2023-12-14 14:30:15 +00:00
|
|
|
{"Event": {"info": "M2M - GlobeImposter \"..doc\" 2017-12-27 :\n \"Invoice_1234567\" - \"Invoice_1234567.7z\"", "Tag": [{"colour": "#ffffff", "exportable": true, "name": "tlp:white"}, {"colour": "#0088cc", "exportable": true, "name": "misp-galaxy:ransomware=\"Fake Globe Ransomware\""}], "publish_timestamp": "0", "timestamp": "1515013150", "Object": [{"comment": "", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "uuid": "3ed85207-b157-4745-a30d-223cae8e8d74", "sharing_group_id": "0", "timestamp": "1515013142", "description": "File object describing a file with meta-information", "template_version": "7", "ObjectReference": [{"comment": "", "object_uuid": "3ed85207-b157-4745-a30d-223cae8e8d74", "uuid": "5a4d4414-3bac-498f-8b61-dbef02de0b81", "timestamp": "1515013140", "referenced_uuid": "15df077e-da4b-4e48-9796-be4f4d43c3c2", "relationship_type": "analysed-with"}], "Attribute": [{"comment": "", "category": "Payload delivery", "uuid": "5a4d4413-3e7c-4b1f-b366-dbef02de0b81", "timestamp": "1515013139", "to_ids": true, "value": "88892bc44277214a8c664dafac4de77b5eb480dd", "disable_correlation": false, "object_relation": "sha1", "type": "sha1"}, {"comment": "", "category": "Payload delivery", "uuid": "5a4d4413-e5d8-401e-94c7-dbef02de0b81", "timestamp": "1515013139", "to_ids": true, "value": "0780c1594f308101ab5a30baac2f3402", "disable_correlation": false, "object_relation": "md5", "type": "md5"}, {"comment": "", "category": "Payload delivery", "uuid": "5a4d4413-ea3c-42c3-8d4e-dbef02de0b81", "timestamp": "1515013139", "to_ids": true, "value": "249594d4bce1741ced9fa4396111afcd0c87e1a606dbf5b6d276294bb07ddeec", "disable_correlation": false, "object_relation": "sha256", "type": "sha256"}], "distribution": "5", "meta-category": "file", "name": "file"}, {"comment": "", "template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4", "uuid": "15df077e-da4b-4e48-9796-be4f4d43c3c2", "sharing_group_id": "0", "timestamp": "1515013139", "description": "VirusTotal report", "template_version": "1", "Attribute": [{"comment": "", "category": "External analysis", "uuid": "5a4d4413-9160-4be4-a1da-dbef02de0b81", "timestamp": "1515013139", "to_ids": false, "value": "https://www.virustotal.com/file/249594d4bce1741ced9fa4396111afcd0c87e1a606dbf5b6d276294bb07ddeec/analysis/1514726816/", "disable_correlation": false, "object_relation": "permalink", "type": "link"}, {"comment": "", "category": "Other", "uuid": "5a4d4413-4958-4c24-848a-dbef02de0b81", "timestamp": "1515013139", "to_ids": false, "value": "46/67", "disable_correlation": true, "object_relation": "detection-ratio", "type": "text"}, {"comment": "", "category": "Other", "uuid": "5a4d4413-ecc4-4f16-b5fd-dbef02de0b81", "timestamp": "1515013139", "to_ids": false, "value": "2017-12-31 13:26:56", "disable_correlation": false, "object_relation": "last-submission", "type": "datetime"}], "distribution": "5", "meta-category": "misc", "name": "virustotal-report"}], "analysis": "1", "Attribute": [{"comment": "www.smartwashingtonhomebuyers.com", "category": "Network activity", "uuid": "5a4c9331-5f8c-4dd4-8ab7-4b1a950d210f", "timestamp": "1515013138", "to_ids": false, "value": "199.188.200.143", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "5a4c932f-963c-483b-ac63-4b86950d210f", "timestamp": "1515013138", "to_ids": true, "value": "www.smartwashingtonhomebuyers.com", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "www.seoforecommerce.org", "category": "Network activity", "uuid": "5a4c932d-e4bc-4b75-b769-44d4950d210f", "timestamp": "1515013138", "to_ids": false, "value": "199.188.200.140", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "www.richardwillettphotography.com", "category": "Network activity", "uuid": "5a4c932a-a9f8-44b1-b61b-4461950d210f", "timestamp": "1515013138", "to_ids": false, "value": "184.168.131.233", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uu
|
