ACTI Malware Family

Details

ID	`ACTI Malware Family`
From Version	6.0.0
Reputation Command	`acti-get-fundamentals-by-uuid`
Format Script	FormatACTIURL
Layout	ACTI Malware Family

Detection Regex

https://intelgraph.idefense.com/#/node/malware_family/view/\w{8}-\w{4}-\w{4}-\w{4}-\w{12}

Manual Mapping (9)

Indicator Field	Source Path
`actiabstract`	ACTI_MalwareFamily.Description
`actiindextimestamp`	ACTI_MalwareFamily.IndexTimestamp
`actilastmodified`	ACTI_MalwareFamily.LastModified
`actilastpublished`	ACTI_MalwareFamily.LastPublished
`actireporttitle`	## ${ACTI_MalwareFamily.Name}
`actiseverity`	ACTI_MalwareFamily.Severity
`actithreattypes`	ACTI_MalwareFamily.ThreatTypes
`actiuuid`	ACTI_MalwareFamily.value
`creationdate`	ACTI_MalwareFamily.CreatedOn

Source

indicatortype-ACTI_Malware_Family.json

Download History Raw

{
	"id": "ACTI Malware Family",
	"version": -1,
	"fromVersion": "6.0.0",
	"modified": "2022-04-08T09:28:00.577562176Z",
	"commitMessage": "",
	"shouldCommit": false,
	"regex": "https://intelgraph.idefense.com/#/node/malware_family/view/\\w{8}-\\w{4}-\\w{4}-\\w{4}-\\w{12}",
	"details": "ACTI Malware Family",
	"prevDetails": "ACTI Malware Family",
	"legacyNames": null,
	"reputationScriptName": "",
	"reputationCommand": "acti-get-fundamentals-by-uuid",
	"enhancementScriptNames": [],
	"system": false,
	"locked": false,
	"disabled": false,
	"file": false,
	"updateAfter": 0,
	"mergeContext": false,
	"formatScript": "FormatACTIURL",
	"contextPath": "",
	"contextValue": "",
	"excludedBrands": [],
	"defaultMapping": null,
	"manualMapping": {
		"actiabstract": {
			"simple": "ACTI_MalwareFamily.Description"
		},
		"actiindextimestamp": {
			"simple": "ACTI_MalwareFamily.IndexTimestamp"
		},
		"actilastmodified": {
			"simple": "ACTI_MalwareFamily.LastModified"
		},
		"actilastpublished": {
			"simple": "ACTI_MalwareFamily.LastPublished"
		},
		"actireporttitle": {
			"simple": "## ${ACTI_MalwareFamily.Name}"
		},
		"actiseverity": {
			"simple": "ACTI_MalwareFamily.Severity"
		},
		"actithreattypes": {
			"simple": "ACTI_MalwareFamily.ThreatTypes"
		},
		"actiuuid": {
			"simple": "ACTI_MalwareFamily.value"
		},
		"creationdate": {
			"simple": "ACTI_MalwareFamily.CreatedOn"
		}
	},
	"fileHashesPriority": null,
	"expiration": 0,
	"layout": "ACTI Malware Family"
}