{
  "name": "Raspberry Robin Analysis",
  "slug": "raspberry-robin-analysis",
  "description": "Raspberry Robin, a malicious downloader discovered in 2021, has been circulating for years, primarily spreading through infected USB devices. It stands out due to its unique binary-obfuscation techniques, extensive use of anti-analysis methods, and privilege escalation exploits. The malware uses multiple code layers, each employing various obfuscation techniques. It communicates with command-and-control servers via the TOR network and can propagate through networks. Raspberry Robin employs numerous anti-analysis and evasion methods, including CPU performance checks, Windows API manipulations, and registry modifications. It uses UAC-bypass methods and local privilege escalation exploits to elevate privileges. The malware's primary goal is to download and execute payloads on compromised hosts, collecting extensive system information before requesting the payload.",
  "published": "2024-11-19T20:59:06+00:00",
  "created_at": "2024-11-19T20:59:06+00:00",
  "modified_at": "2024-11-20T08:29:41+00:00",
  "created_at_opencti": "2024-11-19T20:59:06+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-11-19",
    "CVE-2021-31969",
    "CVE-2024-26229",
    "anti-analysis",
    "network-propagation",
    "obfuscation",
    "privilege-escalation",
    "raspberry robin",
    "tor",
    "usb-spreading"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "https://yebmhucezgghpzwvgqi5y2djfufgtrwcbbta547oaxw5kzi6sa2hopad.onion:3054/"
      },
      {
        "id": "",
        "name": "https://xbeopilgchtzd5u7yu36jlsp5cfgaqeuxkaon7yjle7lrtb3abi476id.onion:29454/"
      },
      {
        "id": "",
        "name": "https://wwbshp6hgnvtqwtbychvrchldbwifnf7djlpnuvf45dgn5up7w4xqqqd.onion:43728/"
      },
      {
        "id": "",
        "name": "https://wdmr4ow76xfig5rgffnufdu7o4abkowc7keqeaiq7fkrxofwsue5wtyd.onion:60499/"
      },
      {
        "id": "",
        "name": "https://vwmnexb2eiaencaw64hcrvv7tucksas6qbms5acpa222m2c5wigq3syd.onion:22567/"
      },
      {
        "id": "",
        "name": "https://vt6r47ek7oi2svzj2s4pguogzwumlulju4zkdf6nh7xnkugylxuy7tad.onion:23133/"
      },
      {
        "id": "",
        "name": "https://vor57f3yvqw3ddq4o3gkzkqdvczenmf5isiyb7vp7tc7xiokrjxxzcqd.onion:30408/"
      },
      {
        "id": "",
        "name": "https://vkz4q4hufi2ekksnwo2op4e5dgj7vatip2nvwmo2vsodmuau46yxmyyd.onion:37379/"
      },
      {
        "id": "",
        "name": "https://vf4ucetbu7qcy3p3d7ayntpzhjo3fzlaszu3y4wzhq642hdw2ptxn7yd.onion:20898/"
      },
      {
        "id": "",
        "name": "https://vbtzr7t7y7pxduueznc4mntv2zgrt66m4zvore5jahma2s7do7kguead.onion:14099/"
      },
      {
        "id": "",
        "name": "https://uup6i2g2uhsmsts6t4h5s652hficknfnpzs662x2q3iym5ddninyemad.onion:38869/"
      },
      {
        "id": "",
        "name": "https://twlittqpz6hslkwrwaczn6b55jb4iz46erykvrnzhlyfssnk5uwwlmyd.onion:44045/"
      },
      {
        "id": "",
        "name": "https://tnpiydtimuugdaixsyuew4nofzggjdsyyo3ctw2uzi4drll4axm3diyd.onion:38584/"
      },
      {
        "id": "",
        "name": "https://srssvp2lk3vnwttncfxogitwrdo5y7nljcj6razz3ghjqdpxp4x2m2yd.onion:16259/"
      },
      {
        "id": "",
        "name": "https://sj5ud3jiqkp47zza57xvrpno5tw6nrvxbxzvgn4k2fmyzzprhf6jxxid.onion:46597/"
      },
      {
        "id": "",
        "name": "https://sj3jle6rfggaumbex4fqhb63vj7so5sy6e7wlgrlmayk3pmhtmgtwfid.onion:48986/"
      },
      {
        "id": "",
        "name": "https://s626jyykfd2vpeel7rswnlmwsjcumjgwsw2hdo3shphtih64ayu7n6yd.onion:57739/"
      },
      {
        "id": "",
        "name": "https://s26a7zwwxapsmm3hi3awsz7cd5mjwxhl3gd6bplhiwvekm4hys2u32qd.onion:10429/"
      },
      {
        "id": "",
        "name": "https://rucaoeomop3yeepq5iyawcxjjt6x3tah5flbai2fewotjwomf6xqvxqd.onion:8314/"
      },
      {
        "id": "",
        "name": "https://rabwadnfs35sjfmrvka7vras7hj3s22aixx72da5x3zbsnk3cxxo77qd.onion:48151/"
      },
      {
        "id": "",
        "name": "https://qryejmh3imdjrvns2rbncl3gfw5a2etzwktm2uplavp7jn4stw3lbwqd.onion:26196/"
      },
      {
        "id": "",
        "name": "https://purcdflu3cqzjfc3rwzr2jxz2e6yiaiks4ej2sn4t4hux2lnksfe3dqd.onion:17141/"
      },
      {
        "id": "",
        "name": "https://odvrlneiow77fspjz4lrj425jo7fmd5cv4q3iasjcqwe35ybei7wabyd.onion:43303/"
      },
      {
        "id": "",
        "name": "https://nxwhpmhofmoglbaq66de3bl3hp5x5y6d7cnwhldjzdex4dokchzeqlad.onion:25785/"
      },
      {
        "id": "",
        "name": "https://nuco75srh4vta5zglxcp4ziabljitvr5yfeqcnwzdauufkzo3hd2w3qd.onion:35495/"
      },
      {
        "id": "",
        "name": "https://l234audkv4np4z7ifp2apoven7hzbyjrfvteoh6fvjarc6cd6vxfe4ad.onion:48212/"
      },
      {
        "id": "",
        "name": "https://kvlrfiowwiwft7od7mlbdcxouuozm56dqv4uyhfcdbabqydv3htolvid.onion:26783/"
      },
      {
        "id": "",
        "name": "https://kqt3ukq3rrodfxd7ce75rboussy6slxdprzcierd65oq26ddgpelyqid.onion:14927/"
      },
      {
        "id": "",
        "name": "https://kohtbl3ucs6xvqosbxd7dnfh5y3ag6tjix3bdflz4p5dw4g3g62oygid.onion:55616/"
      },
      {
        "id": "",
        "name": "https://knrkrkipiff7vxymch6t54b2n2wnizt6baqsbp24zyfmaggstjwpb6id.onion:11844/"
      },
      {
        "id": "",
        "name": "https://j6ra6hqk7cssp5fazkwlltqdfbgl3azhktccc2hefoco46p4qhvgcgid.onion:35543/"
      },
      {
        "id": "",
        "name": "https://j62wwivnsntjporvag3u3xc3rfrqio25a7lhxamgfnjd7kdnhpnu7eqd.onion:26622/"
      },
      {
        "id": "",
        "name": "https://gqqw74q2ig2vfnrwhm6ulxe2ipzieckpiozjufvhhsxoidy5wjq2bmqd.onion:23899/"
      },
      {
        "id": "",
        "name": "https://fthappkft575kd4snugjnqg7nbk5noxd7jnyvprulecbadzjkpszclyd.onion:52134/"
      },
      {
        "id": "",
        "name": "https://fnnkuvyleutbgw65bedvueiflhytyds5fu6vxeg56ihr5qu6getug7ad.onion:18678/"
      },
      {
        "id": "",
        "name": "https://exmd723nzabqwzd2iq3yjcqsavz6o65vxyl465vedfiiaefdjv3oiwyd.onion:44004/"
      },
      {
        "id": "",
        "name": "https://e6f6ex6jdvwjv5453eeakpxa5l3fz255zmfpgtw7oxynepfm334725id.onion:15328/"
      },
      {
        "id": "",
        "name": "https://dy4upangcmvzpx56we77keuhvtta2734w2upg3nuloqyxlhmipt63fid.onion:49716/"
      },
      {
        "id": "",
        "name": "https://dqgpc53vh2rzagqolhyesfwhtnivr7l7gl745vy3wzzdpzca4epoy6qd.onion:55452/"
      },
      {
        "id": "",
        "name": "https://cr5rnanscwakq3amo5nvdl4kdkhgbxv37aaqbqmmtjt6ufkwtke7suid.onion:35724/"
      },
      {
        "id": "",
        "name": "https://cpxqqmy3xerxafsupnj2ucccgxnbbjujf5rfrvxdlkqxczidfz5rloyd.onion:36428/"
      },
      {
        "id": "",
        "name": "https://bcxed2rymdhu7s2tec2xjtscfaqdvdyqxtasif6ym5epuyxddcrjncid.onion:42332/"
      },
      {
        "id": "",
        "name": "https://b5z6wlu5427v5dyw3ax3agclku7gmtmnwiepjif3w6styzifcnl6vfqd.onion:13811/"
      },
      {
        "id": "",
        "name": "https://ayah2jmok6u7eo6rtksfaxo6zcz6cgjpwnxtdo66jolz26ymaq6ssfid.onion:44844/"
      },
      {
        "id": "",
        "name": "https://aonw5ldru6t4xwwl4ifzonaggkm7gcpegiyaccryzh64yzks3fkabiyd.onion:47210/"
      },
      {
        "id": "",
        "name": "https://7bbkpvrpatpzrreu36bzemj7fejgglqqzwdn4avgvpf67zwqpzc44vqd.onion:55965/"
      },
      {
        "id": "",
        "name": "https://7oqgixcydaoxc3ayv6raiufxmwpd22oeo56rbitbyv7ndmjqhsl5m7qd.onion:22408/"
      },
      {
        "id": "",
        "name": "https://6x6k5kgzgtajkimxkto4m6eqcxfhcxirlwwtfsjd3ilwqfp5ovnyu2id.onion:36112/"
      },
      {
        "id": "",
        "name": "https://6uhcvcp6hm2rvajmsrqhi6q5kgel2vwencjvnxouwv7a7erbwydjx6id.onion:4615/"
      },
      {
        "id": "",
        "name": "https://6s75xlg3auzdnccos4re4hrmcxyg6fivxsqm3cldv2gowl2engljtqyd.onion:58212/"
      },
      {
        "id": "",
        "name": "https://6praos6qyi3b5kcurfqe4kyh5ihu4k3z6mjbggkixnfyhbpomy5szoad.onion:4123/"
      },
      {
        "id": "",
        "name": "https://6kykjg6h7sjqru5puc57mb2nhd2bwhtewdswnsg4rlr3rw6t4iqrpgyd.onion:13392/"
      },
      {
        "id": "",
        "name": "https://6agzykvu3rjnwpdnky777ffxb5dj4fiemftho4tsoeakp2xa542pj7id.onion:34024/"
      },
      {
        "id": "",
        "name": "https://64iahnunyhf6ph6qvakjp22a3j6wlvl4sdmbh6elwri6up5gpnm7xkyd.onion:33960/"
      },
      {
        "id": "",
        "name": "https://5bqxmurmtkqlzis65uu22aspcuhivb6vpzpcpma5wfl5ngz2ha6oxzqd.onion:18231/"
      },
      {
        "id": "",
        "name": "https://4rnzfvzybry65auecpi3n67c6ynuunvs77qpk45svyhhsj6oisibk3qd.onion:39567/"
      },
      {
        "id": "",
        "name": "https://4jtsmu3u4yrbehjf4rzfwsswhpc7ohs4nrfnlfu3xebteeaf4uv3okyd.onion:37151/"
      },
      {
        "id": "",
        "name": "https://3zs4zdszo3lesutdbuenzvlspuh6wljj6eyntv73dxxig3bk2wcskrad.onion:15842/"
      },
      {
        "id": "",
        "name": "https://3bh22ezbxub3dopbqja7jjymdussvwgl3eu4xzlsdyagtnhzxy3tr3id.onion:3367/"
      },
      {
        "id": "",
        "name": "https://2pxsdtxngssu3vqqujdfgu4bsmlkp3d2ytctawznlhhez6tq57wzpzqd.onion:55314/"
      },
      {
        "id": "",
        "name": "yebmhucezgghpzwvgqi5y2djfufgtrwcbbta547oaxw5kzi6sa2hopad.onion"
      },
      {
        "id": "",
        "name": "xbeopilgchtzd5u7yu36jlsp5cfgaqeuxkaon7yjle7lrtb3abi476id.onion"
      },
      {
        "id": "",
        "name": "wwbshp6hgnvtqwtbychvrchldbwifnf7djlpnuvf45dgn5up7w4xqqqd.onion"
      },
      {
        "id": "",
        "name": "wdmr4ow76xfig5rgffnufdu7o4abkowc7keqeaiq7fkrxofwsue5wtyd.onion"
      },
      {
        "id": "",
        "name": "vwmnexb2eiaencaw64hcrvv7tucksas6qbms5acpa222m2c5wigq3syd.onion"
      },
      {
        "id": "",
        "name": "vt6r47ek7oi2svzj2s4pguogzwumlulju4zkdf6nh7xnkugylxuy7tad.onion"
      },
      {
        "id": "",
        "name": "vor57f3yvqw3ddq4o3gkzkqdvczenmf5isiyb7vp7tc7xiokrjxxzcqd.onion"
      },
      {
        "id": "",
        "name": "vkz4q4hufi2ekksnwo2op4e5dgj7vatip2nvwmo2vsodmuau46yxmyyd.onion"
      },
      {
        "id": "",
        "name": "vf4ucetbu7qcy3p3d7ayntpzhjo3fzlaszu3y4wzhq642hdw2ptxn7yd.onion"
      },
      {
        "id": "",
        "name": "vbtzr7t7y7pxduueznc4mntv2zgrt66m4zvore5jahma2s7do7kguead.onion"
      },
      {
        "id": "",
        "name": "uup6i2g2uhsmsts6t4h5s652hficknfnpzs662x2q3iym5ddninyemad.onion"
      },
      {
        "id": "",
        "name": "twlittqpz6hslkwrwaczn6b55jb4iz46erykvrnzhlyfssnk5uwwlmyd.onion"
      },
      {
        "id": "",
        "name": "tnpiydtimuugdaixsyuew4nofzggjdsyyo3ctw2uzi4drll4axm3diyd.onion"
      },
      {
        "id": "",
        "name": "srssvp2lk3vnwttncfxogitwrdo5y7nljcj6razz3ghjqdpxp4x2m2yd.onion"
      },
      {
        "id": "",
        "name": "sj5ud3jiqkp47zza57xvrpno5tw6nrvxbxzvgn4k2fmyzzprhf6jxxid.onion"
      },
      {
        "id": "",
        "name": "sj3jle6rfggaumbex4fqhb63vj7so5sy6e7wlgrlmayk3pmhtmgtwfid.onion"
      },
      {
        "id": "",
        "name": "s626jyykfd2vpeel7rswnlmwsjcumjgwsw2hdo3shphtih64ayu7n6yd.onion"
      },
      {
        "id": "",
        "name": "s26a7zwwxapsmm3hi3awsz7cd5mjwxhl3gd6bplhiwvekm4hys2u32qd.onion"
      },
      {
        "id": "",
        "name": "rabwadnfs35sjfmrvka7vras7hj3s22aixx72da5x3zbsnk3cxxo77qd.onion"
      },
      {
        "id": "",
        "name": "rucaoeomop3yeepq5iyawcxjjt6x3tah5flbai2fewotjwomf6xqvxqd.onion"
      },
      {
        "id": "",
        "name": "qryejmh3imdjrvns2rbncl3gfw5a2etzwktm2uplavp7jn4stw3lbwqd.onion"
      },
      {
        "id": "",
        "name": "purcdflu3cqzjfc3rwzr2jxz2e6yiaiks4ej2sn4t4hux2lnksfe3dqd.onion"
      },
      {
        "id": "",
        "name": "odvrlneiow77fspjz4lrj425jo7fmd5cv4q3iasjcqwe35ybei7wabyd.onion"
      },
      {
        "id": "",
        "name": "nxwhpmhofmoglbaq66de3bl3hp5x5y6d7cnwhldjzdex4dokchzeqlad.onion"
      },
      {
        "id": "",
        "name": "nuco75srh4vta5zglxcp4ziabljitvr5yfeqcnwzdauufkzo3hd2w3qd.onion"
      },
      {
        "id": "",
        "name": "l234audkv4np4z7ifp2apoven7hzbyjrfvteoh6fvjarc6cd6vxfe4ad.onion"
      },
      {
        "id": "",
        "name": "kvlrfiowwiwft7od7mlbdcxouuozm56dqv4uyhfcdbabqydv3htolvid.onion"
      },
      {
        "id": "",
        "name": "kqt3ukq3rrodfxd7ce75rboussy6slxdprzcierd65oq26ddgpelyqid.onion"
      },
      {
        "id": "",
        "name": "kohtbl3ucs6xvqosbxd7dnfh5y3ag6tjix3bdflz4p5dw4g3g62oygid.onion"
      },
      {
        "id": "",
        "name": "knrkrkipiff7vxymch6t54b2n2wnizt6baqsbp24zyfmaggstjwpb6id.onion"
      },
      {
        "id": "",
        "name": "j6ra6hqk7cssp5fazkwlltqdfbgl3azhktccc2hefoco46p4qhvgcgid.onion"
      },
      {
        "id": "",
        "name": "j62wwivnsntjporvag3u3xc3rfrqio25a7lhxamgfnjd7kdnhpnu7eqd.onion"
      },
      {
        "id": "",
        "name": "gqqw74q2ig2vfnrwhm6ulxe2ipzieckpiozjufvhhsxoidy5wjq2bmqd.onion"
      },
      {
        "id": "",
        "name": "fthappkft575kd4snugjnqg7nbk5noxd7jnyvprulecbadzjkpszclyd.onion"
      },
      {
        "id": "",
        "name": "fnnkuvyleutbgw65bedvueiflhytyds5fu6vxeg56ihr5qu6getug7ad.onion"
      },
      {
        "id": "",
        "name": "exmd723nzabqwzd2iq3yjcqsavz6o65vxyl465vedfiiaefdjv3oiwyd.onion"
      },
      {
        "id": "",
        "name": "e6f6ex6jdvwjv5453eeakpxa5l3fz255zmfpgtw7oxynepfm334725id.onion"
      },
      {
        "id": "",
        "name": "dy4upangcmvzpx56we77keuhvtta2734w2upg3nuloqyxlhmipt63fid.onion"
      },
      {
        "id": "",
        "name": "dqgpc53vh2rzagqolhyesfwhtnivr7l7gl745vy3wzzdpzca4epoy6qd.onion"
      },
      {
        "id": "",
        "name": "cr5rnanscwakq3amo5nvdl4kdkhgbxv37aaqbqmmtjt6ufkwtke7suid.onion"
      },
      {
        "id": "",
        "name": "cpxqqmy3xerxafsupnj2ucccgxnbbjujf5rfrvxdlkqxczidfz5rloyd.onion"
      },
      {
        "id": "",
        "name": "bcxed2rymdhu7s2tec2xjtscfaqdvdyqxtasif6ym5epuyxddcrjncid.onion"
      },
      {
        "id": "",
        "name": "b5z6wlu5427v5dyw3ax3agclku7gmtmnwiepjif3w6styzifcnl6vfqd.onion"
      },
      {
        "id": "",
        "name": "ayah2jmok6u7eo6rtksfaxo6zcz6cgjpwnxtdo66jolz26ymaq6ssfid.onion"
      },
      {
        "id": "",
        "name": "aonw5ldru6t4xwwl4ifzonaggkm7gcpegiyaccryzh64yzks3fkabiyd.onion"
      },
      {
        "id": "",
        "name": "7oqgixcydaoxc3ayv6raiufxmwpd22oeo56rbitbyv7ndmjqhsl5m7qd.onion"
      },
      {
        "id": "",
        "name": "7bbkpvrpatpzrreu36bzemj7fejgglqqzwdn4avgvpf67zwqpzc44vqd.onion"
      },
      {
        "id": "",
        "name": "6x6k5kgzgtajkimxkto4m6eqcxfhcxirlwwtfsjd3ilwqfp5ovnyu2id.onion"
      },
      {
        "id": "",
        "name": "6uhcvcp6hm2rvajmsrqhi6q5kgel2vwencjvnxouwv7a7erbwydjx6id.onion"
      },
      {
        "id": "",
        "name": "6s75xlg3auzdnccos4re4hrmcxyg6fivxsqm3cldv2gowl2engljtqyd.onion"
      },
      {
        "id": "",
        "name": "6praos6qyi3b5kcurfqe4kyh5ihu4k3z6mjbggkixnfyhbpomy5szoad.onion"
      },
      {
        "id": "",
        "name": "6kykjg6h7sjqru5puc57mb2nhd2bwhtewdswnsg4rlr3rw6t4iqrpgyd.onion"
      },
      {
        "id": "",
        "name": "6agzykvu3rjnwpdnky777ffxb5dj4fiemftho4tsoeakp2xa542pj7id.onion"
      },
      {
        "id": "",
        "name": "64iahnunyhf6ph6qvakjp22a3j6wlvl4sdmbh6elwri6up5gpnm7xkyd.onion"
      },
      {
        "id": "",
        "name": "5bqxmurmtkqlzis65uu22aspcuhivb6vpzpcpma5wfl5ngz2ha6oxzqd.onion"
      },
      {
        "id": "",
        "name": "4rnzfvzybry65auecpi3n67c6ynuunvs77qpk45svyhhsj6oisibk3qd.onion"
      },
      {
        "id": "",
        "name": "4jtsmu3u4yrbehjf4rzfwsswhpc7ohs4nrfnlfu3xebteeaf4uv3okyd.onion"
      },
      {
        "id": "",
        "name": "3zs4zdszo3lesutdbuenzvlspuh6wljj6eyntv73dxxig3bk2wcskrad.onion"
      },
      {
        "id": "",
        "name": "3bh22ezbxub3dopbqja7jjymdussvwgl3eu4xzlsdyagtnhzxy3tr3id.onion"
      },
      {
        "id": "",
        "name": "2pxsdtxngssu3vqqujdfgu4bsmlkp3d2ytctawznlhhez6tq57wzpzqd.onion"
      },
      {
        "id": "",
        "name": "852ce7c57c68243a1189db61e750056041bed3802f2c48dcee4cfc189b4e4949"
      },
      {
        "id": "",
        "name": "5b8043e178373d4b732c6bf1013173b9f9a1f30269996392da367547d6a4a70f"
      },
      {
        "id": "",
        "name": "0632a600bd59a0fab86fd199a041b1d159162ae1d8d7ad62150270257bd9bc8b"
      },
      {
        "id": "",
        "name": "240.0.0.0/4"
      },
      {
        "id": "",
        "name": "224.0.0.0/4"
      },
      {
        "id": "",
        "name": "127.0.0.0/8"
      }
    ],
    "malware": [
      {
        "id": "legacy:malware:108c74f4dca44be5",
        "name": "Bumblebee - S1039",
        "slug": "bumblebee-s1039"
      },
      {
        "id": "legacy:malware:6c24141fb3cf8ff4",
        "name": "Raspberry Robin",
        "slug": "raspberry-robin"
      }
    ],
    "attack_patterns": [
      {
        "id": "c03d3676-9644-4b46-b49a-fd0f8e0325ee",
        "name": "T1134.005"
      },
      {
        "id": "741a926d-4157-412c-9296-f701c8dbd56d",
        "name": "T1027.003"
      },
      {
        "id": "8634c845-2e3a-4ea5-a9a3-6f694468408c",
        "name": "T1027.001"
      },
      {
        "id": "894026fa-e537-4b95-b612-7dd8bc367a0d",
        "name": "T1078.001"
      },
      {
        "id": "c998d878-b668-40dd-a84c-9ca7f73caaa4",
        "name": "T1497.003"
      },
      {
        "id": "d048ac4b-dd28-4c66-b62b-fe25cefef481",
        "name": "T1548.002"
      },
      {
        "id": "42414354-718a-4603-8b00-52fa7d6fe061",
        "name": "T1497.002"
      },
      {
        "id": "7dc1bc79-ccad-419e-b7c0-0f7fa8522270",
        "name": "T1055.012"
      },
      {
        "id": "e1b18ecf-d74e-4fe6-9bd4-ca6a62e7d818",
        "name": "T1027.002"
      },
      {
        "id": "0192fd78-09e3-4fe4-a9d3-38a7137e15fa",
        "name": "T1055.002"
      },
      {
        "id": "05ac27d4-58d0-44b2-a984-cd5aefd1f7f9",
        "name": "T1497.001"
      },
      {
        "id": "1f2ce0cc-430c-4317-a332-83a27cbad1d3",
        "name": "T1548"
      },
      {
        "id": "45c400ce-708d-4ac2-8ea7-57c971a83ce5",
        "name": "T1027.005"
      },
      {
        "id": "32817170-4c07-427e-b8a5-80a733ae2550",
        "name": "T1497"
      },
      {
        "id": "a7262c61-4567-4a00-8cec-aae6264234a9",
        "name": "T1218"
      },
      {
        "id": "c3af9fd7-d307-4df4-9220-cc627938fb85",
        "name": "T1055"
      },
      {
        "id": "14da8ebf-e0b0-4d4e-9c83-56277980f266",
        "name": "T1134"
      },
      {
        "id": "0156fcda-e385-4662-b388-086c3e16feec",
        "name": "T1140"
      },
      {
        "id": "0c836307-129e-4ff7-a532-180c633cacba",
        "name": "T1027"
      },
      {
        "id": "9f11a241-9abc-4c57-95dd-33955ab08826",
        "name": "T1078"
      }
    ],
    "vulnerabilities": [
      {
        "id": "",
        "name": "CVE-2021-31969"
      },
      {
        "id": "",
        "name": "CVE-2024-26229"
      }
    ]
  },
  "external_refs": [
    "https://www.zscaler.com/blogs/security-research/unraveling-raspberry-robin-s-layers-analyzing-obfuscation-techniques-and",
    "https://otx.alienvault.com/pulse/673d0a2a7c47319a87f3e253"
  ]
}