From 7191394fb5dcda84bdb1af604820352dddba9776 Mon Sep 17 00:00:00 2001 From: "Fabien B." <15647296+nusantara-self@users.noreply.github.com> Date: Wed, 23 Oct 2024 18:42:23 +0900 Subject: [PATCH] Update Analyzer report for HybridAnalysis API V2 --- .../HybridAnalysis_GetReport_1_0/long.html | 372 +++++++++++++----- 1 file changed, 281 insertions(+), 91 deletions(-) diff --git a/thehive-templates/HybridAnalysis_GetReport_1_0/long.html b/thehive-templates/HybridAnalysis_GetReport_1_0/long.html index 860321651..5f1249412 100644 --- a/thehive-templates/HybridAnalysis_GetReport_1_0/long.html +++ b/thehive-templates/HybridAnalysis_GetReport_1_0/long.html @@ -1,4 +1,4 @@ - +
{{(artifact.data || artifact.attachment.name) | fang}} @@ -10,107 +10,297 @@
- Related Reports
- + +
-
-
- Verdict: - - {{r.verdict}} -
-
-
- Threat Score: {{r.threatscore}}
-
-
- Tagged as: - - {{tag}} - -
-
- Submitted filename: {{r.submitname}}
-
-
- Analysis Start Time: {{r.analysis_start_time}}
-
-
- MD5: {{r.md5}}
-
-
- SHA1: {{r.sha1}}
-
-
- SHA256: {{r.sha256}}
-
-
- File Description: {{r.type}}
-
-
- AVdetect Score: {{r.avdetect}}
-
-
- VxFamily: {{r.vxfamily}}
-
-
- Total Signatures: {{r.total_signatures}}
-
-
- Environment Description: {{r.environmentDescription}}
-
-
- DNS requests:
  • {{domain}}
-
-
- Contacted Hosts:
  • {{host}}
-
-
- Online report: - https://www.hybrid-analysis.com/sample/{{r.sha256}} +
+ + +
+

Submissions

+
+
Filename:
+
{{submission.filename}}
+
Submission ID:
+
{{submission.submission_id}}
+
Created At:
+
{{submission.created_at | date:'medium'}}
-
-
-
- -
-
-
- Verdict: - - {{r.verdict}} -
-
-
- Submitted filename: {{r.submitname}}
-
-
- Threat Score: {{r.threatscore}}
-
-
- SHA256: {{r.sha256}}
+ + +
+
Verdict:
+
+ + {{report.verdict}} + +
+
+ + +
+
Threat Score:
+
{{report.threat_score}}
+
+ + +
+
Online Report:
+
+ + https://www.hybrid-analysis.com/sample/{{report.sha256}} + +
+
+
+ + +
+
MD5:
+
{{report.md5}}
-
- File type: {{r.type_short}}
+
+
SHA1:
+
{{report.sha1}}
-
- File Description: {{r.type}}
+
+
SHA256:
+
{{report.sha256}}
-
- AVdetect Score: {{r.avdetect}}
+
+
File Description:
+
{{report.type}}
-
- VxFamily: {{r.vxfamily}}
+
+
AVdetect Score:
+
{{report.av_detect}}
-
- Environment Description: {{r.environmentDescription}}
+
+
VxFamily:
+
{{report.vx_family}}
-
- Online report: - https://www.hybrid-analysis.com/sample/{{r.sha256}} +
+
Environment Description:
+
{{report.environment_description}}
+ + +
+

+ MITRE ATT&CK Tactics and Techniques + +

+
+
+
+
Tactic:
+
{{attck.tactic}}
+ +
Technique:
+
{{attck.technique}}
+ +
Technique ID:
+
+ {{attck.attck_id}} +
+ +
Parent Technique:
+
+ {{attck.parent.technique}} (ID: + {{attck.parent.attck_id}}) +
+ +
Malicious Identifiers Count:
+
{{attck.malicious_identifiers_count}}
+ +
Suspicious Identifiers Count:
+
{{attck.suspicious_identifiers_count}}
+ +
Informative Identifiers Count:
+
{{attck.informative_identifiers_count}}
+
+
+
+
+
+ + +
+

+ Signatures + +

+
+
+
+
Signature Name:
+
{{signature.name}}
+ +
Description:
+
{{signature.description}}
+ +
Threat Level:
+
{{signature.threat_level_human}} ({{signature.threat_level}}) +
+ +
Relevance:
+
{{signature.relevance}}
+ +
Category:
+
{{signature.category}}
+
+
+
+
+
+ + +
+

+ Extracted Files + +

+
+
+
+
File Name:
+
{{file.filename}}
+ +
Type:
+
{{file.type}}
+ +
MD5:
+
{{file.md5}}
+ +
SHA256:
+
{{file.sha256}}
+ +
Size:
+
{{file.size}}
+
+
+
+
+
+ + +
+

+ Antivirus Detection + +

+
+
+
AV Detection Score:
+
{{report.av_detect}}
+ +
VX Family:
+
{{report.vx_family}}
+ +
Malicious Engine Count:
+
{{report.malicious_engine_count}}
+ +
Malicious Engine Details:
+
+
    +
  • {{engine.name}} - {{engine.result}}
    • +
+
+
+
+
+ + +
+

+ Contacted Hosts + +

+
+
    +
  • {{host}}
    • +
+
+
+ + +
+

+ Indicators of Compromise (IoCs) + +

+
+
+
MD5:
+
{{report.md5}}
+ +
SHA1:
+
{{report.sha1}}
+ +
SHA256:
+
{{report.sha256}}
+
+
+
+ + +
+

+ Processes + +

+
+
+
+
Process Name:
+
{{process.name}}
+ +
PID:
+
{{process.pid}}
+ +
Parent PID:
+
{{process.ppid}}
+ +
Command Line:
+
{{process.command_line}}
+
+
+
+
+
+