{
	"id": "68eb32bf-56ad-440c-b1f4-5a9681a1e50d",
	"created_at": "2026-04-06T00:08:03.489282Z",
	"updated_at": "2026-04-10T03:26:47.860611Z",
	"deleted_at": null,
	"sha1_hash": "4708c4cc8de4c76bfaebfb793587bd6663cb2ad2",
	"title": "RAT samples from Syrian Targeted attacks - Blackshades RAT, XTreme RAT, Dark Comet RAT used by Syrian Electronic Army",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 147651,
	"plain_text": "RAT samples from Syrian Targeted attacks - Blackshades RAT,\r\nXTreme RAT, Dark Comet RAT used by Syrian Electronic Army\r\nBy Posted by Mila\r\nArchived: 2026-04-05 21:16:17 UTC\r\nContagio is a collection of the historic malware samples, threats, observations, and analyses.\r\nMalware samples are available for download by any responsible whitehat researcher.\r\nBy downloading the samples, anyone waives all rights to claim punitive, incidental and consequential damages\r\nresulting from mishandling or self--infection\r\nIf you see errors, typos, etc, please let me know.\r\nSource: http://contagiodump.blogspot.com/2012/06/rat-samples-from-syrian-targeted.html\r\nhttp://contagiodump.blogspot.com/2012/06/rat-samples-from-syrian-targeted.html\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"references": [
		"http://contagiodump.blogspot.com/2012/06/rat-samples-from-syrian-targeted.html"
	],
	"report_names": [
		"rat-samples-from-syrian-targeted.html"
	],
	"threat_actors": [
		{
			"id": "76fc6d92-0710-4640-bfa7-3000fe3940a5",
			"created_at": "2022-10-25T16:07:24.251595Z",
			"updated_at": "2026-04-10T02:00:04.911951Z",
			"deleted_at": null,
			"main_name": "Syrian Electronic Army (SEA)",
			"aliases": [
				"ATK 196",
				"Deadeye Jackal",
				"Syria Malware Team",
				"Syrian Electronic Army",
				"TAG-CT2"
			],
			"source_name": "ETDA:Syrian Electronic Army (SEA)",
			"tools": [
				"AndoServer",
				"CypherRat",
				"SLRat",
				"SandroRAT",
				"SilverHawk",
				"SpyNote",
				"SpyNote RAT"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434083,
	"ts_updated_at": 1775791607,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/4708c4cc8de4c76bfaebfb793587bd6663cb2ad2.pdf",
		"text": "https://archive.orkl.eu/4708c4cc8de4c76bfaebfb793587bd6663cb2ad2.txt",
		"img": "https://archive.orkl.eu/4708c4cc8de4c76bfaebfb793587bd6663cb2ad2.jpg"
	}
}