866 lines
2.2 MiB
JSON
866 lines
2.2 MiB
JSON
|
{
|
||
|
|
"type": "bundle",
|
||
|
|
"id": "bundle--58a4aa5c-29c4-4034-9ad4-426002de0b81",
|
||
|
|
"objects": [
|
||
|
|
{
|
||
|
|
"type": "identity",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:53:28.000Z",
|
||
|
|
"modified": "2017-02-15T19:53:28.000Z",
|
||
|
|
"name": "CIRCL",
|
||
|
|
"identity_class": "organization"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "report",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "report--58a4aa5c-29c4-4034-9ad4-426002de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:53:28.000Z",
|
||
|
|
"modified": "2017-02-15T19:53:28.000Z",
|
||
|
|
"name": "OSINT - Who Ran Leakedsource.com?",
|
||
|
|
"published": "2017-02-15T19:54:37Z",
|
||
|
|
"object_refs": [
|
||
|
|
"observed-data--58a4aadb-b124-4bd9-a164-46b202de0b81",
|
||
|
|
"url--58a4aadb-b124-4bd9-a164-46b202de0b81",
|
||
|
|
"x-misp-attribute--58a4aaf4-5d88-46c8-8c2f-410802de0b81",
|
||
|
|
"observed-data--58a4ab25-5620-4843-a08b-4f0602de0b81",
|
||
|
|
"domain-name--58a4ab25-5620-4843-a08b-4f0602de0b81",
|
||
|
|
"x-misp-attribute--58a4ab47-c86c-44e3-bdf2-46ac02de0b81",
|
||
|
|
"x-misp-attribute--58a4ab85-f5b0-4630-b821-4e8202de0b81",
|
||
|
|
"x-misp-attribute--58a4ab9d-52ec-4469-9949-47d102de0b81",
|
||
|
|
"observed-data--58a4abc9-8280-4f19-b1e4-473b02de0b81",
|
||
|
|
"url--58a4abc9-8280-4f19-b1e4-473b02de0b81",
|
||
|
|
"x-misp-attribute--58a4abf1-be0c-45a3-8225-46a802de0b81",
|
||
|
|
"x-misp-attribute--58a4ac13-8644-42ea-af6a-4ccb02de0b81",
|
||
|
|
"x-misp-attribute--58a4ac28-523c-4d4e-bc45-47c402de0b81",
|
||
|
|
"observed-data--58a4accf-329c-4e54-a738-4d2d02de0b81",
|
||
|
|
"domain-name--58a4accf-329c-4e54-a738-4d2d02de0b81",
|
||
|
|
"observed-data--58a4acd0-2518-4778-8b62-4ff702de0b81",
|
||
|
|
"domain-name--58a4acd0-2518-4778-8b62-4ff702de0b81",
|
||
|
|
"observed-data--58a4ad1d-fce0-4d78-baf6-ee8502de0b81",
|
||
|
|
"email-message--58a4ad1d-fce0-4d78-baf6-ee8502de0b81",
|
||
|
|
"email-addr--58a4ad1d-fce0-4d78-baf6-ee8502de0b81",
|
||
|
|
"observed-data--58a4ad3c-36ec-4ebe-bd84-414e02de0b81",
|
||
|
|
"email-message--58a4ad3c-36ec-4ebe-bd84-414e02de0b81",
|
||
|
|
"email-addr--58a4ad3c-36ec-4ebe-bd84-414e02de0b81",
|
||
|
|
"observed-data--58a4ad74-e4f8-4838-b874-a3a102de0b81",
|
||
|
|
"email-message--58a4ad74-e4f8-4838-b874-a3a102de0b81",
|
||
|
|
"email-addr--58a4ad74-e4f8-4838-b874-a3a102de0b81",
|
||
|
|
"observed-data--58a4ad75-2a18-47a9-a804-a3a102de0b81",
|
||
|
|
"email-message--58a4ad75-2a18-47a9-a804-a3a102de0b81",
|
||
|
|
"email-addr--58a4ad75-2a18-47a9-a804-a3a102de0b81",
|
||
|
|
"observed-data--58a4ad76-f960-48f3-9370-a3a102de0b81",
|
||
|
|
"email-message--58a4ad76-f960-48f3-9370-a3a102de0b81",
|
||
|
|
"email-addr--58a4ad76-f960-48f3-9370-a3a102de0b81",
|
||
|
|
"observed-data--58a4ad76-e768-42cb-adfc-a3a102de0b81",
|
||
|
|
"email-message--58a4ad76-e768-42cb-adfc-a3a102de0b81",
|
||
|
|
"email-addr--58a4ad76-e768-42cb-adfc-a3a102de0b81",
|
||
|
|
"observed-data--58a4ad77-03ac-41bb-be33-a3a102de0b81",
|
||
|
|
"email-message--58a4ad77-03ac-41bb-be33-a3a102de0b81",
|
||
|
|
"email-addr--58a4ad77-03ac-41bb-be33-a3a102de0b81",
|
||
|
|
"x-misp-attribute--58a4ae60-4610-45b8-b00c-403c02de0b81",
|
||
|
|
"observed-data--58a4aeac-1c24-4d98-ac30-47fe02de0b81",
|
||
|
|
"domain-name--58a4aeac-1c24-4d98-ac30-47fe02de0b81",
|
||
|
|
"observed-data--58a4aead-f9bc-43f8-be16-48e102de0b81",
|
||
|
|
"domain-name--58a4aead-f9bc-43f8-be16-48e102de0b81",
|
||
|
|
"observed-data--58a4af01-36f0-43f2-8bf1-4a0302de0b81",
|
||
|
|
"file--58a4af01-36f0-43f2-8bf1-4a0302de0b81",
|
||
|
|
"observed-data--58a4af02-62a0-4692-8613-48ae02de0b81",
|
||
|
|
"file--58a4af02-62a0-4692-8613-48ae02de0b81",
|
||
|
|
"observed-data--58a4af03-d26c-4b06-92fd-4b0b02de0b81",
|
||
|
|
"file--58a4af03-d26c-4b06-92fd-4b0b02de0b81",
|
||
|
|
"observed-data--58a4afc2-bf60-4639-a931-47af02de0b81",
|
||
|
|
"file--58a4afc2-bf60-4639-a931-47af02de0b81",
|
||
|
|
"artifact--58a4afc2-bf60-4639-a931-47af02de0b81",
|
||
|
|
"observed-data--58a4aff2-fc04-4b15-b7ae-4ab002de0b81",
|
||
|
|
"file--58a4aff2-fc04-4b15-b7ae-4ab002de0b81",
|
||
|
|
"artifact--58a4aff2-fc04-4b15-b7ae-4ab002de0b81",
|
||
|
|
"observed-data--58a4b05b-b628-4a3f-bf37-4bc002de0b81",
|
||
|
|
"email-message--58a4b05b-b628-4a3f-bf37-4bc002de0b81",
|
||
|
|
"email-addr--58a4b05b-b628-4a3f-bf37-4bc002de0b81",
|
||
|
|
"observed-data--58a4b05c-8bd8-4fa6-b617-45f602de0b81",
|
||
|
|
"email-message--58a4b05c-8bd8-4fa6-b617-45f602de0b81",
|
||
|
|
"email-addr--58a4b05c-8bd8-4fa6-b617-45f602de0b81",
|
||
|
|
"observed-data--58a4b0a7-6470-4f74-ba3e-46f502de0b81",
|
||
|
|
"file--58a4b0a7-6470-4f74-ba3e-46f502de0b81",
|
||
|
|
"artifact--58a4b0a7-6470-4f74-ba3e-46f502de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"Threat-Report",
|
||
|
|
"misp:tool=\"MISP-STIX-Converter\"",
|
||
|
|
"admiralty-scale:source-reliability=\"c\"",
|
||
|
|
"admiralty-scale:information-credibility=\"3\"",
|
||
|
|
"circl:incident-classification=\"information-leak\"",
|
||
|
|
"osint:certainty=\"75\""
|
||
|
|
],
|
||
|
|
"object_marking_refs": [
|
||
|
|
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4aadb-b124-4bd9-a164-46b202de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"url--58a4aadb-b124-4bd9-a164-46b202de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"link\"",
|
||
|
|
"misp:category=\"External analysis\"",
|
||
|
|
"osint:source-type=\"blog-post\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "url",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "url--58a4aadb-b124-4bd9-a164-46b202de0b81",
|
||
|
|
"value": "https://krebsonsecurity.com/2017/02/who-ran-leakedsource-com/"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "x-misp-attribute",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "x-misp-attribute--58a4aaf4-5d88-46c8-8c2f-410802de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"comment\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
],
|
||
|
|
"x_misp_category": "External analysis",
|
||
|
|
"x_misp_type": "comment",
|
||
|
|
"x_misp_value": "Late last month, multiple news outlets reported that unspecified law enforcement officials had seized the servers for Leakedsource.com, perhaps the largest online collection of usernames and passwords leaked or stolen in some of the worst data breaches \u00e2\u20ac\u201d including billions of credentials for accounts at top sites like LinkedIn, Myspace, and Yahoo.\r\n\r\nIn a development that could turn out to be deeply ironic, it seems that the real-life identity of LeakedSource\u00e2\u20ac\u2122s principal owner may have been exposed by many of the same stolen databases he\u00e2\u20ac\u2122s been peddling."
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4ab25-5620-4843-a08b-4f0602de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"domain-name--58a4ab25-5620-4843-a08b-4f0602de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"domain\"",
|
||
|
|
"misp:category=\"Network activity\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "domain-name",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "domain-name--58a4ab25-5620-4843-a08b-4f0602de0b81",
|
||
|
|
"value": "abusewith.us"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "x-misp-attribute",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "x-misp-attribute--58a4ab47-c86c-44e3-bdf2-46ac02de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:51:02.000Z",
|
||
|
|
"modified": "2017-02-15T19:51:02.000Z",
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"threat-actor\"",
|
||
|
|
"misp:category=\"Attribution\"",
|
||
|
|
"admiralty-scale:information-credibility=\"3\""
|
||
|
|
],
|
||
|
|
"x_misp_category": "Attribution",
|
||
|
|
"x_misp_comment": "The administrator of Abusewith[dot]us is a hacker who uses the nickname \u00e2\u20ac\u0153Xerx3s.\u00e2\u20ac\u009d",
|
||
|
|
"x_misp_type": "threat-actor",
|
||
|
|
"x_misp_value": "Xerx3s"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "x-misp-attribute",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "x-misp-attribute--58a4ab85-f5b0-4630-b821-4e8202de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"text\"",
|
||
|
|
"misp:category=\"Attribution\""
|
||
|
|
],
|
||
|
|
"x_misp_category": "Attribution",
|
||
|
|
"x_misp_comment": "I sought an interview by reaching out to the email listed on the site (leakedsourceonline@gmail.com).",
|
||
|
|
"x_misp_type": "text",
|
||
|
|
"x_misp_value": "leakedsourceonline@gmail.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "x-misp-attribute",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "x-misp-attribute--58a4ab9d-52ec-4469-9949-47d102de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"jabber-id\"",
|
||
|
|
"misp:category=\"Social network\""
|
||
|
|
],
|
||
|
|
"x_misp_category": "Social network",
|
||
|
|
"x_misp_type": "jabber-id",
|
||
|
|
"x_misp_value": "leakedsource@chatme.im"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4abc9-8280-4f19-b1e4-473b02de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"url--58a4abc9-8280-4f19-b1e4-473b02de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"link\"",
|
||
|
|
"misp:category=\"External analysis\"",
|
||
|
|
"osint:source-type=\"blog-post\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "url",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "url--58a4abc9-8280-4f19-b1e4-473b02de0b81",
|
||
|
|
"value": "https://krebsonsecurity.com/wp-content/uploads/2017/02/LeakedSourceAdminChat.txt"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "x-misp-attribute",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "x-misp-attribute--58a4abf1-be0c-45a3-8225-46a802de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"jabber-id\"",
|
||
|
|
"misp:category=\"Social network\""
|
||
|
|
],
|
||
|
|
"x_misp_category": "Social network",
|
||
|
|
"x_misp_comment": "My source told me he\u00e2\u20ac\u2122d recently chatted with Xerx3s using the Jabber address Xerx3s has long used prior to the creation of LeakedSource",
|
||
|
|
"x_misp_type": "jabber-id",
|
||
|
|
"x_misp_value": "xerx3s@chatme.im"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "x-misp-attribute",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "x-misp-attribute--58a4ac13-8644-42ea-af6a-4ccb02de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:51:18.000Z",
|
||
|
|
"modified": "2017-02-15T19:51:18.000Z",
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"threat-actor\"",
|
||
|
|
"misp:category=\"Attribution\"",
|
||
|
|
"admiralty-scale:information-credibility=\"3\""
|
||
|
|
],
|
||
|
|
"x_misp_category": "Attribution",
|
||
|
|
"x_misp_comment": "This is in reference to a pseudonym Xerx3s frequently used, \u00e2\u20ac\u0153Jeremy Wade.\u00e2\u20ac\u009d",
|
||
|
|
"x_misp_type": "threat-actor",
|
||
|
|
"x_misp_value": "Jeremy Wade"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "x-misp-attribute",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "x-misp-attribute--58a4ac28-523c-4d4e-bc45-47c402de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"text\"",
|
||
|
|
"misp:category=\"Attribution\""
|
||
|
|
],
|
||
|
|
"x_misp_category": "Attribution",
|
||
|
|
"x_misp_type": "text",
|
||
|
|
"x_misp_value": "imjeremywade@gmail.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4accf-329c-4e54-a738-4d2d02de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"domain-name--58a4accf-329c-4e54-a738-4d2d02de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"domain\"",
|
||
|
|
"misp:category=\"Network activity\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "domain-name",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "domain-name--58a4accf-329c-4e54-a738-4d2d02de0b81",
|
||
|
|
"value": "cyberpay.info"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4acd0-2518-4778-8b62-4ff702de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"domain-name--58a4acd0-2518-4778-8b62-4ff702de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"domain\"",
|
||
|
|
"misp:category=\"Network activity\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "domain-name",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "domain-name--58a4acd0-2518-4778-8b62-4ff702de0b81",
|
||
|
|
"value": "abusing.rs"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4ad1d-fce0-4d78-baf6-ee8502de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"email-message--58a4ad1d-fce0-4d78-baf6-ee8502de0b81",
|
||
|
|
"email-addr--58a4ad1d-fce0-4d78-baf6-ee8502de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"email-src\"",
|
||
|
|
"misp:category=\"Social network\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-message",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-message--58a4ad1d-fce0-4d78-baf6-ee8502de0b81",
|
||
|
|
"is_multipart": false,
|
||
|
|
"from_ref": "email-addr--58a4ad1d-fce0-4d78-baf6-ee8502de0b81"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-addr",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-addr--58a4ad1d-fce0-4d78-baf6-ee8502de0b81",
|
||
|
|
"value": "eadeh_andrew@yahoo.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4ad3c-36ec-4ebe-bd84-414e02de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"email-message--58a4ad3c-36ec-4ebe-bd84-414e02de0b81",
|
||
|
|
"email-addr--58a4ad3c-36ec-4ebe-bd84-414e02de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"email-src\"",
|
||
|
|
"misp:category=\"Social network\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-message",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-message--58a4ad3c-36ec-4ebe-bd84-414e02de0b81",
|
||
|
|
"is_multipart": false,
|
||
|
|
"from_ref": "email-addr--58a4ad3c-36ec-4ebe-bd84-414e02de0b81"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-addr",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-addr--58a4ad3c-36ec-4ebe-bd84-414e02de0b81",
|
||
|
|
"value": "xdavros@gmail.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4ad74-e4f8-4838-b874-a3a102de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"email-message--58a4ad74-e4f8-4838-b874-a3a102de0b81",
|
||
|
|
"email-addr--58a4ad74-e4f8-4838-b874-a3a102de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"email-src\"",
|
||
|
|
"misp:category=\"Payload delivery\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-message",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-message--58a4ad74-e4f8-4838-b874-a3a102de0b81",
|
||
|
|
"is_multipart": false,
|
||
|
|
"from_ref": "email-addr--58a4ad74-e4f8-4838-b874-a3a102de0b81"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-addr",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-addr--58a4ad74-e4f8-4838-b874-a3a102de0b81",
|
||
|
|
"value": "xdavros@gmail.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4ad75-2a18-47a9-a804-a3a102de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"email-message--58a4ad75-2a18-47a9-a804-a3a102de0b81",
|
||
|
|
"email-addr--58a4ad75-2a18-47a9-a804-a3a102de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"email-src\"",
|
||
|
|
"misp:category=\"Payload delivery\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-message",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-message--58a4ad75-2a18-47a9-a804-a3a102de0b81",
|
||
|
|
"is_multipart": false,
|
||
|
|
"from_ref": "email-addr--58a4ad75-2a18-47a9-a804-a3a102de0b81"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-addr",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-addr--58a4ad75-2a18-47a9-a804-a3a102de0b81",
|
||
|
|
"value": "alexdavros@gmail.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4ad76-f960-48f3-9370-a3a102de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"email-message--58a4ad76-f960-48f3-9370-a3a102de0b81",
|
||
|
|
"email-addr--58a4ad76-f960-48f3-9370-a3a102de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"email-src\"",
|
||
|
|
"misp:category=\"Payload delivery\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-message",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-message--58a4ad76-f960-48f3-9370-a3a102de0b81",
|
||
|
|
"is_multipart": false,
|
||
|
|
"from_ref": "email-addr--58a4ad76-f960-48f3-9370-a3a102de0b81"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-addr",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-addr--58a4ad76-f960-48f3-9370-a3a102de0b81",
|
||
|
|
"value": "davrosalex3@yahoo.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4ad76-e768-42cb-adfc-a3a102de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"email-message--58a4ad76-e768-42cb-adfc-a3a102de0b81",
|
||
|
|
"email-addr--58a4ad76-e768-42cb-adfc-a3a102de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"email-src\"",
|
||
|
|
"misp:category=\"Payload delivery\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-message",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-message--58a4ad76-e768-42cb-adfc-a3a102de0b81",
|
||
|
|
"is_multipart": false,
|
||
|
|
"from_ref": "email-addr--58a4ad76-e768-42cb-adfc-a3a102de0b81"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-addr",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-addr--58a4ad76-e768-42cb-adfc-a3a102de0b81",
|
||
|
|
"value": "davrosalex4@yahoo.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4ad77-03ac-41bb-be33-a3a102de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"email-message--58a4ad77-03ac-41bb-be33-a3a102de0b81",
|
||
|
|
"email-addr--58a4ad77-03ac-41bb-be33-a3a102de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"email-src\"",
|
||
|
|
"misp:category=\"Social network\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-message",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-message--58a4ad77-03ac-41bb-be33-a3a102de0b81",
|
||
|
|
"is_multipart": false,
|
||
|
|
"from_ref": "email-addr--58a4ad77-03ac-41bb-be33-a3a102de0b81"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-addr",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-addr--58a4ad77-03ac-41bb-be33-a3a102de0b81",
|
||
|
|
"value": "themarketsales@gmail.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "x-misp-attribute",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "x-misp-attribute--58a4ae60-4610-45b8-b00c-403c02de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"text\"",
|
||
|
|
"misp:category=\"Attribution\""
|
||
|
|
],
|
||
|
|
"x_misp_category": "Attribution",
|
||
|
|
"x_misp_comment": "The Gmail account xdavros@gmail.com was used to register at least four domain names almost six years ago in 2011. Two of those domains \u00e2\u20ac\u201d daily-streaming.com and tiny-chats.com \u00e2\u20ac\u201d were originally registered to a \u00e2\u20ac\u0153Nick Davros\u00e2\u20ac\u009d at 3757 Dunes Parkway, Muskegon, Mich. The other two were registered to a Nick or Alex Davros at 868 W. Hile Rd., Muskegon, Mich. All four domain registration records included the phone number +12313430295.",
|
||
|
|
"x_misp_type": "text",
|
||
|
|
"x_misp_value": "+12313430295"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4aeac-1c24-4d98-ac30-47fe02de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"domain-name--58a4aeac-1c24-4d98-ac30-47fe02de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"domain\"",
|
||
|
|
"misp:category=\"Network activity\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "domain-name",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "domain-name--58a4aeac-1c24-4d98-ac30-47fe02de0b81",
|
||
|
|
"value": "daily-streaming.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4aead-f9bc-43f8-be16-48e102de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"domain-name--58a4aead-f9bc-43f8-be16-48e102de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"domain\"",
|
||
|
|
"misp:category=\"Network activity\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "domain-name",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "domain-name--58a4aead-f9bc-43f8-be16-48e102de0b81",
|
||
|
|
"value": "tiny-chats.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4af01-36f0-43f2-8bf1-4a0302de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"file--58a4af01-36f0-43f2-8bf1-4a0302de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"filename\"",
|
||
|
|
"misp:category=\"Payload delivery\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "file",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "file--58a4af01-36f0-43f2-8bf1-4a0302de0b81",
|
||
|
|
"name": "jwade69.no-ip.biz"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4af02-62a0-4692-8613-48ae02de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"file--58a4af02-62a0-4692-8613-48ae02de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"filename\"",
|
||
|
|
"misp:category=\"Payload delivery\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "file",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "file--58a4af02-62a0-4692-8613-48ae02de0b81",
|
||
|
|
"name": "wadewon.no-ip.biz"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4af03-d26c-4b06-92fd-4b0b02de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:42:14.000Z",
|
||
|
|
"modified": "2017-02-15T19:42:14.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"last_observed": "2017-02-15T19:42:14Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"file--58a4af03-d26c-4b06-92fd-4b0b02de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"filename\"",
|
||
|
|
"misp:category=\"Payload delivery\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "file",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "file--58a4af03-d26c-4b06-92fd-4b0b02de0b81",
|
||
|
|
"name": "jrat6969.zapto.org"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4afc2-bf60-4639-a931-47af02de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:45:06.000Z",
|
||
|
|
"modified": "2017-02-15T19:45:06.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:45:06Z",
|
||
|
|
"last_observed": "2017-02-15T19:45:06Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"file--58a4afc2-bf60-4639-a931-47af02de0b81",
|
||
|
|
"artifact--58a4afc2-bf60-4639-a931-47af02de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"attachment\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "file",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "file--58a4afc2-bf60-4639-a931-47af02de0b81",
|
||
|
|
"name": "alexdavrosleakedsource.png",
|
||
|
|
"content_ref": "artifact--58a4afc2-bf60-4639-a931-47af02de0b81"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "artifact",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "artifact--58a4afc2-bf60-4639-a931-47af02de0b81",
|
||
|
|
"payload_bin": "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
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4aff2-fc04-4b15-b7ae-4ab002de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:45:54.000Z",
|
||
|
|
"modified": "2017-02-15T19:45:54.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:45:54Z",
|
||
|
|
"last_observed": "2017-02-15T19:45:54Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"file--58a4aff2-fc04-4b15-b7ae-4ab002de0b81",
|
||
|
|
"artifact--58a4aff2-fc04-4b15-b7ae-4ab002de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"attachment\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "file",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "file--58a4aff2-fc04-4b15-b7ae-4ab002de0b81",
|
||
|
|
"name": "themarketsalespage1.png",
|
||
|
|
"content_ref": "artifact--58a4aff2-fc04-4b15-b7ae-4ab002de0b81"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "artifact",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "artifact--58a4aff2-fc04-4b15-b7ae-4ab002de0b81",
|
||
|
|
"payload_bin": "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
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4b05b-b628-4a3f-bf37-4bc002de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:47:39.000Z",
|
||
|
|
"modified": "2017-02-15T19:47:39.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:47:39Z",
|
||
|
|
"last_observed": "2017-02-15T19:47:39Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"email-message--58a4b05b-b628-4a3f-bf37-4bc002de0b81",
|
||
|
|
"email-addr--58a4b05b-b628-4a3f-bf37-4bc002de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"email-src\"",
|
||
|
|
"misp:category=\"Payload delivery\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-message",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-message--58a4b05b-b628-4a3f-bf37-4bc002de0b81",
|
||
|
|
"is_multipart": false,
|
||
|
|
"from_ref": "email-addr--58a4b05b-b628-4a3f-bf37-4bc002de0b81"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-addr",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-addr--58a4b05b-b628-4a3f-bf37-4bc002de0b81",
|
||
|
|
"value": "matt96sk@yahoo.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4b05c-8bd8-4fa6-b617-45f602de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:47:39.000Z",
|
||
|
|
"modified": "2017-02-15T19:47:39.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:47:39Z",
|
||
|
|
"last_observed": "2017-02-15T19:47:39Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"email-message--58a4b05c-8bd8-4fa6-b617-45f602de0b81",
|
||
|
|
"email-addr--58a4b05c-8bd8-4fa6-b617-45f602de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"email-src\"",
|
||
|
|
"misp:category=\"Payload delivery\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-message",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-message--58a4b05c-8bd8-4fa6-b617-45f602de0b81",
|
||
|
|
"is_multipart": false,
|
||
|
|
"from_ref": "email-addr--58a4b05c-8bd8-4fa6-b617-45f602de0b81"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "email-addr",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "email-addr--58a4b05c-8bd8-4fa6-b617-45f602de0b81",
|
||
|
|
"value": "skythekiddy@yahoo.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--58a4b0a7-6470-4f74-ba3e-46f502de0b81",
|
||
|
|
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
|
||
|
|
"created": "2017-02-15T19:48:55.000Z",
|
||
|
|
"modified": "2017-02-15T19:48:55.000Z",
|
||
|
|
"first_observed": "2017-02-15T19:48:55Z",
|
||
|
|
"last_observed": "2017-02-15T19:48:55Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"file--58a4b0a7-6470-4f74-ba3e-46f502de0b81",
|
||
|
|
"artifact--58a4b0a7-6470-4f74-ba3e-46f502de0b81"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"attachment\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "file",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "file--58a4b0a7-6470-4f74-ba3e-46f502de0b81",
|
||
|
|
"name": "ls-aw-mindmap.png",
|
||
|
|
"content_ref": "artifact--58a4b0a7-6470-4f74-ba3e-46f502de0b81"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "artifact",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "artifact--58a4b0a7-6470-4f74-ba3e-46f502de0b81",
|
||
|
|
"payload_bin": "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
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "marking-definition",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
|
||
|
|
"created": "2017-01-20T00:00:00.000Z",
|
||
|
|
"definition_type": "tlp",
|
||
|
|
"name": "TLP:WHITE",
|
||
|
|
"definition": {
|
||
|
|
"tlp": "white"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|