{"schema":"aeternae-malware-metadata/v1","generated_at":"2026-10-08T07:56:03+00:00","total_matching":1,"page":1,"page_size":200,"records":[{"id":"c5def95c4207636314d45845962b23adb4e4178206c74a13ddf5d5f4f7268e9a","kind":"reference","title":"Crimson - S0115","family":"Crimson - S0115","category":"Malware intelligence","summary":"Name of ATT&CK software | [Crimson](https://attack.mitre.org/software/S0115) is a remote access Trojan that has been used by [Transparent Tribe](https://attack.mitre.org/groups/G0134) since at least 2016.(Citation: Proofpoint Operation Transparent Tribe March 2016)(Citation: Kaspersky Transparent Tribe August 2020)","first_seen":1663185849,"last_seen":1663185849,"created_at":1791430300,"updated_at":1791430300,"source_count":1,"data":{"context":"2022/07/transparent-tribe-targets-education.json","tags":["misp:name=\"Malware\"","misp-galaxy:mitre-malware=\"Crimson - S0115\""],"aliases":[],"references":["https://github.com/Cisco-Talos/IOCs/blob/main/2022/07/transparent-tribe-targets-education.json"],"filenames":[],"features":[],"related_cves":[],"labels":["Crimson - S0115"]},"observations":[{"source_id":"talos_ioc","source_url":"https://github.com/Cisco-Talos/IOCs/blob/main/2022/07/transparent-tribe-targets-education.json","source_label":"Crimson - S0115","evidence_class":"provider_reported","confidence":null,"observed_at":1663185849,"fetched_at":1791430300,"data":{"context":"2022/07/transparent-tribe-targets-education.json","tags":["misp:name=\"Malware\"","misp-galaxy:mitre-malware=\"Crimson - S0115\""],"aliases":[],"references":["https://github.com/Cisco-Talos/IOCs/blob/main/2022/07/transparent-tribe-targets-education.json"],"family":"Crimson - S0115"}}],"indicators":[]}]}