{
	"id": "89638aca-3e18-43bf-8a58-3bdf075f2337",
	"created_at": "2026-04-06T00:15:38.360937Z",
	"updated_at": "2026-04-10T03:31:59.322085Z",
	"deleted_at": null,
	"sha1_hash": "f6034ebdafcda006273f295bdebe9848048bc87f",
	"title": "malware-indicators/202006_DarkBasin at master · citizenlab/malware-indicators",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 40169,
	"plain_text": "malware-indicators/202006_DarkBasin at master ·\r\ncitizenlab/malware-indicators\r\nBy Cyberclues\r\nArchived: 2026-04-05 17:06:02 UTC\r\nDark Basin Indicators of Compromise\r\nThis list of IOCs is being jointly released by Citizen Lab and NortonLifeLock, further to reports released on June\r\n9, 2020.\r\nCitizen Lab Report: Dark Basin: Uncovering a Massive Hack-For-Hire Operation\r\nNortonLifeLock Report: Mercenary.Amanda\r\nNote: NortonLifeLock tracks Dark Basin as Mercenary.Amanda\r\nFiles included in this directory:\r\nopenioc.ioc : IOCs in OpenIOC format\r\nstix.xml : IOCs in STIX XML format\r\niocs.csv : IOCs in csv format\r\nmisp.json : IOCs in MISP format\r\nsnort.rules: IOCs as a Snort ruleset.\r\nSource: https://github.com/citizenlab/malware-indicators/tree/master/202006_DarkBasin\r\nhttps://github.com/citizenlab/malware-indicators/tree/master/202006_DarkBasin\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MISPGALAXY",
		"Malpedia"
	],
	"references": [
		"https://github.com/citizenlab/malware-indicators/tree/master/202006_DarkBasin"
	],
	"report_names": [
		"202006_DarkBasin"
	],
	"threat_actors": [
		{
			"id": "1a933813-3deb-4d6f-8e0f-33b9187970f9",
			"created_at": "2023-01-06T13:46:39.147547Z",
			"updated_at": "2026-04-10T02:00:03.230111Z",
			"deleted_at": null,
			"main_name": "Dark Basin",
			"aliases": [],
			"source_name": "MISPGALAXY:Dark Basin",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "60b64223-652b-4177-a678-3d675b79cff4",
			"created_at": "2022-10-25T16:07:24.478235Z",
			"updated_at": "2026-04-10T02:00:05.004167Z",
			"deleted_at": null,
			"main_name": "Dark Basin",
			"aliases": [
				"Mercenary.Amanda"
			],
			"source_name": "ETDA:Dark Basin",
			"tools": [],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434538,
	"ts_updated_at": 1775791919,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/f6034ebdafcda006273f295bdebe9848048bc87f.pdf",
		"text": "https://archive.orkl.eu/f6034ebdafcda006273f295bdebe9848048bc87f.txt",
		"img": "https://archive.orkl.eu/f6034ebdafcda006273f295bdebe9848048bc87f.jpg"
	}
}