2023-12-14 14:30:15 +00:00
|
|
|
{"Event": {"info": "OSINT - Money-making machine: Monero-mining malware", "Tag": [{"colour": "#7a0042", "exportable": true, "name": "workflow:todo=\"create-missing-misp-galaxy-cluster\""}, {"colour": "#ffffff", "exportable": true, "name": "tlp:white"}, {"colour": "#366c00", "exportable": true, "name": "circl:incident-classification=\"malware\""}, {"colour": "#00223b", "exportable": true, "name": "osint:source-type=\"blog-post\""}, {"colour": "#a0a300", "exportable": true, "name": "dnc:malware-type=\"CoinMiner\""}], "publish_timestamp": "0", "timestamp": "1515597971", "Object": [{"comment": "", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "uuid": "ea1be23a-dfcd-48de-8872-8f836e6ac3c0", "sharing_group_id": "0", "timestamp": "1515588764", "description": "File object describing a file with meta-information", "template_version": "7", "ObjectReference": [{"comment": "", "object_uuid": "ea1be23a-dfcd-48de-8872-8f836e6ac3c0", "uuid": "5a560c9c-c028-4e79-8b2e-4ca802de0b81", "timestamp": "1515588764", "referenced_uuid": "b935385d-8974-4c8e-950c-3e68a61d1b8c", "relationship_type": "analysed-with"}], "Attribute": [{"comment": "", "category": "Payload delivery", "uuid": "5a560c9a-a474-472a-a476-441402de0b81", "timestamp": "1515588761", "to_ids": true, "value": "31721ae37835f792ee792d8324e307ba423277ae", "disable_correlation": false, "object_relation": "sha1", "type": "sha1"}, {"comment": "", "category": "Payload delivery", "uuid": "5a560c9a-eac8-403c-a26d-41a202de0b81", "timestamp": "1515588762", "to_ids": true, "value": "618e76e806a2eb4285c996395aec83e2", "disable_correlation": false, "object_relation": "md5", "type": "md5"}, {"comment": "", "category": "Payload delivery", "uuid": "5a560c9a-4724-4026-a1b8-4dd902de0b81", "timestamp": "1515588762", "to_ids": true, "value": "5adf7c44f649de93d7adbac55c9ce2cd19384e627cd5738ddae233512b624453", "disable_correlation": false, "object_relation": "sha256", "type": "sha256"}], "distribution": "5", "meta-category": "file", "name": "file"}, {"comment": "", "template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4", "uuid": "b935385d-8974-4c8e-950c-3e68a61d1b8c", "sharing_group_id": "0", "timestamp": "1515588762", "description": "VirusTotal report", "template_version": "1", "Attribute": [{"comment": "", "category": "External analysis", "uuid": "5a560c9a-2cc0-47bb-baee-41a402de0b81", "timestamp": "1515588762", "to_ids": false, "value": "https://www.virustotal.com/file/5adf7c44f649de93d7adbac55c9ce2cd19384e627cd5738ddae233512b624453/analysis/1513859719/", "disable_correlation": false, "object_relation": "permalink", "type": "link"}, {"comment": "", "category": "Other", "uuid": "5a560c9a-d1bc-4579-b347-46b602de0b81", "timestamp": "1515588762", "to_ids": false, "value": "53/67", "disable_correlation": true, "object_relation": "detection-ratio", "type": "text"}, {"comment": "", "category": "Other", "uuid": "5a560c9a-7d0c-43f5-95cc-470c02de0b81", "timestamp": "1515588762", "to_ids": false, "value": "2017-12-21 12:35:19", "disable_correlation": false, "object_relation": "last-submission", "type": "datetime"}], "distribution": "5", "meta-category": "misc", "name": "virustotal-report"}, {"comment": "", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "uuid": "d7991877-c64b-473c-9c7c-b2744a41de54", "sharing_group_id": "0", "timestamp": "1515588765", "description": "File object describing a file with meta-information", "template_version": "7", "ObjectReference": [{"comment": "", "object_uuid": "d7991877-c64b-473c-9c7c-b2744a41de54", "uuid": "5a560c9c-7b90-4ff2-90cd-403802de0b81", "timestamp": "1515588764", "referenced_uuid": "9289df9d-4871-45bb-93fb-79f880b28639", "relationship_type": "analysed-with"}], "Attribute": [{"comment": "", "category": "Payload delivery", "uuid": "5a560c9a-bf68-4a4d-a2cc-49ea02de0b81", "timestamp": "1515588762", "to_ids": true, "value": "52413ae19bbcdb9339d38a6f305e040fe83dee1b", "disable_correlation": false, "object_relation": "sha1", "type": "sha1"}, {"comment": "", "category": "Payload delivery", "uuid": "5a560c9a-f110-47a7-aa66-494b02de0b81", "timestamp": "1515
|
