81 lines
3.5 MiB
JSON
81 lines
3.5 MiB
JSON
|
{
|
||
|
|
"type": "bundle",
|
||
|
|
"id": "bundle--5b68aa4f-fac0-4ebe-a647-b1380acd0835",
|
||
|
|
"objects": [
|
||
|
|
{
|
||
|
|
"type": "identity",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "identity--5a68c02d-959c-4c8a-a571-0dcac0a8060a",
|
||
|
|
"created": "2018-08-07T13:51:22.000Z",
|
||
|
|
"modified": "2018-08-07T13:51:22.000Z",
|
||
|
|
"name": "Synovus Financial",
|
||
|
|
"identity_class": "organization"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "report",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "report--5b68aa4f-fac0-4ebe-a647-b1380acd0835",
|
||
|
|
"created_by_ref": "identity--5a68c02d-959c-4c8a-a571-0dcac0a8060a",
|
||
|
|
"created": "2018-08-07T13:51:22.000Z",
|
||
|
|
"modified": "2018-08-07T13:51:22.000Z",
|
||
|
|
"name": "RBC Themed Phish, Obfuscated Javascript in .htm attachment",
|
||
|
|
"published": "2018-08-07T15:25:40Z",
|
||
|
|
"object_refs": [
|
||
|
|
"observed-data--5b69a3ba-b788-44b4-a99e-d7480acd0835",
|
||
|
|
"file--5b69a3ba-b788-44b4-a99e-d7480acd0835",
|
||
|
|
"artifact--5b69a3ba-b788-44b4-a99e-d7480acd0835"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"Threat-Report",
|
||
|
|
"misp:tool=\"MISP-STIX-Converter\"",
|
||
|
|
"veris:action:social:variety=\"Phishing\""
|
||
|
|
],
|
||
|
|
"object_marking_refs": [
|
||
|
|
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--5b69a3ba-b788-44b4-a99e-d7480acd0835",
|
||
|
|
"created_by_ref": "identity--5a68c02d-959c-4c8a-a571-0dcac0a8060a",
|
||
|
|
"created": "2018-08-07T13:50:50.000Z",
|
||
|
|
"modified": "2018-08-07T13:50:50.000Z",
|
||
|
|
"first_observed": "2018-08-07T13:50:50Z",
|
||
|
|
"last_observed": "2018-08-07T13:50:50Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"file--5b69a3ba-b788-44b4-a99e-d7480acd0835",
|
||
|
|
"artifact--5b69a3ba-b788-44b4-a99e-d7480acd0835"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"attachment\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "file",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "file--5b69a3ba-b788-44b4-a99e-d7480acd0835",
|
||
|
|
"name": "report-c579657ab579e29a131d5b078c05bb42.pdf",
|
||
|
|
"content_ref": "artifact--5b69a3ba-b788-44b4-a99e-d7480acd0835"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "artifact",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "artifact--5b69a3ba-b788-44b4-a99e-d7480acd0835",
|
||
|
|
"payload_bin": "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
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "marking-definition",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
|
||
|
|
"created": "2017-01-20T00:00:00.000Z",
|
||
|
|
"definition_type": "tlp",
|
||
|
|
"name": "TLP:WHITE",
|
||
|
|
"definition": {
|
||
|
|
"tlp": "white"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|