2023-12-14 14:30:15 +00:00
|
|
|
{"Event": {"info": "Jaff 2017-05-24 : \"IMG_1234.pdf\"", "Tag": [{"colour": "#ffffff", "exportable": true, "name": "tlp:white"}, {"colour": "#006c6c", "exportable": true, "name": "ecsirt:malicious-code=\"ransomware\""}, {"colour": "#0088cc", "exportable": true, "name": "misp-galaxy:ransomware=\"Jaff\""}], "publish_timestamp": "0", "timestamp": "1495635779", "analysis": "1", "Attribute": [{"comment": "", "category": "Network activity", "uuid": "59259743-2c78-4f39-bdb4-43b6950d210f", "timestamp": "1495635779", "to_ids": true, "value": "y887drossetorling.info", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "", "category": "Network activity", "uuid": "59259742-2c48-4321-8064-4990950d210f", "timestamp": "1495635778", "to_ids": true, "value": "http://y887drossetorling.info/a5/", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "williams-fitness.com", "category": "Network activity", "uuid": "59259742-80d4-46c3-aa7b-0cdb950d210f", "timestamp": "1495635778", "to_ids": true, "value": "143.95.44.115", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "59259741-0530-414b-b35c-436f950d210f", "timestamp": "1495635777", "to_ids": true, "value": "williams-fitness.com", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "uslugitransportowe-warszawa.pl", "category": "Network activity", "uuid": "5925973f-75c0-4061-9abe-49bc950d210f", "timestamp": "1495635775", "to_ids": true, "value": "188.68.249.235", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "59259740-40f4-4d93-9ed7-b44f950d210f", "timestamp": "1495635776", "to_ids": true, "value": "http://williams-fitness.com/FsMflooY", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "5925973e-8cc0-40f1-8086-b45c950d210f", "timestamp": "1495635774", "to_ids": true, "value": "uslugitransportowe-warszawa.pl", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "", "category": "Network activity", "uuid": "5925973d-8924-4d1e-a4a5-31d2950d210f", "timestamp": "1495635773", "to_ids": true, "value": "http://uslugitransportowe-warszawa.pl/FsMflooY", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "tdtuusula.com", "category": "Network activity", "uuid": "5925973c-cadc-455d-8622-486b950d210f", "timestamp": "1495635772", "to_ids": true, "value": "95.213.201.30", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "5925973b-3e18-45d1-90a9-b459950d210f", "timestamp": "1495635771", "to_ids": true, "value": "tdtuusula.com", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "", "category": "Network activity", "uuid": "5925973a-3620-4b70-aa96-4737950d210f", "timestamp": "1495635770", "to_ids": true, "value": "http://tdtuusula.com/FsMflooY", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "tbhomeinspection.com", "category": "Network activity", "uuid": "5925973a-7510-4c57-ace1-0cd9950d210f", "timestamp": "1495635770", "to_ids": true, "value": "70.33.241.150", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "59259739-6930-48d4-bfc6-4a53950d210f", "timestamp": "1495635769", "to_ids": true, "value": "tbhomeinspection.com", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "", "category": "Network activity", "uuid": "59259738-efb0-470f-9a11-b456950d210f", "timestamp": "1495635768", "to_ids": true, "value": "http://tbhomeinspection.com/FsMflooY", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "tabelaistanbul.net", "category": "Network activity", "uuid": "59259737-c364-4241-995e-4c9c950d210f", "timestamp
|
