{
	"id": "52d27dab-c987-4201-871d-5edfd8e90d95",
	"created_at": "2026-04-06T00:21:36.492183Z",
	"updated_at": "2026-04-10T13:11:25.229805Z",
	"deleted_at": null,
	"sha1_hash": "d0617eb1c4e426ee03ead0d335249487cb96c6d0",
	"title": "iocs/TA551 at master · pan-unit42/iocs",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 28179,
	"plain_text": "iocs/TA551 at master · pan-unit42/iocs\r\nBy brad-duncan\r\nArchived: 2026-04-05 23:16:50 UTC\r\nparent directory\r\n..\r\nSep 21, 2020\r\nSep 21, 2020\r\nSep 21, 2020\r\nSep 10, 2020\r\nSep 11, 2020\r\nSep 11, 2020\r\nSep 11, 2020\r\nSep 11, 2020\r\nSep 11, 2020\r\nSep 11, 2020\r\nSep 11, 2020\r\nSep 11, 2020\r\nSep 11, 2020\r\nSep 11, 2020\r\nSep 11, 2020\r\nSep 10, 2020\r\nSep 8, 2020\r\nSep 8, 2020\r\nSep 8, 2020\r\nSep 8, 2020\r\nhttps://github.com/pan-unit42/iocs/tree/master/TA551\r\nPage 1 of 3\n\nSep 2, 2020\r\nSep 2, 2020\r\nAug 18, 2020\r\nAug 28, 2020\r\nAug 28, 2020\r\nAug 28, 2020\r\nSep 2, 2020\r\nSep 2, 2020\r\nSep 2, 2020\r\nSep 8, 2020\r\nSep 10, 2020\r\nSep 11, 2020\r\nSep 14, 2020\r\nSep 16, 2020\r\nSep 17, 2020\r\nSep 21, 2020\r\nSep 24, 2020\r\nOct 7, 2020\r\nOct 7, 2020\r\nOct 12, 2020\r\nOct 13, 2020\r\nOct 15, 2020\r\nOct 16, 2020\r\nOct 19, 2020\r\nOct 21, 2020\r\nOct 27, 2020\r\nhttps://github.com/pan-unit42/iocs/tree/master/TA551\r\nPage 2 of 3\n\nOct 30, 2020\r\nOct 30, 2020\r\nNov 3, 2020\r\nNov 5, 2020\r\nNov 5, 2020\r\nDec 19, 2020\r\nDec 19, 2020\r\nDec 19, 2020\r\nDec 19, 2020\r\nDec 19, 2020\r\nDec 7, 2020\r\nDec 19, 2020\r\nDec 19, 2020\r\nDec 19, 2020\r\nDec 19, 2020\r\nSource: https://github.com/pan-unit42/iocs/tree/master/TA551\r\nhttps://github.com/pan-unit42/iocs/tree/master/TA551\r\nPage 3 of 3",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://github.com/pan-unit42/iocs/tree/master/TA551"
	],
	"report_names": [
		"TA551"
	],
	"threat_actors": [
		{
			"id": "26a04131-2b8c-4e5d-8f38-5c58b86f5e7f",
			"created_at": "2022-10-25T15:50:23.579601Z",
			"updated_at": "2026-04-10T02:00:05.360509Z",
			"deleted_at": null,
			"main_name": "TA551",
			"aliases": [
				"TA551",
				"GOLD CABIN",
				"Shathak"
			],
			"source_name": "MITRE:TA551",
			"tools": [
				"QakBot",
				"IcedID",
				"Valak",
				"Ursnif"
			],
			"source_id": "MITRE",
			"reports": null
		},
		{
			"id": "40b623c7-b621-48db-b55b-dd4f6746fbc6",
			"created_at": "2024-06-19T02:03:08.017681Z",
			"updated_at": "2026-04-10T02:00:03.665818Z",
			"deleted_at": null,
			"main_name": "GOLD CABIN",
			"aliases": [
				"Shathak",
				"TA551 "
			],
			"source_name": "Secureworks:GOLD CABIN",
			"tools": [],
			"source_id": "Secureworks",
			"reports": null
		},
		{
			"id": "90f216f2-4897-46fc-bb76-3acae9d112ca",
			"created_at": "2023-01-06T13:46:39.248936Z",
			"updated_at": "2026-04-10T02:00:03.260122Z",
			"deleted_at": null,
			"main_name": "GOLD CABIN",
			"aliases": [
				"Shakthak",
				"TA551",
				"ATK236",
				"G0127",
				"Monster Libra"
			],
			"source_name": "MISPGALAXY:GOLD CABIN",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "04e34cab-3ee4-4f06-a6f6-5cdd7eccfd68",
			"created_at": "2022-10-25T16:07:24.578896Z",
			"updated_at": "2026-04-10T02:00:05.039955Z",
			"deleted_at": null,
			"main_name": "TA551",
			"aliases": [
				"G0127",
				"Gold Cabin",
				"Monster Libra",
				"Shathak",
				"TA551"
			],
			"source_name": "ETDA:TA551",
			"tools": [
				"BokBot",
				"CRM",
				"Gozi",
				"Gozi CRM",
				"IceID",
				"IcedID",
				"Papras",
				"Snifula",
				"Ursnif",
				"Valak",
				"Valek"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434896,
	"ts_updated_at": 1775826685,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/d0617eb1c4e426ee03ead0d335249487cb96c6d0.pdf",
		"text": "https://archive.orkl.eu/d0617eb1c4e426ee03ead0d335249487cb96c6d0.txt",
		"img": "https://archive.orkl.eu/d0617eb1c4e426ee03ead0d335249487cb96c6d0.jpg"
	}
}