txt",
		"img": "https://archive.orkl.eu/1347898b2ae47b14d4be89d34d586308eccfa0c6.jpg"
	}
}