{
	"id": "0a56346c-5355-447a-b792-dec1b0f27cc4",
	"created_at": "2026-04-06T00:16:50.57488Z",
	"updated_at": "2026-04-10T03:34:24.102253Z",
	"deleted_at": null,
	"sha1_hash": "acc60ccf3c431c40a16b9ec79107f4bc1151c9ea",
	"title": "Not Found",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 761082,
	"plain_text": "Products\r\nPure Signal™ Recon\r\nPure Signal™ Scout\r\nIP Reputation Feed\r\nController Feed\r\nBotnet Analysis \u0026\r\nReporting\r\nCommunity\r\nServices\r\nNimbus Threat Monitor\r\nUTRS\r\nBOGON Reference\r\nCSIRT Assistance\r\nProgram\r\nContact us\r\ntel: +1 847-378-3300\r\nFollow Us\r\nSupport\r\n0900-1700 ET\r\n1400-2200 UTC\r\nSubmit a Ticket\r\nsupport@cymru.com\r\nPGP Key\r\nEmergencies: +1 847-\r\n378-3301\r\n404\r\nLooks like this page no longer exists.\r\nBack to Home Page\r\nSolutions Use Cases Community Services Customers Resources Partners Company\r\nhttps://team-cymru.com/blog/2021/03/15/fin8-badhatch-threat-indicator-enrichment/\r\nPage 1 of 2\n\n© 2026 Team Cymru. All Rights Reserved. GDPR Privacy Policy Modern Slavery Act\r\nhttps://team-cymru.com/blog/2021/03/15/fin8-badhatch-threat-indicator-enrichment/\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA",
		"Malpedia"
	],
	"references": [
		"https://team-cymru.com/blog/2021/03/15/fin8-badhatch-threat-indicator-enrichment/"
	],
	"report_names": [
		"fin8-badhatch-threat-indicator-enrichment"
	],
	"threat_actors": [
		{
			"id": "3150bf4f-288a-44b8-ab48-0ced9b052a0c",
			"created_at": "2025-08-07T02:03:24.910023Z",
			"updated_at": "2026-04-10T02:00:03.713077Z",
			"deleted_at": null,
			"main_name": "GOLD HUXLEY",
			"aliases": [
				"CTG-6969 ",
				"FIN8 "
			],
			"source_name": "Secureworks:GOLD HUXLEY",
			"tools": [
				"Gozi ISFB",
				"Powersniff"
			],
			"source_id": "Secureworks",
			"reports": null
		},
		{
			"id": "5bdde906-0416-42ee-9100-5ebd95dda77a",
			"created_at": "2023-01-06T13:46:38.601977Z",
			"updated_at": "2026-04-10T02:00:03.035842Z",
			"deleted_at": null,
			"main_name": "FIN8",
			"aliases": [
				"ATK113",
				"G0061"
			],
			"source_name": "MISPGALAXY:FIN8",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "72d09c17-e33e-4c2f-95db-f204848cc797",
			"created_at": "2022-10-25T15:50:23.832551Z",
			"updated_at": "2026-04-10T02:00:05.336787Z",
			"deleted_at": null,
			"main_name": "FIN8",
			"aliases": [
				"FIN8",
				"Syssphinx"
			],
			"source_name": "MITRE:FIN8",
			"tools": [
				"BADHATCH",
				"PUNCHBUGGY",
				"Ragnar Locker",
				"PUNCHTRACK",
				"dsquery",
				"Nltest",
				"Sardonic",
				"PsExec",
				"Impacket"
			],
			"source_id": "MITRE",
			"reports": null
		},
		{
			"id": "fc80a724-e567-457c-82bb-70147435e129",
			"created_at": "2022-10-25T16:07:23.624289Z",
			"updated_at": "2026-04-10T02:00:04.691643Z",
			"deleted_at": null,
			"main_name": "FIN8",
			"aliases": [
				"ATK 113",
				"G0061",
				"Storm-0288",
				"Syssphinx"
			],
			"source_name": "ETDA:FIN8",
			"tools": [
				"ALPHV",
				"ALPHVM",
				"BadHatch",
				"BlackCat",
				"Noberus",
				"PSVC",
				"PUNCHTRACK",
				"PoSlurp",
				"Powersniff",
				"PunchBuggy",
				"Ragnar Loader",
				"Ragnar Locker",
				"RagnarLocker",
				"Sardonic",
				"ShellTea"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434610,
	"ts_updated_at": 1775792064,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/acc60ccf3c431c40a16b9ec79107f4bc1151c9ea.pdf",
		"text": "https://archive.orkl.eu/acc60ccf3c431c40a16b9ec79107f4bc1151c9ea.txt",
		"img": "https://archive.orkl.eu/acc60ccf3c431c40a16b9ec79107f4bc1151c9ea.jpg"
	}
}