adulau/misp-circl-feed
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Packages Wiki Activity Actions
misp-circl-feed/feeds/circl/stix-2.1/56e962e9-ed10-48d8-b885-4bcd950d210f.json

2637 lines
475 KiB
JSON
Raw Permalink Normal View History

chg: [misp-stix] STIX 2.1 export added
2023-04-21 14:44:17 +00:00
{
"type": "bundle",
"id": "bundle--56e962e9-ed10-48d8-b885-4bcd950d210f",
"objects": [
{
"type": "identity",
"spec_version": "2.1",
"id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:45:31.000Z",
"modified": "2016-03-16T14:45:31.000Z",
"name": "CIRCL",
"identity_class": "organization"
},
{
"type": "report",
"spec_version": "2.1",
"id": "report--56e962e9-ed10-48d8-b885-4bcd950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:45:31.000Z",
"modified": "2016-03-16T14:45:31.000Z",
"name": "Dridex of the day (2016-03-16) - botnet 120",
"published": "2016-03-16T14:40:38Z",
"object_refs": [
"indicator--56e96300-1504-414c-8c23-420b950d210f",
"indicator--56e96300-4894-4f5c-9af3-4adb950d210f",
"indicator--56e96300-1b18-40fe-b1e1-4edb950d210f",
"indicator--56e96300-a3f0-4aa7-adc7-4cbe950d210f",
"indicator--56e96301-1a98-451a-a2c9-4d38950d210f",
"indicator--56e96301-6cac-4173-9713-4f30950d210f",
"indicator--56e96301-0548-400f-97b1-4300950d210f",
"indicator--56e9633c-ae64-4639-85e5-5390950d210f",
"indicator--56e9633d-944c-448d-9a37-5390950d210f",
"indicator--56e9633d-18b0-436a-9f24-5390950d210f",
"indicator--56e96681-e680-4ed1-b3d1-4178950d210f",
"indicator--56e96682-0b2c-4a84-aa84-4b55950d210f",
"indicator--56e96682-fe2c-4620-8869-4f6b950d210f",
"indicator--56e966f0-d570-435d-b0ec-5391950d210f",
"indicator--56e966f0-cb38-4619-b9d8-5391950d210f",
"indicator--56e966f0-d2bc-43e9-ab70-5391950d210f",
"indicator--56e966f1-9008-4af9-8148-5391950d210f",
"indicator--56e966f1-1a7c-4e26-a99d-5391950d210f",
"indicator--56e966f1-2ed4-4fc7-857d-5391950d210f",
"indicator--56e966f2-9efc-498b-855d-5391950d210f",
"indicator--56e966f2-5658-459e-ae3d-5391950d210f",
"indicator--56e966f2-2818-43ca-ac2b-5391950d210f",
"indicator--56e966f3-c978-41ba-bd00-5391950d210f",
"indicator--56e966f3-6e04-414f-b90b-5391950d210f",
"indicator--56e966f4-d684-43d1-a6c0-5391950d210f",
"indicator--56e966f4-6b24-49c3-a353-5391950d210f",
"indicator--56e9678a-dd70-4444-a8ae-468a950d210f",
"indicator--56e9678b-6f64-4a49-96ff-45b0950d210f",
"indicator--56e9678b-e878-41c7-9fec-4eee950d210f",
"indicator--56e9678c-9eb0-4cc5-8c27-4787950d210f",
"indicator--56e9678c-9ca4-4db0-9be1-4c93950d210f",
"indicator--56e9678d-24a8-4b78-a481-4a84950d210f",
"indicator--56e9678d-346c-4ef1-a199-4730950d210f",
"indicator--56e9678d-2b7c-4c44-afeb-4a5c950d210f",
"indicator--56e9678e-93ec-460b-872a-4fd7950d210f",
"indicator--56e9678e-e9a8-407d-9632-425d950d210f",
"indicator--56e9678f-3110-40c1-9355-49cc950d210f",
"indicator--56e9678f-1644-4d3a-9273-4188950d210f",
"indicator--56e96790-0700-48ae-b992-4de5950d210f",
"indicator--56e96790-9aa4-4e8b-be5d-4f8a950d210f",
"indicator--56e96791-0c54-4c94-8960-42ed950d210f",
"indicator--56e96791-2678-48d7-95fc-46ed950d210f",
"indicator--56e96792-4aa4-4852-bd51-4e74950d210f",
"indicator--56e96792-ce4c-4f5b-99b7-4e8d950d210f",
"indicator--56e96793-89ac-4aea-af74-4beb950d210f",
"indicator--56e96794-2000-45f8-bd00-4fd5950d210f",
"indicator--56e96794-0abc-42ec-9681-46ab950d210f",
"indicator--56e96795-a54c-4ca3-8681-41e9950d210f",
"indicator--56e96795-5470-4a1b-bcb1-4205950d210f",
"indicator--56e96796-7cf8-4bab-b1fc-4291950d210f",
"observed-data--56e96919-ad18-4f68-8aa1-539002de0b81",
"url--56e96919-ad18-4f68-8aa1-539002de0b81",
"indicator--56e97004-6f78-4d17-8b8a-5f29950d210f",
"indicator--56e97004-9294-42f2-98aa-5f29950d210f",
"indicator--56e97005-9a34-4791-8568-5f29950d210f",
"indicator--56e97006-332c-4c36-8823-5f29950d210f",
"indicator--56e97006-e42c-418b-8b77-5f29950d210f",
"indicator--56e97007-2530-49d3-ac02-5f29950d210f",
"indicator--56e97008-3608-4d8d-bc73-5f29950d210f",
"indicator--56e97008-4cf8-4f25-aafe-5f29950d210f",
"indicator--56e97009-40d8-4747-b075-5f29950d210f",
"indicator--56e9700a-92c8-4ee7-a291-5f29950d210f",
"indicator--56e9700a-7d68-4cd3-aa9c-5f29950d210f",
"indicator--56e9700b-0964-4e28-ba24-5f29950d210f",
"indicator--56e9700c-1d28-4fce-880e-5f29950d210f",
"indicator--56e9700c-8c20-438e-9319-5f29950d210f",
"indicator--56e9700d-0c10-4155-aeda-5f29950d210f",
"indicator--56e9700e-64a4-4fb3-a9d3-5f29950d210f",
"indicator--56e9700e-2a6c-4ef6-bc6b-5f29950d210f",
"indicator--56e9700f-ead0-420e-ae57-5f29950d210f",
"indicator--56e9700f-1220-45c0-84ec-5f29950d210f",
"indicator--56e97010-3050-48cf-84c0-5f29950d210f",
"indicator--56e97010-c710-4bae-bc4e-5f29950d210f",
"indicator--56e97011-4b30-4555-9592-5f29950d210f",
"indicator--56e97012-67a8-4ecd-9a7f-5f29950d210f",
"indicator--56e97012-b058-4c1d-af8f-5f29950d210f",
"indicator--56e97013-39fc-4d8c-8c01-5f29950d210f",
"indicator--56e97014-5fd0-4c5d-ba47-5f29950d210f",
"indicator--56e97014-0684-4a2c-876c-5f29950d210f",
"indicator--56e97015-e444-4b17-85c4-5f29950d210f",
"indicator--56e97015-ecd8-4316-9ac7-5f29950d210f",
"indicator--56e97016-5994-4a2d-b48d-5f29950d210f",
"indicator--56e97017-03c8-40cc-b9ca-5f29950d210f",
"indicator--56e97017-636c-4254-b95b-5f29950d210f",
"indicator--56e97018-50a4-4596-9421-5f29950d210f",
"indicator--56e97019-daec-46b8-acc7-5f29950d210f",
"indicator--56e97019-e86c-4a88-8e90-5f29950d210f",
"indicator--56e9701a-5b0c-487d-ac8d-5f29950d210f",
"observed-data--56e97045-2710-4120-80d1-44a002de0b81",
"url--56e97045-2710-4120-80d1-44a002de0b81",
"observed-data--56e97046-2874-48f3-8163-4b2502de0b81",
"url--56e97046-2874-48f3-8163-4b2502de0b81",
"observed-data--56e97046-d300-4a12-8fbf-41c802de0b81",
"url--56e97046-d300-4a12-8fbf-41c802de0b81",
"observed-data--56e97046-9d7c-40a0-a5ab-41a502de0b81",
"url--56e97046-9d7c-40a0-a5ab-41a502de0b81",
"observed-data--56e97046-cb18-4374-b416-4efd02de0b81",
"url--56e97046-cb18-4374-b416-4efd02de0b81",
"observed-data--56e97047-0670-4178-b8b5-46eb02de0b81",
"url--56e97047-0670-4178-b8b5-46eb02de0b81",
"observed-data--56e97047-3d5c-42d0-88c3-45fe02de0b81",
"url--56e97047-3d5c-42d0-88c3-45fe02de0b81",
"observed-data--56e97047-719c-4579-9b7f-49c902de0b81",
"url--56e97047-719c-4579-9b7f-49c902de0b81",
"observed-data--56e97048-ba4c-4bf1-a040-4fad02de0b81",
"url--56e97048-ba4c-4bf1-a040-4fad02de0b81",
"observed-data--56e97048-8c18-4264-aef3-448a02de0b81",
"url--56e97048-8c18-4264-aef3-448a02de0b81",
"observed-data--56e97048-0d48-4720-939d-468902de0b81",
"url--56e97048-0d48-4720-939d-468902de0b81",
"observed-data--56e97049-f674-4928-8446-4d2402de0b81",
"url--56e97049-f674-4928-8446-4d2402de0b81",
"observed-data--56e97049-8e08-4a3d-a8f8-4f6102de0b81",
"url--56e97049-8e08-4a3d-a8f8-4f6102de0b81",
"indicator--56e96aab-1410-403f-a824-4cbe950d210f",
"observed-data--56e9718b-3414-4a92-9528-438c02de0b81",
"url--56e9718b-3414-4a92-9528-438c02de0b81",
"observed-data--56e9718b-68fc-440b-b68b-48ca02de0b81",
"url--56e9718b-68fc-440b-b68b-48ca02de0b81"
],
"labels": [
"Threat-Report",
"misp:tool=\"MISP-STIX-Converter\"",
"circl:incident-classification=\"malware\""
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96300-1504-414c-8c23-420b950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T13:43:28.000Z",
"modified": "2016-03-16T13:43:28.000Z",
"description": "Download location",
"pattern": "[url:value = 'http://api.holycrossservices.info/dri/donate.php']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T13:43:28Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96300-4894-4f5c-9af3-4adb950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T13:43:28.000Z",
"modified": "2016-03-16T13:43:28.000Z",
"description": "Download location",
"pattern": "[domain-name:value = 'api.holycrossservices.info']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T13:43:28Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"hostname\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96300-1b18-40fe-b1e1-4edb950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T13:43:28.000Z",
"modified": "2016-03-16T13:43:28.000Z",
"description": "Download location",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.103.56.36']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T13:43:28Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96300-a3f0-4aa7-adc7-4cbe950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T13:43:28.000Z",
"modified": "2016-03-16T13:43:28.000Z",
"description": "Download location",
"pattern": "[url:value = 'http://api.holycrossservices.net/dri/donate.php']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T13:43:28Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96301-1a98-451a-a2c9-4d38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T13:43:29.000Z",
"modified": "2016-03-16T13:43:29.000Z",
"description": "Download location",
"pattern": "[domain-name:value = 'api.holycrossservices.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T13:43:29Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"hostname\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96301-6cac-4173-9713-4f30950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T13:43:29.000Z",
"modified": "2016-03-16T13:43:29.000Z",
"description": "Download location",
"pattern": "[url:value = 'http://api.holycrossservices.org/dri/donate.php']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T13:43:29Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96301-0548-400f-97b1-4300950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T13:43:29.000Z",
"modified": "2016-03-16T13:43:29.000Z",
"description": "Download location",
"pattern": "[domain-name:value = 'api.holycrossservices.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T13:43:29Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"hostname\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9633c-ae64-4639-85e5-5390950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T13:44:28.000Z",
"modified": "2016-03-16T13:44:28.000Z",
"description": "On port 4843",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.93.239.28']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T13:44:28Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9633d-944c-448d-9a37-5390950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T13:44:29.000Z",
"modified": "2016-03-16T13:44:29.000Z",
"description": "On port 4843",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '38.64.199.33']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T13:44:29Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9633d-18b0-436a-9f24-5390950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T13:44:29.000Z",
"modified": "2016-03-16T13:44:29.000Z",
"description": "On port 1234",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '85.17.155.148']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T13:44:29Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96681-e680-4ed1-b3d1-4178950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T13:58:25.000Z",
"modified": "2016-03-16T13:58:25.000Z",
"description": "Dridex loader",
"pattern": "[file:content_ref.payload_bin = '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
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T13:58:25Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"malware-sample\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96682-0b2c-4a84-aa84-4b55950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T13:58:26.000Z",
"modified": "2016-03-16T13:58:26.000Z",
"description": "Dridex loader",
"pattern": "[file:name = 'freshmeat.exe' AND file:hashes.SHA1 = 'd7cddaae21870b1f5b623c5996ef62c242ec8938']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T13:58:26Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha1\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96682-fe2c-4620-8869-4f6b950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T13:58:26.000Z",
"modified": "2016-03-16T13:58:26.000Z",
"description": "Dridex loader",
"pattern": "[file:name = 'freshmeat.exe' AND file:hashes.SHA256 = 'b100e104a22f9670164d73679f7d4b6e5de055bf961bc4c1e9c28d2580d3f753']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T13:58:26Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha256\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e966f0-d570-435d-b0ec-5391950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:00:16.000Z",
"modified": "2016-03-16T14:00:16.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '109.190.2.168']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:00:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e966f0-cb38-4619-b9d8-5391950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:00:16.000Z",
"modified": "2016-03-16T14:00:16.000Z",
"description": "On port 443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '47.88.191.14']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:00:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e966f0-d2bc-43e9-ab70-5391950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:00:16.000Z",
"modified": "2016-03-16T14:00:16.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '92.234.200.250']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:00:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e966f1-9008-4af9-8148-5391950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:00:17.000Z",
"modified": "2016-03-16T14:00:17.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.240.39.20']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:00:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e966f1-1a7c-4e26-a99d-5391950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:00:17.000Z",
"modified": "2016-03-16T14:00:17.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '149.172.43.69']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:00:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e966f1-2ed4-4fc7-857d-5391950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:00:17.000Z",
"modified": "2016-03-16T14:00:17.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '142.166.241.182']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:00:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e966f2-9efc-498b-855d-5391950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:00:18.000Z",
"modified": "2016-03-16T14:00:18.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '24.204.49.244']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:00:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e966f2-5658-459e-ae3d-5391950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:00:18.000Z",
"modified": "2016-03-16T14:00:18.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '83.172.215.87']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:00:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e966f2-2818-43ca-ac2b-5391950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:00:18.000Z",
"modified": "2016-03-16T14:00:18.000Z",
"description": "On port 443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '197.96.139.253']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:00:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e966f3-c978-41ba-bd00-5391950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:00:19.000Z",
"modified": "2016-03-16T14:00:19.000Z",
"description": "On port 443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '79.124.67.226']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:00:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e966f3-6e04-414f-b90b-5391950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:00:19.000Z",
"modified": "2016-03-16T14:00:19.000Z",
"description": "On port 443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '222.255.121.202']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:00:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e966f4-d684-43d1-a6c0-5391950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:00:20.000Z",
"modified": "2016-03-16T14:00:20.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '174.76.17.151']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:00:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e966f4-6b24-49c3-a353-5391950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:00:20.000Z",
"modified": "2016-03-16T14:00:20.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.164.38']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:00:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9678a-dd70-4444-a8ae-468a950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:50.000Z",
"modified": "2016-03-16T14:02:50.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '86.20.173.243']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:50Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9678b-6f64-4a49-96ff-45b0950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:51.000Z",
"modified": "2016-03-16T14:02:51.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '86.141.111.166']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:51Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9678b-e878-41c7-9fec-4eee950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:51.000Z",
"modified": "2016-03-16T14:02:51.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '86.134.190.171']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:51Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9678c-9eb0-4cc5-8c27-4787950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:52.000Z",
"modified": "2016-03-16T14:02:52.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '90.216.198.158']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:52Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9678c-9ca4-4db0-9be1-4c93950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:52.000Z",
"modified": "2016-03-16T14:02:52.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '80.11.41.70']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:52Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9678d-24a8-4b78-a481-4a84950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:53.000Z",
"modified": "2016-03-16T14:02:53.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '90.192.130.30']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:53Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9678d-346c-4ef1-a199-4730950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:53.000Z",
"modified": "2016-03-16T14:02:53.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '93.82.193.162']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:53Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9678d-2b7c-4c44-afeb-4a5c950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:53.000Z",
"modified": "2016-03-16T14:02:53.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '99.248.17.200']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:53Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9678e-93ec-460b-872a-4fd7950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:54.000Z",
"modified": "2016-03-16T14:02:54.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.245.43']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:54Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9678e-e9a8-407d-9632-425d950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:54.000Z",
"modified": "2016-03-16T14:02:54.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '97.86.83.142']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:54Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9678f-3110-40c1-9355-49cc950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:55.000Z",
"modified": "2016-03-16T14:02:55.000Z",
"description": "On port 443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.61.129.235']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:55Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9678f-1644-4d3a-9273-4188950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:55.000Z",
"modified": "2016-03-16T14:02:55.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '66.131.80.70']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:55Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96790-0700-48ae-b992-4de5950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:56.000Z",
"modified": "2016-03-16T14:02:56.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '80.0.175.169']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:56Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96790-9aa4-4e8b-be5d-4f8a950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:56.000Z",
"modified": "2016-03-16T14:02:56.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.35.198.188']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:56Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96791-0c54-4c94-8960-42ed950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:57.000Z",
"modified": "2016-03-16T14:02:57.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '217.7.194.96']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:57Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96791-2678-48d7-95fc-46ed950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:57.000Z",
"modified": "2016-03-16T14:02:57.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '69.157.17.124']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:57Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96792-4aa4-4852-bd51-4e74950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:58.000Z",
"modified": "2016-03-16T14:02:58.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '208.126.217.92']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:58Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96792-ce4c-4f5b-99b7-4e8d950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:58.000Z",
"modified": "2016-03-16T14:02:58.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '81.133.155.65']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:58Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96793-89ac-4aea-af74-4beb950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:02:59.000Z",
"modified": "2016-03-16T14:02:59.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '190.99.140.20']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:02:59Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96794-2000-45f8-bd00-4fd5950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:03:00.000Z",
"modified": "2016-03-16T14:03:00.000Z",
"description": "On port 443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '89.16.145.17']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:03:00Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96794-0abc-42ec-9681-46ab950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:03:00.000Z",
"modified": "2016-03-16T14:03:00.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '89.152.248.34']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:03:00Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96795-a54c-4ca3-8681-41e9950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:03:01.000Z",
"modified": "2016-03-16T14:03:01.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '71.9.39.34']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:03:01Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96795-5470-4a1b-bcb1-4205950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:03:01.000Z",
"modified": "2016-03-16T14:03:01.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '75.177.102.18']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:03:01Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96796-7cf8-4bab-b1fc-4291950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:03:02.000Z",
"modified": "2016-03-16T14:03:02.000Z",
"description": "On port 8443",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '67.86.188.102']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:03:02Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e96919-ad18-4f68-8aa1-539002de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:09:29.000Z",
"modified": "2016-03-16T14:09:29.000Z",
"first_observed": "2016-03-16T14:09:29Z",
"last_observed": "2016-03-16T14:09:29Z",
"number_observed": 1,
"object_refs": [
"url--56e96919-ad18-4f68-8aa1-539002de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e96919-ad18-4f68-8aa1-539002de0b81",
"value": "https://www.virustotal.com/file/b100e104a22f9670164d73679f7d4b6e5de055bf961bc4c1e9c28d2580d3f753/analysis/1458136225/"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97004-6f78-4d17-8b8a-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:00.000Z",
"modified": "2016-03-16T14:39:00.000Z",
"description": "unique .doc example",
"pattern": "[file:content_ref.payload_bin = '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
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:00Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"malware-sample\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97004-9294-42f2-98aa-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:00.000Z",
"modified": "2016-03-16T14:39:00.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V104-614_568519.doc' AND file:hashes.SHA1 = '13950ef397a6a61a7b27f54a5401bfa6c276ee76']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:00Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha1\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97005-9a34-4791-8568-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:01.000Z",
"modified": "2016-03-16T14:39:01.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V104-614_568519.doc' AND file:hashes.SHA256 = 'e359622ef1d4fef3197c018aade9706bdac47696372291742fb7b1c2aa648e91']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:01Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha256\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97006-332c-4c36-8823-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:02.000Z",
"modified": "2016-03-16T14:39:02.000Z",
"description": "unique .doc example",
"pattern": "[file:content_ref.payload_bin = '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
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:02Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"malware-sample\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97006-e42c-418b-8b77-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:02.000Z",
"modified": "2016-03-16T14:39:02.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V144-899_680288.doc' AND file:hashes.SHA1 = '2ff4d09ede2f4e41c3b50a50ae5cdde41676c106']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:02Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha1\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97007-2530-49d3-ac02-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:03.000Z",
"modified": "2016-03-16T14:39:03.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V144-899_680288.doc' AND file:hashes.SHA256 = 'f1c1b9f62663b2f0ef45e6876f01a117e95e75cfa6b6fbce43749de772875df5']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:03Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha256\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97008-3608-4d8d-bc73-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:04.000Z",
"modified": "2016-03-16T14:39:04.000Z",
"description": "unique .doc example",
"pattern": "[file:content_ref.payload_bin = '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
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:04Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"malware-sample\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97008-4cf8-4f25-aafe-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:04.000Z",
"modified": "2016-03-16T14:39:04.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V153-188_220419.doc' AND file:hashes.SHA1 = 'a7f39a744b85eedf3c0220d665b21d35c8f367dc']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:04Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha1\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97009-40d8-4747-b075-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:05.000Z",
"modified": "2016-03-16T14:39:05.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V153-188_220419.doc' AND file:hashes.SHA256 = 'd7ce0eb3da17b7607445cb648d3aaae3be4c6a87969cca564bb6b7abc3da72dd']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:05Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha256\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9700a-92c8-4ee7-a291-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:06.000Z",
"modified": "2016-03-16T14:39:06.000Z",
"description": "unique .doc example",
"pattern": "[file:content_ref.payload_bin = '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
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:06Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"malware-sample\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9700a-7d68-4cd3-aa9c-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:06.000Z",
"modified": "2016-03-16T14:39:06.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V0554-50366_821184.doc' AND file:hashes.SHA1 = 'dacccd323bc69d35a11493b7ef49471e4352e48f']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:06Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha1\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9700b-0964-4e28-ba24-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:07.000Z",
"modified": "2016-03-16T14:39:07.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V0554-50366_821184.doc' AND file:hashes.SHA256 = 'ebf105e691be34c3489602a3f762c168381bc56b537291d896aefcbf8fa300c1']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:07Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha256\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9700c-1d28-4fce-880e-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:08.000Z",
"modified": "2016-03-16T14:39:08.000Z",
"description": "unique .doc example",
"pattern": "[file:content_ref.payload_bin = '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
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:08Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"malware-sample\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9700c-8c20-438e-9319-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:08.000Z",
"modified": "2016-03-16T14:39:08.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V00685-53319_35440.doc' AND file:hashes.SHA1 = 'e83f8c2238173cc219b47293366a29b06c62da58']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:08Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha1\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9700d-0c10-4155-aeda-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:09.000Z",
"modified": "2016-03-16T14:39:09.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V00685-53319_35440.doc' AND file:hashes.SHA256 = 'e7d980f73764fd2c9d2a0f9c3e118c651d168f6c685f65b62f16749e32f8a297']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:09Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha256\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9700e-64a4-4fb3-a9d3-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:10.000Z",
"modified": "2016-03-16T14:39:10.000Z",
"description": "unique .doc example",
"pattern": "[file:content_ref.payload_bin = 'UEsDBBQACQAIAOV0cEgWgKLvZiAAAIk9AAAgABwAZGJkMWI4MDU5NGRiODJiMGVmNmQ1NGI5NjljNTMyNTVVVAkAAw1w6VYOcOlWdXgLAAEEIQAAAAQhAAAA2HK6LWU8VLq4WudI1spwBBzL0XBPq4Wr1PXcETozdhB7K0woXj3+YjVBrwmo6VmHIf4Z2jEciqQ3CNSA7w5UzakcnSqyMF6IkuxYGd+kvevbeU+sBSparaSoZs+/P9IyYEqEMdlQkA8/S0F54rGN0+K4FyCw9s8eQDCC0mCmxbY+lW3e3Obk/ePwu0dU4NRvziqoDjw7al0kv1Yib6mQIj0Q4j/HSBtUaeFjH2LzT5GjsNJ63IOPDMWAkHrskki+2p7D+WLNur/EX718ize1Iuc0Xwygp2Mh2MlF5iGBxVlU2MQNtuntQZfBIx43x2F89q97q/6xrKfI7c9G+nonNW8gdX34yZA5uVt7n69eqHXGKqjaeig1jX+Frdt+jHKmgZZwxUApnblc/zx1AR5phS7sYx2Qe1Fon3HFdanL0WnLdMm11VBTcBFIGmnjof09lNuWXlmqjzY5brZ2/fMx5UpeGQDfDUsPvZWjhFXL0NPiS1cxUOvFG1bLSH+XaJWzKvBrjnfJTB/U1eMaxsf0eB3d1pTZkdF4pcfK2gUISwrUTaSl7vO2tPUMArk8PmADHqw6NwQweTJdc6q/cZmz4mMzRxqgvVL+HLrmsI8G0iHSHUa/EWZHRtFL29s4Cb0m3D/QVYZuega0/qGApqVz+fUR9/q0cExxAdN3pXl1vFOeLwQ8TUtJJtjg4CboIUE89r3jdbDu/MwJMYB8RI1tqxpVZK9B6iWTRpwDkA9q+WE3Y25ezVXyqfTDnnLpC6qKeW0QWTTtdzl3U/CSq6UDtpnXW94mTLRz0LHlOhHkvmiV2QKGMfmx84yxrDTiH1vnMts5x9KfsnWlWx+8ebkvYtJOkYhXsrEc/VUcufGmAyJV7Eo+4lUvrWX/rg85TcLoUP2SrrJi9vNy9xF2OcW5sqRuM1tCECSEiEZXuv4dDgq8jlJIVWKlu8a1HRWHFpTFN0F6inQZNwKWGJrZJ6v1DtzSnyiTSv6chpx/eQ+42pV7L0eohRfyMsxP7DfD/MHC20oSPe7lCtWstrLY+EWVs3gpqwdNKpohJiKbqLdeTgn46Lrgk7p8nJtDqYDBqExwEBW7mOw95M91Kb0M7K5k3mRip8qJhcG1w11ZaFdqpy2PwfwaYepfR/d8r3PGOXHNJ4FDc1eE1YFBxDBqvchajVvnSa16fQDWXJ4ziWNmAQE+3aSMDk65UEzihDmNGZRsck4DO/vGrsxjyC53x3mJtMqvE1jWlFpiVCpfATLQpRlOuqNR6+4olFqNArSPdEWIbV0JOn3biPCn5D8JyGDyURVeNe/LbJ/oKRWxgR6tB6Ok78wLrSOmkDCeCHgFyMUod9ReZlH23rkWc6iruZs4un/gCl0x6d6TXy3w7F/ShluC3mqWA0T5MsMNwfY8uBmDyRQ9uaKgmGgVc9T5ZIJVqdcb85CJWhIOSMtOVUsc0muRuEQwT3ENryRYwdZ/0hrM9ZDeQ2S7ZgFid0RVI0nEnh/v3ilP0BTijk/hTCNFVQANfK0a1YHuTxx9TBQDVjlqH32YQ9MfwlaUIXRMsrxIO43rqW6r9aTDlHQ/mthNT5GZQgSjuK2zimMf5iLZNw/e518vzxu3f5rF/4gvSyctLqCWyJyf0xPPoQ2f6VFoEkcfpS3lXwfJs1VEZRe/e7s2g5icEQ40bxOgaa9WNFoCxu/qB4zgK7kIEireQgqZxJA9wUdY5FC4MZ0Kf2tQpD0BlPY1zv1VtG82mdUnw/SQCDetBpaDnPrFP5g4thYA9pwRqJnIHAXrfVy36MLqTDOZvEy8ENw3jKXmf0VojigSPkB2Vbj1YYgDacgYPGOrwTlVB6NCboJQ7M822awzjMuJbIvI2fsrd5V1y4LZAkyt43Vldv5nR5xvMn+bmJL8sbBYVGFUVwiXJe7QEC8po/OyHGoIdbWQIXRrcEm2Y+5bL3F2ES8XCIO6G/fh+IQ1h54ivrSXGA8PBOcHUwOCy5E5fP0IUJlSBY5jZIlTTJ1dmnPTBHuOI55t7awfTNuJQSv1XJ7MGiIRUZuw0aSGD0kbXvLuXSKkgTu8ySMS9lBdOYadlOthRcXJzx0Mopy2NJqdQiQBFMoYNTcoT5ERZvxy0xIlvzzL5sRHQZjR3v72COifnXT5dTACeINyYd+m8u8XvOivACnWOLB9gDJnnkvq7abPMcCvxwWTYSgXlwlbjl/OlFZFY7PrhTIdeatbnCPFonIMY/cPa+e5BsGe3RP1YwFs2sqHQ97pAmgDECvbsWoPG5ia1jIAsxXd7wgPjEqq91CFg+GvZIZ7Ab82iHuVhCILORstMIvLHCYeDkCjDudO3sEPS0paCA/6nOATqGawkRVC50l4xFiZRMIGThKhnoIoow4k09mWbMVR86J6JgTqeVm27iQBN9tODYeacmzUIXyDBcL3rDNs3bQbWRkmSt7P26qeu5c46jT2DV+7E2TuNRy1lXWjIvSnIy4xIe/zffLp47HXJCqMp5KuQWcYLFdrM+KSsz3OYOB6NShUnm5OHu0BNirhgmfsl9ox3sxvNovqQ7Lh9zz6nV1opIhXhrNOIRFDBgDaaw5u2JvXttJ6QsBeUN6/bnqqU6jA5HkShZ2O/usI0dtIJoA6SJNU3+wNiISq6L3ls+TuqbrouJ5VrvQlAcsSMhQZr51qGQmx+s/sBr1DxE6BKsKpmja5/kinSuk9Qe/uBNu2DQLSxXxnwolCLaCWo6kuTi0FwoyLGNbEsts8IsMwdk2OO3XnfJKVdM3wISQ3mfXRNbfk3kIr94MjyPU0cFCAsHWgiwdkATXvElns2eIqn/fItTXFXy3xi12tF+NB4+yofFrrSiivPeShBEcxXW/JyxYFaqWLTUBiQGO1JL9UC3UV7rzYpkyHBle8UFGe1cL2iVm7kac/avjcLNRGHtFDxl4eT46Xe5ZWnuIVfMOwA9nYMXWryizSnzQshqHJ3BtnaIk45GgqequalWy8RSb1xbLksxvQbjm43Er+9wii1VZPSWynHAjb0X0L4bdRT1Ri2nUB1cLm6JYFK1LSrPqS3E0OHsqvNpLBhrKhCj4yAFBdlMqOCP0abJfipoMUo+XiZRnNvJb+g5CO8XFG8bRQNX13avFb/ghQFFxp3s7Y8iyW0+oUSLy/L91i/sO9lPaXu6Y9Yrx1ZPxjTvM+LnMa9hNnKI1OE1cGoE7ex7n9hBijFYRKxIt96Rc+isW5Ni3Ati6M/gJPkk8A1C1Q8/NirpRKFAkcRyL6vp3NzlQ72EyYP7/piPvbUBuCYin8rjzDVPvN3CEOealU6bKkODEdT0QKwIlfl/tB4Daw46PcUTCUZXcU6ltpjkoZer7/XcQ9mUzXVkYjtRuHyVGZVm+9rsyqvwtHtvgPaoPQEndC0bihktLLieCaXHCIF9EayA3XrnpTAsRE/eJFrBp5tfKDydI179WpZgxomPUUAFOONnR7zuwNXokbx5m/JHJEZ4+isJL2p2zYlYZYdisQkHtVti6oxTVeDNWmecRMm6sU02RNMOQJBytoA+GJgfno/zQd1sfwUd21woQaPLrs15Qm8sb0au1ltxvQ5bqXjrvQpIlAf6scntA5nghcIKtN93LaRZviqXTtp0TCRaYGS49rcDCoGB1NOzq+PlB8X8ZrNID20QuBQ8YBavIj5t2zG5gJjY8DD4dlKpGUXOyjg/iHifVkGD/CC3Zlttwr9+zGU45s9He/cV4I0v/uPiUZ+81dVn4XQXe/aAzJF8W/Nb+JrqxLqpBi1I59wF//ivSpDz2hT4BZxJ89c4dxnIO/enfeise5O3KPFK4FC5bcV/MHoIYO+QH+t5u5j59iPsJChB4vOqZNY61ihGmHFaUPD8Of6TYhp1V+cKsqnNftaax8PcYIZEuHefoetl3WIUlZ0wQG+ygx4+yKjYN3Exuj6b
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:10Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"malware-sample\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9700e-2a6c-4ef6-bc6b-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:10.000Z",
"modified": "2016-03-16T14:39:10.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V1020-673_51165.doc' AND file:hashes.SHA1 = '9f026e3358e402553abb353402e9379feeccaf1f']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:10Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha1\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9700f-ead0-420e-ae57-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:11.000Z",
"modified": "2016-03-16T14:39:11.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V1020-673_51165.doc' AND file:hashes.SHA256 = '1f0610924b008e977d7c7a1698ec54ff0df356b934b4efc251d73849b29d66bb']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:11Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha256\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9700f-1220-45c0-84ec-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:11.000Z",
"modified": "2016-03-16T14:39:11.000Z",
"description": "unique .doc example",
"pattern": "[file:content_ref.payload_bin = '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
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:11Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"malware-sample\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97010-3050-48cf-84c0-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:12.000Z",
"modified": "2016-03-16T14:39:12.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V01156-315_397202.doc' AND file:hashes.SHA1 = '548c569756a7c91b97b5746cc2941ceec11e1f48']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:12Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha1\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97010-c710-4bae-bc4e-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:12.000Z",
"modified": "2016-03-16T14:39:12.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V01156-315_397202.doc' AND file:hashes.SHA256 = '4a760f2b21f217bce11ce0f8d9f71b64808497b8902b47d8985390aaf8511a42']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:12Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha256\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97011-4b30-4555-9592-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:13.000Z",
"modified": "2016-03-16T14:39:13.000Z",
"description": "unique .doc example",
"pattern": "[file:content_ref.payload_bin = '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
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:13Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"malware-sample\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97012-67a8-4ecd-9a7f-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:14.000Z",
"modified": "2016-03-16T14:39:14.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V1161-518_270835.doc' AND file:hashes.SHA1 = 'cd111e288d091f87a7bd91acb1ee17a3c10e3fe3']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:14Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha1\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97012-b058-4c1d-af8f-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:14.000Z",
"modified": "2016-03-16T14:39:14.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V1161-518_270835.doc' AND file:hashes.SHA256 = 'f74c196ce54331be414aa0b0e32e693b9b904f2b48d45be7dac5bcb03667a95c']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:14Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha256\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97013-39fc-4d8c-8c01-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:15.000Z",
"modified": "2016-03-16T14:39:15.000Z",
"description": "unique .doc example",
"pattern": "[file:content_ref.payload_bin = 'UEsDBBQACQAIAOh0cEh6L0lEWyAAAIM9AAAgABwAMzFkN2Q4ZjhjYjIwOTQ0Yzk5NDViYzFlNmYxMjY3NGFVVAkAAxNw6VYTcOlWdXgLAAEEIQAAAAQhAAAA7selcw7MLSyqoorcS2Z2ft6V5OIkGycl6OaOSQbOpF8sbPnwDNecyk8cPY1F4V5V1CtVjjiZBbEYEDDaZAEIiXUgBNfQ/0j1yTdxHXNtQ3/H7159lOuesNtnqy2hiTcjPDRxRfbH+2C2YNZt/AZA6ek5Zzy3DouEE2AKvpMgrUoDD4c+FOdvpvFZ8NHJYQbopAuRDW3GLGrA4bx/6fU45crkcP44TKjZFV5OemcQjzHAUY69he3HTzEaosHjiFCx+YVgn3L4CS4qYUpm18kPzk0p76gsEgXAFvU+npBPsy7yLPRhCQrv83xYiBw+VkV6mHwlqTHtKBEJNCGYMdwV59tg61LmLH8PE1vBHo56IO5qBJoW3fjJmjemgf6i0WW6hXmWUaUlklHTqEh3xcoiKNCUPidULnD0nIquPBT83pcl3307MtP9OMK8kXKmniJx9+JaNvwBACzZrMA/soOWhYCyJlsrVtoAGD5OCYkPwCpS3FT7m04i/Z3dp63sz1e6aY6YcId7fkYzPmHwf1Ja0DAdEAaObyR+1OGPbOEvGzHiCTK5lWa48/3KZucOvayx2AmZPDiqF7LSYZaQERK5Fl6feHwhMYepSYqQ+YeOhm0Ad3DIbzWUE5wuWcRSFrwiOqIQ/Y1o/0YbYRXryUqew6XxX/QC7vqRQOW4NS1+qazau/PmoA4gN6PtDc1jqyHAEQ2H5RQh7IKLDkENBlyatkCaAP3b57XgiJnZVKxouaDmvRq+Dm/9b6JYDfhPLqAacW+7qOALOzEKMxJwtT44f7OcNgULkdP1JRE5/wqenjlFotF2JRZzt/V1+ETLyciRD9DiGt14qk7FXE5P25UnyGhfAmoQZC9MHmHrLJLSjwf345em88uqBSM17KO+EuYAHC18MuVtuI1D5QXSVRMJp+lUWFMudod9h9NB8AI4v0Na1Qmx++/Emnnpuz8v/3NjA7QV+Eh2s7tOK7q+KkDaAvVHPtDE5Yms/JcgzbI7/lqDp953S4B+wHQkAe+lFMl0NbGgtgqdErYAkoTMesCO19/dvX/eW2lpmVoFe7s/fhmUissIWmEjvcFQpt0axet5HxgWWm0afEj7XLfyCOUfq3ZyG5Ao+Xri9WtB6YE2xyPgUoMw7MrcdiXyBhd38FV/CSNaKI7hck5dKnGBgIglhDm81g3wMuFzQs+r72oxIJe4m5pBK0sQqjw84SLGGAi0S9Gr6SOcblsjddrJdIDyRolTgepK/7x1PlFM58OE1wozxBCin11dEFDE1Doa9ntocLIaCgx3M1AtNB/5oxlJFqaC0UwnmMdRYl8LFcDk8qS+v5XoCvfMY+izCgQ5n3wBmkZ6YFkaPLWE0ogYqCZPUx4hdT4LNbUcnb91D821A4EZrcgS43C4e4jg7o1oFkGvzTs2KZByinYEb7g9jeqQr1UFDrmbcUAgSzBeg05BEwO7Sq2pdfjzgmOd7qXxz/0jLEEp+nrvwpgVJgIu/hlNZA16zLtBPo6dPLvvIlWys/0LQszCsB8wQNks+euNfu8wkPOh4Rwk2cDoTEEVCKq5cgDi83tVihRK6KkMuolVsh4Ebng5EkvofnoEQt3PN98c/M0nMsm2b1CzlIXVi+xgejcmm9P8G3nTQyrV8wUsbterGrpTWCQG6mGwK6ur36g3RSjnJEh9ej3WW9EAdzvAP73tQ3XzZ/zFrBv+OwKuvOd8oNGytC28Sga8nfh88NI+H0W3mLJkVJ2wwacaynLf8n0t+wGsFL7d6VIh09bfcqhhYKr6ZusyVEGAAUx3lJYcJa9Dxz240lx0gN47tbw1/iD7Cu6npQ0i/sM1ThCNTnxTvnvQ3ghUpeKP1hN4vXK3EDoccbx516qsD+lX39jT+bbT+EMWBXWY5w41GFGOsYF/OVAzW8rQpkWdFE6qNMGj+p4QuTyGpdG6cHEWi4LMOMbKnJHS4bzAY9XVU5hW2UvpJgX6ik7mWCVJ5kM11aaiqWpMUVqj3ebxaqZuXuE8CsMXrh5YHamCuiHvb7hEaAiABXAiqHpLtTCSVTAq6frPhYIdW6UHCff8kp2hwL+BYmEB9QQjzacuEkCi3zJLKxWMvtfa6iYxSfVQAsqDH110UYa5bO762E7dLVMvVZ3ZUw3RBSIUp/Vd2Vk4tRIhSKvFtFCZSAbYSjUzVeYG+QayfLkF5FCT16PnfWT0pWflyH9muaaGfnpl9vVouG1qlUUE+65HbyknSbX/MyoVxoFBlJvunAiYlhYZ9a3Lsw/zn+fl37POvdiWYuxs0TiKSPdqDN1RxmyTQ/53eVIQOsQUCtkEHezez9uMNflImdjlNb0Xyg5bzKfnaoQ+nfUOic2FREr/+5KqYXmh7co/NNcSQcP/U5GaNNLl7YQq/m5KB65wXzddhRESynWKnD5qzh2Oie7zH7MCSCKAUBSWGvOIuo2EckOYmBzZxerl1hGf5CZrIV19z2Cf4+g71HCZ+PKfmrEjgMbGRnr0ivEXrLs0Osk6dqDAbrZM12va1N0VdHpJWQJtNc9kinggI8O7PJQ8HKeH43zIJyThK2Su+g5UjHXoKogamFvlZEcBJN2X8GlsR6M9P7E16FymAsIp7wdQEiTIFdlqxJ0Eu1S/gHZzyOPNJfnpXaNc9xtmq+UCKwMie+4+dXncEpEDkMT211mzlGpq6IZ0rjw/R2viVF1GWaXjk4dpU2YpwaiXIB9/tHNU6OdyxpvMgNewm/ksyzmhqSCPawsHuilRE2nmIMoWXR8ii5T4TOHzoXqCNVm1Bb0jPxwTjKGnUbIwrichgWBX/7w80q2m/Vvmwh/UtlSNeQY2ketOUrx0UUdR7EzP7t3noZLbBm4K/adobyPP2bNIB8VBLHLrLaf+oTUf+CpEEby+G86MU3t51aVLxHeMU3/AOekm91VOZQPtgTs8u6NWpYecbZZz228trdD7m05yxkkk1f1p77EO/o48QrdenWpsQHAwpXaqcY2oMBe/q+d619hMGlGMcrnrnKU0QBE7xeyUIvXWFsidqb7nYBM4ns9gcRNZdi7INfrXKH9Lfy36L8TKbpDvBPlfpAciaSIO5qUP+H5gFwYFNpyRKFguWncDF+Kq+o4DF/tARKmb4krVeCKlWxhuRD4Z0G3VkWNYfNUvhTaXUwQX7iScfeZTXqSuNe8r1YJ3wEVWuYvKZYYllxzKsKq3/Ba/kiPLDKIplGOvWBwlySGsgTwP+kFziyz/ytCwDXBiy2Um5fITZOLLsVwtC3authQCKUqAf9zgScerXXpDASNtUYPY5a+N61t0KRSjYhQBz+ybuwoaoFzDcz9iRM7kdW3NjEY9jcmwVUReQrM77DmvDoBfR746W9c8iTbca43ciGb4qQlMVKo5th7zKFFcLJ3hHhzkH55mN5UM6rkY6DkFFxvd2lYbsZBb+/LKxJt4pD2eCsyP8afvyiaaHXrCgVoCeuFs9PjRpa6rIrM8nyf5SAFRTQz6wVdK5LdStAorNcpPQNbcIiFBYCKAEJNoDcDn2Yb5BmMImhV0SDiAANxv5aVIONVJC9Xml1CEzEbIB4ZL2Awpb+4IqAtNRg+90qDXqRNinFUrFvy4oL+vOAdFIFzd6W//BzHLGnPPwBoxYoWEXO8xI7P8MVQSGFxTdmoSs4SmZEusy8xepItbgVO6yTv+Wo/6WCc6wrPcoSLAXGCmlIPvJTh95fVzh9L68S/ghcUksv9zwqMmEySBb2UDLEXB99YE4qYhcKESoY0B04Sp5mqvzlgqaXI1SLV+4Os/wUxLcPUQqIYFrdErHGeRGYf+OjKjxwoaIqYRf1cKE0moL2KnO77zXd+L5Et+DdtaQiwS7WhGJd6Vh4PVPLswvUT24/5G/vFaDSEbNxMFSlgp4heXT3YcBH/pVf3PifvhoEVc1od0OzNcJyzyrL3No4
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:15Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"malware-sample\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97014-5fd0-4c5d-ba47-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:16.000Z",
"modified": "2016-03-16T14:39:16.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V1433-74434_093591.doc' AND file:hashes.SHA1 = 'f426dee8034b77b7dbbd41c6ed73b9d6c537dbbb']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha1\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97014-0684-4a2c-876c-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:16.000Z",
"modified": "2016-03-16T14:39:16.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V1433-74434_093591.doc' AND file:hashes.SHA256 = '298ab00b90631d0cd031d0e21c3c7e8cfacd4ca49edb2c91941c787c6be51959']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha256\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97015-e444-4b17-85c4-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:17.000Z",
"modified": "2016-03-16T14:39:17.000Z",
"description": "unique .doc example",
"pattern": "[file:content_ref.payload_bin = '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
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"malware-sample\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97015-ecd8-4316-9ac7-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:17.000Z",
"modified": "2016-03-16T14:39:17.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V6054-151_10785.doc' AND file:hashes.SHA1 = '911dc4ac61ce31160baa8c7d4e448a00c3b320bd']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha1\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97016-5994-4a2d-b48d-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:18.000Z",
"modified": "2016-03-16T14:39:18.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V6054-151_10785.doc' AND file:hashes.SHA256 = 'e9b58017ab5928591a58bd07cb9e44fe55ae50da51fa2eaf4b3f6bb133d9c2b6']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha256\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97017-03c8-40cc-b9ca-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:19.000Z",
"modified": "2016-03-16T14:39:19.000Z",
"description": "unique .doc example",
"pattern": "[file:content_ref.payload_bin = 'UEsDBBQACQAIAOp0cEgO2pT6aCAAAIw9AAAgABwAZGQxMWJkNjEyMDIzMTY5ZDM3NjRkMTExNjdkYWY0MTdVVAkAAxdw6VYXcOlWdXgLAAEEIQAAAAQhAAAAr0ujnRewMBAJ4Qen+2kXeTH3ng9Qg5cFbMQGjOj1Y6JgW2rSgGSTWS1NxeMy/bitRjbt0etnDl+IMwnGNVFBgfBd9/ookM4zEkJieY95g1BWEUIWgYJ62RMKdEfm/TKFMU2Kxc6Fi3IfqmpHdiDT/Yc7k+GVIWREUt+kHMoZJZ8qKxX/YOzgiSD9+IA55zd4fjIpjcz/aWbwojBzi7HLz//S935pObrf/kKclW4gEutppN6TdgY4L7TRITLQrW0w8cp3YcjCub76Ma7JFOPQB/G6KYUDC9QQKZSSV6V/cjoWDtZRFEsGsjZP8l5MMujLQJmKKWqNqiRtB/d7h5AxD1ItrtCe9kfXhH+K1LuCN1wtfYUXndMsxvfU5SCnzFJG89anKa8622Rp80/tswGUAwJ6D9mikh4NNW+sGWYEEd+pYz7ADH2QrVPYUkev9I/eL83oqDTfDyMImmXTzTfGf0Ln/pemv0f27FOZ5F/Ug5Sm0DHj7irGalH9D5NiG+ZX+QNOgVi4fqc8xyg1I5ubZAL+ovwNEcJcnix5wbKSZt4rilwEtGYI5Fh9Xm8c+sgIKVdNJZaYrrv/c7Tk/WMsyspltCiA0f3Lkh1LFE/JeRR6m3VuIKXJ7ydASkN1lKbqBBrJVezACNxfW8Z2Nixj8TlT5/DkjmvBm1YDP7En0E22NSm+GNPh1eby+earhpcTOw7Wm7mH85riQDTned9uJc44C7jmrrFOiL+aww2Xh9/pcTeREi8DzthNtfMzox/o/1RX7kmWinna1PouuLzhAS4cSfS2y6AopAbBM3tmfjCjxL0DqrP6XoKavumTBARljOaSBnuAYfjr6wCusD46CaxQDh/m4lUDVWcuHIQF4JhC/5iImuapFHxXtceyPwDtoH8dsjfkFmP8EY/zV/7ayqny7So71lrMcpJX9oH4iYU/sDtip9VD5mrpSRaqiWKivZapmuFp1jVLzyLCW9X+RTkgzu7LU4zBW7h1UBz8mMMwZz71GfkFNesgsqws21IEfUPOZJdh+ZChmBrzx0oVlD4YlBvR+fEtrr1yJYWQatfxGdCf6l6VpPu0LJiBHiXI5PibaGEpGML+1gueWdpeWm5v/32pD6bNK4D/LCWAGQsRF3sFaR+iSj65dIrqy0igjMQVgEa91w8GltM7xfNa7EbJjCJ5kwae12B9g7/SOLLBd7D7ZKUGQGALhBbnJOiQpZIJP7wOKYvRQvLjaZwAVLNiDs6TbY2kOkIAwroXTFc0xiRLXP6rMI9tsUnG6EbgaqYkaNTHgUJJnBqb01rPs7NU+KOXYO1T9DscFkzBGrhrgwr+AXujqAdGF43fT0IcuAT/uFEG3yQHYWyp5cZq2IzIBzQTY9iNN2yVNiXE5Ht/sjZzITUGgrCQLv72pM3q1snzxlE4l2SHp+2TJhMLeOUpqvFyMzBnwMZveqaRXJD/dyifSs4Qq3NqY5UIYzbmYHjDImXWnMs/0rOR5tg3vzjpmJ0rFA95Fqtj+ftckYhUZBgETaLAONAF0N3CZi/7eZMY/qOuEeLwdGsIM9o9aR1bnhesyDRjfDjvBcf8djuvT6UaTLTXvzcIoPQxQhX6CIXrhU87vmRmIFofaIvtZ7BC3psxN4Wnr/4maQRg1HB4mx40Vc5RlmX4GXSUPzrFGW2koFUbYa5WJPitOet5Oh4IPbfF/W6IFt9eowOy0Mvq3I7FQ7SM0vsz1Crkxsy0v8xpbG0TpL6t2Q3yT0ok4in6nmaACZ/rpG29CBSEx0igAtY0qyUP6Iaqxrj6tT+EkUHAYCTyh38HqQJr8Ifxqb1Sp/Jy/9OS3OxLH4hL56CkmOpf8HwikpADiV0ll4hUhsrFHFB4tsa0LrPTsMXMa/EWDGdqFqlu3+sYnvWce2cZ1R3QJKN/jlKHnyVvVfHJ7EArE+25FYUyZoLw3rg2KOzjJkyTChy7F7L5Yh0dvxeKI9hhN+bUu+aIc8f3DAUylPM0vA1aAX9URDU3/Pok5VIf5mvif0/zif0iDYWLASfe40UKeWyd6QEBsvpe5YMjIDcTGw0OqCY2jIo5lJrZro9paKkFcR5P9lOorGsHt4+EJ2JLjFchTtKsG+Ei0VszLxd6Ps2GVAWbL0l1mHZVSp5PaOJiGAmaVcIdWTV/vsPAXtp77Md7aW8J9V6VjswkFtQZX6a/rZpLmvXGTLXRsnCY/QK8bySXAsMuSm23IK5AEim3TqyaQfQpytJ9q7fBektxWhAlpOV4S6TAaV8Sku/MDl599OuLde0SlttC4dNduwzbmygfmkUdZZUbc1m19dU5lxLWkgKsw+t9lL+i2zGUPMgZRMPHLgonnm5PtZTvQOe7uAod8cj8+utFz7y20DLzHJmGV4ruWvZluVP26pdkUB+iNNnKWwgNxa+HFOozStfLaa9SKIzGekxG53mBjoO5eK0LVaYX4K0ImcCJRCnYDaesq+jN4R5LYkSDmKpsE2qHzA23Q5wjs8YhHpWRGgSacJcBlDr0Vd7S3qZzSwOcuIosdGUOtjGJJowmi9Ixd/O1+pB5a1JE/ZNVDNEaSTl8odmnEKJ8eEVLZc+QcnhpPDbeabf/sMlf93Mc6NLzf8v2G6s2nAEgTt9q75xyqHYMfg36LHiuJi6Yl4RNySLhE8pCySn3pROb4JhDKGTF5JOh5FNSWuh0Wq4QY0AczQ2HmWqWstFNZKUh+CZA57EeLy8Zv20Z6V1QQ9r+RPgN2ihv6081USNIZxcDMc3aPV9hXqwp+97uFZ3IzR/n1ZOTGu8fOAbx76L41lOHcnxTnWWeWtzcMBYfFR/H5EYqY3l/MNqCIzLEbX6/LWD0fVpV5yuoc4naBToZqqrP/S53I4dKPB3kL7SbIqL/m3hoUKtsaOFXjuKuv6A65QdFz0AcIPtrJgZZBnyqUhbfUoHnWIQFLUUBbO8O1Pq3QlOT8d+dGpR65w9SRUfpDnWoZKpQO9MlziDMlpsnaBYLhu+JLg3wj9bjvUKgM6sSc2sRdA6qymttenIAYY/xY7bCh0yh6UvPZwzLaNsvdtHKJMxiN+/QzsKsx5bl7U4DZidmEqZc0Ku/4a++dJ6S06quW7i6f0z84IkpQZX4QoZMPIC4bQfz5Zm0WoN36ZwbtXqJRv+xHuVl+6V6N1UFjBa+vqndiPlVX0dlChcTVBnz6fFM0oOymQLhYNx4m0ZHSkndgqvOdy2/OtjXBzF8NqQLshtPqlskMjkZS7ZGg4BGdfTX4E7glRHWq5NpvytuHrmL8adzEn4qra7AQGAzneImFvz2uKMKso+JyYScQb3gESkRNudGyoZnwZnLgEWrDtnVQRPcVfs4oPqItDlD12BP5Vz206pR3nDAJFXmn0rpyNnLE7XUA1wjkgaCRSJAN0uWbacisf+eUIQMfZ4LOfOyxPI09dP3cTMA+Z50j+TWnZpnxhBLOC5t5+ApN4ttuS6m0VB7SSFNsji7hk7WVIqgnZyBUW8Bpp18u5mhLHU3RUO7jdtD5ZSytLAofDgwDeeR4e03I0Aeabf4igzUgG9Rg0S9ylQyK1XtrWxYkE9BkB0dizbXEft2MbdcyGk+6OPUbasXB8TxRJev9i9fEf50lL91heI1H/XeppDBjUoRI7GBTMZ8xxOT1T8AUx3bb5NERTwducsbgEXwdyUF2mV75sz/vCzXEqAPXdQ8I2G067kRZaoJ0fBCgKQHtEWA5rprx7nHCt392chdlVrWfBmeLWnjG7laX4shHjBj+JbiCekxykGfB5bSkzwDAyazDvv7Yk69O2vioQwCeqb/bwgGUU/yDK88zYyBTqlx69rYQ2p09jtRUhHhYwiTnIsXFuWOBas6UsVz7lZXAcq+qe9vjGyjYJyRIKUVY/+rqTVs+99dJ4FpbUizpDAR0izSBDBtGxC2C5x7R6lTAk
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"malware-sample\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97017-636c-4254-b95b-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:19.000Z",
"modified": "2016-03-16T14:39:19.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V7158-880_217628.doc' AND file:hashes.SHA1 = '994113a3b996da52a936e85e42eeaf61c04954d9']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha1\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97018-50a4-4596-9421-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:20.000Z",
"modified": "2016-03-16T14:39:20.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V7158-880_217628.doc' AND file:hashes.SHA256 = '8b1bc719f36c46d5f0303f113f7c7d12825cbad6c7390d92c05ff92ecf41cf2f']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha256\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97019-daec-46b8-acc7-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:21.000Z",
"modified": "2016-03-16T14:39:21.000Z",
"description": "unique .doc example",
"pattern": "[file:content_ref.payload_bin = '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
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:21Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"malware-sample\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e97019-e86c-4a88-8e90-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:21.000Z",
"modified": "2016-03-16T14:39:21.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V11962-11175_411092.doc' AND file:hashes.SHA1 = 'fd048a6f15021e0ddb60c793caba4f61f3c4a9ef']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:21Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha1\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e9701a-5b0c-487d-ac8d-5f29950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:39:22.000Z",
"modified": "2016-03-16T14:39:22.000Z",
"description": "unique .doc example",
"pattern": "[file:name = 'V11962-11175_411092.doc' AND file:hashes.SHA256 = '1cbec54232b5d16453e1928ee4de121b3d7b914cd8c0a43ed85df94de0518263']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:39:22Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|sha256\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e97045-2710-4120-80d1-44a002de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:40:05.000Z",
"modified": "2016-03-16T14:40:05.000Z",
"first_observed": "2016-03-16T14:40:05Z",
"last_observed": "2016-03-16T14:40:05Z",
"number_observed": 1,
"object_refs": [
"url--56e97045-2710-4120-80d1-44a002de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e97045-2710-4120-80d1-44a002de0b81",
"value": "https://www.virustotal.com/file/1cbec54232b5d16453e1928ee4de121b3d7b914cd8c0a43ed85df94de0518263/analysis/1458134585/"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e97046-2874-48f3-8163-4b2502de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:40:06.000Z",
"modified": "2016-03-16T14:40:06.000Z",
"first_observed": "2016-03-16T14:40:06Z",
"last_observed": "2016-03-16T14:40:06Z",
"number_observed": 1,
"object_refs": [
"url--56e97046-2874-48f3-8163-4b2502de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e97046-2874-48f3-8163-4b2502de0b81",
"value": "https://www.virustotal.com/file/8b1bc719f36c46d5f0303f113f7c7d12825cbad6c7390d92c05ff92ecf41cf2f/analysis/1458127623/"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e97046-d300-4a12-8fbf-41c802de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:40:06.000Z",
"modified": "2016-03-16T14:40:06.000Z",
"first_observed": "2016-03-16T14:40:06Z",
"last_observed": "2016-03-16T14:40:06Z",
"number_observed": 1,
"object_refs": [
"url--56e97046-d300-4a12-8fbf-41c802de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e97046-d300-4a12-8fbf-41c802de0b81",
"value": "https://www.virustotal.com/file/e9b58017ab5928591a58bd07cb9e44fe55ae50da51fa2eaf4b3f6bb133d9c2b6/analysis/1458137518/"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e97046-9d7c-40a0-a5ab-41a502de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:40:06.000Z",
"modified": "2016-03-16T14:40:06.000Z",
"first_observed": "2016-03-16T14:40:06Z",
"last_observed": "2016-03-16T14:40:06Z",
"number_observed": 1,
"object_refs": [
"url--56e97046-9d7c-40a0-a5ab-41a502de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e97046-9d7c-40a0-a5ab-41a502de0b81",
"value": "https://www.virustotal.com/file/298ab00b90631d0cd031d0e21c3c7e8cfacd4ca49edb2c91941c787c6be51959/analysis/1458136470/"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e97046-cb18-4374-b416-4efd02de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:40:06.000Z",
"modified": "2016-03-16T14:40:06.000Z",
"first_observed": "2016-03-16T14:40:06Z",
"last_observed": "2016-03-16T14:40:06Z",
"number_observed": 1,
"object_refs": [
"url--56e97046-cb18-4374-b416-4efd02de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e97046-cb18-4374-b416-4efd02de0b81",
"value": "https://www.virustotal.com/file/f74c196ce54331be414aa0b0e32e693b9b904f2b48d45be7dac5bcb03667a95c/analysis/1458135043/"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e97047-0670-4178-b8b5-46eb02de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:40:07.000Z",
"modified": "2016-03-16T14:40:07.000Z",
"first_observed": "2016-03-16T14:40:07Z",
"last_observed": "2016-03-16T14:40:07Z",
"number_observed": 1,
"object_refs": [
"url--56e97047-0670-4178-b8b5-46eb02de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e97047-0670-4178-b8b5-46eb02de0b81",
"value": "https://www.virustotal.com/file/4a760f2b21f217bce11ce0f8d9f71b64808497b8902b47d8985390aaf8511a42/analysis/1458137666/"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e97047-3d5c-42d0-88c3-45fe02de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:40:07.000Z",
"modified": "2016-03-16T14:40:07.000Z",
"first_observed": "2016-03-16T14:40:07Z",
"last_observed": "2016-03-16T14:40:07Z",
"number_observed": 1,
"object_refs": [
"url--56e97047-3d5c-42d0-88c3-45fe02de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e97047-3d5c-42d0-88c3-45fe02de0b81",
"value": "https://www.virustotal.com/file/1f0610924b008e977d7c7a1698ec54ff0df356b934b4efc251d73849b29d66bb/analysis/1458138810/"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e97047-719c-4579-9b7f-49c902de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:40:07.000Z",
"modified": "2016-03-16T14:40:07.000Z",
"first_observed": "2016-03-16T14:40:07Z",
"last_observed": "2016-03-16T14:40:07Z",
"number_observed": 1,
"object_refs": [
"url--56e97047-719c-4579-9b7f-49c902de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e97047-719c-4579-9b7f-49c902de0b81",
"value": "https://www.virustotal.com/file/e7d980f73764fd2c9d2a0f9c3e118c651d168f6c685f65b62f16749e32f8a297/analysis/1458138469/"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e97048-ba4c-4bf1-a040-4fad02de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:40:08.000Z",
"modified": "2016-03-16T14:40:08.000Z",
"first_observed": "2016-03-16T14:40:08Z",
"last_observed": "2016-03-16T14:40:08Z",
"number_observed": 1,
"object_refs": [
"url--56e97048-ba4c-4bf1-a040-4fad02de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e97048-ba4c-4bf1-a040-4fad02de0b81",
"value": "https://www.virustotal.com/file/ebf105e691be34c3489602a3f762c168381bc56b537291d896aefcbf8fa300c1/analysis/1458136958/"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e97048-8c18-4264-aef3-448a02de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:40:08.000Z",
"modified": "2016-03-16T14:40:08.000Z",
"first_observed": "2016-03-16T14:40:08Z",
"last_observed": "2016-03-16T14:40:08Z",
"number_observed": 1,
"object_refs": [
"url--56e97048-8c18-4264-aef3-448a02de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e97048-8c18-4264-aef3-448a02de0b81",
"value": "https://www.virustotal.com/file/d7ce0eb3da17b7607445cb648d3aaae3be4c6a87969cca564bb6b7abc3da72dd/analysis/1458138620/"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e97048-0d48-4720-939d-468902de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:40:08.000Z",
"modified": "2016-03-16T14:40:08.000Z",
"first_observed": "2016-03-16T14:40:08Z",
"last_observed": "2016-03-16T14:40:08Z",
"number_observed": 1,
"object_refs": [
"url--56e97048-0d48-4720-939d-468902de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e97048-0d48-4720-939d-468902de0b81",
"value": "https://www.virustotal.com/file/f1c1b9f62663b2f0ef45e6876f01a117e95e75cfa6b6fbce43749de772875df5/analysis/1458137132/"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e97049-f674-4928-8446-4d2402de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:40:09.000Z",
"modified": "2016-03-16T14:40:09.000Z",
"first_observed": "2016-03-16T14:40:09Z",
"last_observed": "2016-03-16T14:40:09Z",
"number_observed": 1,
"object_refs": [
"url--56e97049-f674-4928-8446-4d2402de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e97049-f674-4928-8446-4d2402de0b81",
"value": "https://www.virustotal.com/file/e359622ef1d4fef3197c018aade9706bdac47696372291742fb7b1c2aa648e91/analysis/1458136930/"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e97049-8e08-4a3d-a8f8-4f6102de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:40:09.000Z",
"modified": "2016-03-16T14:40:09.000Z",
"first_observed": "2016-03-16T14:40:09Z",
"last_observed": "2016-03-16T14:40:09Z",
"number_observed": 1,
"object_refs": [
"url--56e97049-8e08-4a3d-a8f8-4f6102de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e97049-8e08-4a3d-a8f8-4f6102de0b81",
"value": "https://www.virustotal.com/file/b100e104a22f9670164d73679f7d4b6e5de055bf961bc4c1e9c28d2580d3f753/analysis/1458138636/"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56e96aab-1410-403f-a824-4cbe950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:16:11.000Z",
"modified": "2016-03-16T14:16:11.000Z",
"description": "Automatically added (via freshmeat.exe|d7cddaae21870b1f5b623c5996ef62c242ec8938)",
"pattern": "[file:name = 'freshmeat.exe' AND file:hashes.MD5 = '4bf685e116b26068633319e52ffb51ab']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-03-16T14:16:11Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename|md5\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e9718b-3414-4a92-9528-438c02de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:45:31.000Z",
"modified": "2016-03-16T14:45:31.000Z",
"first_observed": "2016-03-16T14:45:31Z",
"last_observed": "2016-03-16T14:45:31Z",
"number_observed": 1,
"object_refs": [
"url--56e9718b-3414-4a92-9528-438c02de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e9718b-3414-4a92-9528-438c02de0b81",
"value": "https://www.virustotal.com/file/4a760f2b21f217bce11ce0f8d9f71b64808497b8902b47d8985390aaf8511a42/analysis/1458139255/"
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--56e9718b-68fc-440b-b68b-48ca02de0b81",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-03-16T14:45:31.000Z",
"modified": "2016-03-16T14:45:31.000Z",
"first_observed": "2016-03-16T14:45:31Z",
"last_observed": "2016-03-16T14:45:31Z",
"number_observed": 1,
"object_refs": [
"url--56e9718b-68fc-440b-b68b-48ca02de0b81"
],
"labels": [
"misp:type=\"link\"",
"misp:category=\"External analysis\""
]
},
{
"type": "url",
"spec_version": "2.1",
"id": "url--56e9718b-68fc-440b-b68b-48ca02de0b81",
"value": "https://www.virustotal.com/file/1f0610924b008e977d7c7a1698ec54ff0df356b934b4efc251d73849b29d66bb/analysis/1458139051/"
},
{
"type": "marking-definition",
"spec_version": "2.1",
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
"created": "2017-01-20T00:00:00.000Z",
"definition_type": "tlp",
"name": "TLP:WHITE",
"definition": {
"tlp": "white"
}
}
]
}
Reference in a new issue Copy permalink