2023-12-14 14:30:15 +00:00
|
|
|
{"Event": {"info": "Password-protected docs 2017-05-17 : Ursnif 2002 - \"someone@mycompany.com-ab1_c23def4lg56hi#78j.docx\"", "Tag": [{"colour": "#ffffff", "exportable": true, "name": "tlp:white"}], "publish_timestamp": "0", "timestamp": "1495107701", "analysis": "1", "Attribute": [{"comment": "", "category": "Artifacts dropped", "uuid": "591d569e-4c54-4ebd-9674-c525950d210f", "timestamp": "1495094942", "to_ids": true, "value": "bd69c7180be424f1c17129b6ffa0d8e2", "disable_correlation": false, "object_relation": null, "type": "md5"}, {"comment": "", "category": "Artifacts dropped", "uuid": "591d569f-0e30-4633-bc78-c51f950d210f", "timestamp": "1495094943", "to_ids": true, "value": "2b6827c73ebb9acae9d2483b8b23fd76", "disable_correlation": false, "object_relation": null, "type": "md5"}, {"comment": "", "category": "Network activity", "uuid": "591d56a0-884c-4f78-a3d1-a004950d210f", "timestamp": "1495094944", "to_ids": true, "value": "http://91.247.36.92/132957927.bmp", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "591d56a1-d888-4e6e-b873-c51a950d210f", "timestamp": "1495094945", "to_ids": true, "value": "91.247.36.92", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "", "category": "Network activity", "uuid": "591d56a2-fa00-473c-8c3b-9f05950d210f", "timestamp": "1495094946", "to_ids": true, "value": "http://www.librairiescdd.be/sp.png", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "591d56a3-e37c-4a8c-b5ef-c520950d210f", "timestamp": "1495094947", "to_ids": true, "value": "www.librairiescdd.be", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "www.librairiescdd.be", "category": "Network activity", "uuid": "591d56a4-8710-485e-8cb8-c525950d210f", "timestamp": "1495094948", "to_ids": true, "value": "46.105.101.143", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "DGA seed text", "category": "Network activity", "uuid": "591d56a5-2a4c-47c1-89d6-99a3950d210f", "timestamp": "1495107655", "to_ids": false, "value": "http://www.php.net/license/3_0.txt", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "591d56a7-a0ac-4137-be18-a005950d210f", "timestamp": "1495094951", "to_ids": true, "value": "inclvoluntaryallcondi.ru", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "591d56a8-4f84-46ba-a36e-c520950d210f", "timestamp": "1495094952", "to_ids": true, "value": "inclvoluntaryallcondi.ru", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "inclvoluntaryallcondi.ru", "category": "Network activity", "uuid": "591d56a8-f7e0-4703-90b5-99a3950d210f", "timestamp": "1495094952", "to_ids": true, "value": "87.106.18.141", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "591d56a9-a470-4b50-82d3-99a4950d210f", "timestamp": "1495094953", "to_ids": true, "value": "andninformationfrom.ru", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "591d56aa-faf0-4c29-8cde-c518950d210f", "timestamp": "1495094954", "to_ids": true, "value": "andninformationfrom.ru", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "andninformationfrom.ru", "category": "Network activity", "uuid": "591d56ab-8810-4a99-9bf8-a005950d210f", "timestamp": "1495094955", "to_ids": true, "value": "77.120.185.50", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "andninformationfrom.ru", "category": "Network activity", "uuid": "591d56ac-4a1c-4292-affc-99a9950d210f", "timestamp": "1495094956", "to_ids": true, "value": "188.230.57.174", "disable_correlation": false, "object_relation": null, "type":
|
