{
	"id": "04636110-1fab-4792-b04c-d18f3ffe9971",
	"created_at": "2026-04-06T00:11:32.590887Z",
	"updated_at": "2026-04-10T13:12:58.69445Z",
	"deleted_at": null,
	"sha1_hash": "3df5a9c38703680c68d4603414bd76b096f7e9fb",
	"title": "Graphite (Malware Family)",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 27013,
	"plain_text": "Graphite (Malware Family)\r\nBy Fraunhofer FKIE\r\nArchived: 2026-04-05 19:23:58 UTC\r\n[TLP:WHITE] win_graphite_auto (20251219 | Detects win.graphite.)\r\nSource: https://malpedia.caad.fkie.fraunhofer.de/details/win.graphite\r\nhttps://malpedia.caad.fkie.fraunhofer.de/details/win.graphite\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://malpedia.caad.fkie.fraunhofer.de/details/win.graphite"
	],
	"report_names": [
		"win.graphite"
	],
	"threat_actors": [
		{
			"id": "e3767160-695d-4360-8b2e-d5274db3f7cd",
			"created_at": "2022-10-25T16:47:55.914348Z",
			"updated_at": "2026-04-10T02:00:03.610018Z",
			"deleted_at": null,
			"main_name": "IRON TWILIGHT",
			"aliases": [
				"APT28 ",
				"ATK5 ",
				"Blue Athena ",
				"BlueDelta ",
				"FROZENLAKE ",
				"Fancy Bear ",
				"Fighting Ursa ",
				"Forest Blizzard ",
				"GRAPHITE ",
				"Group 74 ",
				"PawnStorm ",
				"STRONTIUM ",
				"Sednit ",
				"Snakemackerel ",
				"Sofacy ",
				"TA422 ",
				"TG-4127 ",
				"Tsar Team ",
				"UAC-0001 "
			],
			"source_name": "Secureworks:IRON TWILIGHT",
			"tools": [
				"Downdelph",
				"EVILTOSS",
				"SEDUPLOADER",
				"SHARPFRONT"
			],
			"source_id": "Secureworks",
			"reports": null
		}
	],
	"ts_created_at": 1775434292,
	"ts_updated_at": 1775826778,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/3df5a9c38703680c68d4603414bd76b096f7e9fb.pdf",
		"text": "https://archive.orkl.eu/3df5a9c38703680c68d4603414bd76b096f7e9fb.txt",
		"img": "https://archive.orkl.eu/3df5a9c38703680c68d4603414bd76b096f7e9fb.jpg"
	}
}