Darkmon Stealer Families

Stealer family names linked to this indicator (e.g. RedLine, Vidar, Raccoon).

Darkmon multiSelect

Details

ID	`indicator_darkmonstealers`
CLI Name	`darkmonstealers`
Type	multiSelect
From Version	6.8.0
Required	No
Read Only	No
Searchable	No
Case Insensitive	Yes
Expiration (hours)	72

Associated Indicator Types

Source

incidentfield-indicator-darkmonstealers.json

Download History Raw

{
    "id": "indicator_darkmonstealers",
    "version": -1,
    "modified": "2026-05-04T00:00:00Z",
    "fromVersion": "6.8.0",
    "name": "Darkmon Stealer Families",
    "ownerOnly": false,
    "cliName": "darkmonstealers",
    "type": "multiSelect",
    "closeForm": false,
    "editForm": true,
    "required": false,
    "neverSetAsRequired": false,
    "isReadOnly": false,
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 2,
    "hidden": false,
    "openEnded": false,
    "associatedTypes": [
        "Email",
        "Account"
    ],
    "associatedToAll": false,
    "unmapped": false,
    "unsearchable": true,
    "caseInsensitive": true,
    "sla": 0,
    "threshold": 72,
    "description": "Stealer family names linked to this indicator (e.g. RedLine, Vidar, Raccoon).",
    "marketplaces": [
        "xsoar",
        "platform"
    ],
    "supportedModules": [
        "xsiam",
        "agentix"
    ]
}