12302 lines
1 MiB
JSON
12302 lines
1 MiB
JSON
|
{
|
||
|
|
"type": "bundle",
|
||
|
|
"id": "bundle--55bb38dc-bda8-4839-8b37-4fe1950d210b",
|
||
|
|
"objects": [
|
||
|
|
{
|
||
|
|
"type": "identity",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:04.000Z",
|
||
|
|
"name": "CthulhuSPRL.be",
|
||
|
|
"identity_class": "organization"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "report",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "report--55bb38dc-bda8-4839-8b37-4fe1950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:04.000Z",
|
||
|
|
"name": "OSINT Milano Hacking Team malware detection tool & IOCs by Rook Security",
|
||
|
|
"published": "2015-07-31T13:02:46Z",
|
||
|
|
"object_refs": [
|
||
|
|
"observed-data--55bb3919-f5f4-4112-90fb-419d950d210b",
|
||
|
|
"url--55bb3919-f5f4-4112-90fb-419d950d210b",
|
||
|
|
"observed-data--55bb3919-5e3c-4275-9953-4568950d210b",
|
||
|
|
"url--55bb3919-5e3c-4275-9953-4568950d210b",
|
||
|
|
"observed-data--55bb3919-4efc-49de-8e60-47b4950d210b",
|
||
|
|
"url--55bb3919-4efc-49de-8e60-47b4950d210b",
|
||
|
|
"observed-data--55bb391a-bdd4-409f-9b67-4282950d210b",
|
||
|
|
"url--55bb391a-bdd4-409f-9b67-4282950d210b",
|
||
|
|
"observed-data--55bb391a-9298-4e04-8168-488e950d210b",
|
||
|
|
"url--55bb391a-9298-4e04-8168-488e950d210b",
|
||
|
|
"x-misp-attribute--55bb3927-0c70-41bd-8fdc-4274950d210b",
|
||
|
|
"observed-data--55bb39c4-47b0-4b79-a585-4307950d210b",
|
||
|
|
"url--55bb39c4-47b0-4b79-a585-4307950d210b",
|
||
|
|
"observed-data--55bb39c4-6838-418d-8dc2-4899950d210b",
|
||
|
|
"url--55bb39c4-6838-418d-8dc2-4899950d210b",
|
||
|
|
"indicator--55bb3e11-bf10-4140-bdf3-41ff950d210b",
|
||
|
|
"observed-data--55bb3e5a-66f4-4b4b-a87e-4c5e950d210b",
|
||
|
|
"file--55bb3e5a-66f4-4b4b-a87e-4c5e950d210b",
|
||
|
|
"artifact--55bb3e5a-66f4-4b4b-a87e-4c5e950d210b",
|
||
|
|
"indicator--55bb3e8c-e68c-44e3-8156-417c950d210b",
|
||
|
|
"indicator--55bb3e8c-0bb8-4a5d-805b-4700950d210b",
|
||
|
|
"indicator--55bb3e8d-830c-4dd5-80a2-49ce950d210b",
|
||
|
|
"indicator--55bb3e8d-bfc8-4570-8ce6-4f8d950d210b",
|
||
|
|
"indicator--55bb3e8d-145c-41ba-99c2-46da950d210b",
|
||
|
|
"indicator--55bb3e8d-cdc8-4cfe-8ca9-445a950d210b",
|
||
|
|
"indicator--55bb3e8d-4a7c-4158-9c7a-49ba950d210b",
|
||
|
|
"indicator--55bb3e8d-b38c-4e40-b38d-427c950d210b",
|
||
|
|
"indicator--55bb3e8d-6934-4977-92d5-4d19950d210b",
|
||
|
|
"indicator--55bb3e8e-efd8-4d2a-b870-4bf0950d210b",
|
||
|
|
"indicator--55bb3e8e-2670-4c78-97ab-4237950d210b",
|
||
|
|
"indicator--55bb3e8e-be4c-4def-aeb1-4d9d950d210b",
|
||
|
|
"indicator--55bb3e8e-c280-46f8-bfa6-481a950d210b",
|
||
|
|
"indicator--55bb3e8e-e84c-4572-9f45-4d24950d210b",
|
||
|
|
"indicator--55bb3e8e-5764-43b3-931a-4522950d210b",
|
||
|
|
"indicator--55bb3e8e-dba8-4660-b2af-4523950d210b",
|
||
|
|
"indicator--55bb3e8f-a0c4-45cd-b71e-4f6e950d210b",
|
||
|
|
"indicator--55bb3e8f-1e5c-4550-8fc3-46af950d210b",
|
||
|
|
"indicator--55bb3e8f-74c8-458d-a3bb-4555950d210b",
|
||
|
|
"indicator--55bb3e8f-7ad8-4809-8c2b-4589950d210b",
|
||
|
|
"indicator--55bb3e8f-c9d8-4b1a-b3a5-44a8950d210b",
|
||
|
|
"indicator--55bb3e8f-43f4-4103-9826-415b950d210b",
|
||
|
|
"indicator--55bb3e8f-4cd4-4265-8418-4907950d210b",
|
||
|
|
"indicator--55bb3e90-8a24-4451-9317-4363950d210b",
|
||
|
|
"indicator--55bb3e90-1e90-45c7-b0a4-4122950d210b",
|
||
|
|
"indicator--55bb3e90-6334-40b1-840f-4d3e950d210b",
|
||
|
|
"indicator--55bb3e90-f49c-4747-a365-4980950d210b",
|
||
|
|
"indicator--55bb3e90-723c-4a12-99d1-4b03950d210b",
|
||
|
|
"indicator--55bb3e90-392c-4007-8990-4f68950d210b",
|
||
|
|
"indicator--55bb3e90-9868-4e17-8609-44bd950d210b",
|
||
|
|
"indicator--55bb3e91-9e40-4bc1-8d85-41b1950d210b",
|
||
|
|
"indicator--55bb3e91-1528-4e9b-97f9-4ca7950d210b",
|
||
|
|
"indicator--55bb3e91-1f10-4a05-9e2e-4569950d210b",
|
||
|
|
"indicator--55bb3e91-9258-4c7f-a861-46a5950d210b",
|
||
|
|
"indicator--55bb3e91-ac48-48cf-85f8-4b69950d210b",
|
||
|
|
"indicator--55bb3e91-b3c0-4a8f-832b-429a950d210b",
|
||
|
|
"indicator--55bb3e91-4648-4af0-973b-4a3b950d210b",
|
||
|
|
"indicator--55bb3e92-d7c0-4807-b6b7-40a8950d210b",
|
||
|
|
"indicator--55bb3e92-9c08-4786-8e91-42c3950d210b",
|
||
|
|
"indicator--55bb3e92-60b4-4e6c-9072-45c2950d210b",
|
||
|
|
"indicator--55bb3e92-aa70-4a5b-be6d-43d6950d210b",
|
||
|
|
"indicator--55bb3e92-e9e8-4af2-9714-43cc950d210b",
|
||
|
|
"indicator--55bb3e92-a7b0-4015-8830-4331950d210b",
|
||
|
|
"indicator--55bb3e92-4c0c-4dce-9d03-4477950d210b",
|
||
|
|
"indicator--55bb3e92-d5fc-4f4c-8dd1-443b950d210b",
|
||
|
|
"indicator--55bb3e93-5db8-4724-af10-4602950d210b",
|
||
|
|
"indicator--55bb3e93-8a28-4ec3-8847-4a90950d210b",
|
||
|
|
"indicator--55bb3e93-3a60-48b2-bfdb-43c6950d210b",
|
||
|
|
"indicator--55bb3e93-2874-42bf-a0ee-4e11950d210b",
|
||
|
|
"indicator--55bb3e93-ecd8-45a4-b019-4a2d950d210b",
|
||
|
|
"indicator--55bb3e93-7ad4-4652-8682-4e76950d210b",
|
||
|
|
"indicator--55bb3e93-69f0-49be-9cbd-4299950d210b",
|
||
|
|
"indicator--55bb3e94-2c84-4595-82bd-400c950d210b",
|
||
|
|
"indicator--55bb3e94-e16c-481e-ab68-4175950d210b",
|
||
|
|
"indicator--55bb3e94-debc-4f58-bf8b-4276950d210b",
|
||
|
|
"indicator--55bb3e94-d544-4ee7-9f69-47d2950d210b",
|
||
|
|
"indicator--55bb3e94-dd84-44d9-8c7d-4424950d210b",
|
||
|
|
"indicator--55bb3e94-8ecc-4e3a-bf6e-4161950d210b",
|
||
|
|
"indicator--55bb3e94-44a0-4e39-8521-4e80950d210b",
|
||
|
|
"indicator--55bb3e95-7414-4310-9a44-4074950d210b",
|
||
|
|
"indicator--55bb3e95-4478-406d-ba84-4704950d210b",
|
||
|
|
"indicator--55bb3e95-c56c-47f8-83e6-43e7950d210b",
|
||
|
|
"indicator--55bb3e95-0f4c-4927-904f-489d950d210b",
|
||
|
|
"indicator--55bb3e95-85b4-4393-81e4-44d4950d210b",
|
||
|
|
"indicator--55bb3e95-8c64-442e-972b-45c5950d210b",
|
||
|
|
"indicator--55bb3e95-3e50-4b75-af35-4bee950d210b",
|
||
|
|
"indicator--55bb3e95-a21c-4875-973c-4435950d210b",
|
||
|
|
"indicator--55bb3e96-7e5c-4209-82b0-47a9950d210b",
|
||
|
|
"indicator--55bb3e96-007c-4e23-acd6-43a2950d210b",
|
||
|
|
"indicator--55bb3e96-7dec-402c-aa3b-473f950d210b",
|
||
|
|
"indicator--55bb3e96-3fb8-470e-8cd8-4d3e950d210b",
|
||
|
|
"indicator--55bb3e96-b3ec-4031-bf0f-44fe950d210b",
|
||
|
|
"indicator--55bb3e96-c5b0-4edc-b928-4611950d210b",
|
||
|
|
"indicator--55bb3e96-0d38-42ba-8d3f-4cff950d210b",
|
||
|
|
"indicator--55bb3e97-2d70-4447-bb6c-4415950d210b",
|
||
|
|
"indicator--55bb3e97-14e0-4263-a34e-4339950d210b",
|
||
|
|
"indicator--55bb3e97-74a0-4d90-9f30-43bf950d210b",
|
||
|
|
"indicator--55bb3e97-f428-4f3f-841a-4a01950d210b",
|
||
|
|
"indicator--55bb3e97-41f0-4f7c-8fd4-4376950d210b",
|
||
|
|
"indicator--55bb3e97-2874-49d5-9142-42ef950d210b",
|
||
|
|
"indicator--55bb3e97-f2b4-4873-b2fb-4fd1950d210b",
|
||
|
|
"indicator--55bb3e98-1cb0-4621-9058-49cd950d210b",
|
||
|
|
"indicator--55bb3e98-bce4-4a6e-8445-4582950d210b",
|
||
|
|
"indicator--55bb3e98-1b38-4c5a-9c1a-4c40950d210b",
|
||
|
|
"indicator--55bb3e98-f53c-4414-a35f-4884950d210b",
|
||
|
|
"indicator--55bb3e98-91ac-4e3d-9f38-45ed950d210b",
|
||
|
|
"indicator--55bb3e98-ebf4-40b4-98c4-4167950d210b",
|
||
|
|
"indicator--55bb3e98-e344-4bda-a558-4046950d210b",
|
||
|
|
"indicator--55bb3e98-9ffc-4a65-8940-439a950d210b",
|
||
|
|
"indicator--55bb3e99-a1fc-4a57-9559-48da950d210b",
|
||
|
|
"indicator--55bb3e99-9b64-478d-8f96-48db950d210b",
|
||
|
|
"indicator--55bb3e99-6244-4621-901f-4eca950d210b",
|
||
|
|
"indicator--55bb3e99-1088-48fd-974b-49f4950d210b",
|
||
|
|
"indicator--55bb3e99-a4a0-463b-842e-44b3950d210b",
|
||
|
|
"indicator--55bb3e99-0f50-4d38-8fac-48fe950d210b",
|
||
|
|
"indicator--55bb3e99-795c-45ce-b020-4f66950d210b",
|
||
|
|
"indicator--55bb3e9a-0dbc-4b06-8fce-4b45950d210b",
|
||
|
|
"indicator--55bb3e9a-bdb4-44e4-b673-42be950d210b",
|
||
|
|
"indicator--55bb3e9a-580c-4700-8b62-4ede950d210b",
|
||
|
|
"indicator--55bb3e9a-df00-4ebd-a876-46f0950d210b",
|
||
|
|
"indicator--55bb3e9a-6828-44fc-90ad-4929950d210b",
|
||
|
|
"indicator--55bb3e9a-085c-4d00-b5f7-469d950d210b",
|
||
|
|
"indicator--55bb3e9a-6b3c-46e3-8912-487d950d210b",
|
||
|
|
"indicator--55bb3e9b-3f88-49cc-b9ca-4535950d210b",
|
||
|
|
"indicator--55bb3e9b-1798-4c87-96ad-4571950d210b",
|
||
|
|
"indicator--55bb3e9b-bb50-46b0-b4a3-4509950d210b",
|
||
|
|
"indicator--55bb3e9b-b9cc-445f-9f33-4da9950d210b",
|
||
|
|
"indicator--55bb3e9b-8a70-4345-a609-4e62950d210b",
|
||
|
|
"indicator--55bb3e9b-66f0-4a3d-bed7-4d03950d210b",
|
||
|
|
"indicator--55bb3e9b-ac20-48a9-ad9f-4785950d210b",
|
||
|
|
"indicator--55bb3e9b-f150-431e-8275-4f18950d210b",
|
||
|
|
"indicator--55bb3e9c-f520-4732-9c83-4ed2950d210b",
|
||
|
|
"indicator--55bb3e9c-4c88-47ed-95da-4dd5950d210b",
|
||
|
|
"indicator--55bb3e9c-9bbc-4914-b6e4-4b51950d210b",
|
||
|
|
"indicator--55bb3e9c-de94-4a34-bdb2-40df950d210b",
|
||
|
|
"indicator--55bb3e9c-baf0-4c51-8b7a-4315950d210b",
|
||
|
|
"indicator--55bb3e9c-0214-4a4d-9574-451f950d210b",
|
||
|
|
"indicator--55bb3e9c-3b8c-4a61-9e5c-46cc950d210b",
|
||
|
|
"indicator--55bb3e9d-5264-43e9-bffb-4217950d210b",
|
||
|
|
"indicator--55bb3e9d-3758-48fe-b4b9-40c9950d210b",
|
||
|
|
"indicator--55bb3e9d-b24c-45ac-a475-4b11950d210b",
|
||
|
|
"indicator--55bb3e9d-0c70-4e58-9b91-4096950d210b",
|
||
|
|
"indicator--55bb3e9d-d60c-486e-b3c9-49aa950d210b",
|
||
|
|
"indicator--55bb3e9d-2820-4023-b96b-4779950d210b",
|
||
|
|
"indicator--55bb3e9d-be2c-49f5-abe0-402e950d210b",
|
||
|
|
"indicator--55bb3e9e-9bd8-4a7f-868b-4d42950d210b",
|
||
|
|
"indicator--55bb3e9e-8130-4ebd-8895-4a6b950d210b",
|
||
|
|
"indicator--55bb3e9e-2e6c-48a7-ac9a-4111950d210b",
|
||
|
|
"indicator--55bb3e9e-c17c-4894-bd42-432a950d210b",
|
||
|
|
"indicator--55bb3e9e-09cc-43a6-800c-4ad1950d210b",
|
||
|
|
"indicator--55bb3e9e-8e68-4e58-a537-43df950d210b",
|
||
|
|
"indicator--55bb3e9e-0bd8-49ce-8928-4855950d210b",
|
||
|
|
"indicator--55bb3e9e-e984-4c6d-8c4c-4f61950d210b",
|
||
|
|
"indicator--55bb3e9f-ca90-466b-92bc-4d62950d210b",
|
||
|
|
"indicator--55bb3e9f-d014-4a35-b980-4145950d210b",
|
||
|
|
"indicator--55bb3e9f-0158-4008-9f4c-44f2950d210b",
|
||
|
|
"indicator--55bb3e9f-fb64-439c-b36c-46b4950d210b",
|
||
|
|
"indicator--55bb3e9f-43b4-4fe9-8cb6-4e3e950d210b",
|
||
|
|
"indicator--55bb3e9f-fd0c-47e7-925a-46d7950d210b",
|
||
|
|
"indicator--55bb3e9f-f13c-4331-9d61-483a950d210b",
|
||
|
|
"indicator--55bb3ea0-0e54-454b-82d7-421f950d210b",
|
||
|
|
"indicator--55bb3ea0-ae00-4af8-b19c-4438950d210b",
|
||
|
|
"indicator--55bb3ea0-c300-4094-bdcf-48c9950d210b",
|
||
|
|
"indicator--55bb3ea0-94d0-4fdf-b0cd-4801950d210b",
|
||
|
|
"indicator--55bb3ea0-8130-4a3d-ac14-4066950d210b",
|
||
|
|
"indicator--55bb3ea0-5940-47e1-8d6c-49a5950d210b",
|
||
|
|
"indicator--55bb3ea0-9254-4d41-8b95-4f78950d210b",
|
||
|
|
"indicator--55bb3ea1-1628-4da8-88ed-4e64950d210b",
|
||
|
|
"indicator--55bb3ea1-4ed8-4561-bbfd-42c8950d210b",
|
||
|
|
"indicator--55bb3ea1-32a0-4287-af3c-4208950d210b",
|
||
|
|
"indicator--55bb3ea1-df54-4aca-9141-40f6950d210b",
|
||
|
|
"indicator--55bb3ea1-1c90-4158-af81-4f9c950d210b",
|
||
|
|
"indicator--55bb3ea1-31f4-4163-bd67-4512950d210b",
|
||
|
|
"indicator--55bb3ea1-84d0-4569-813d-42cc950d210b",
|
||
|
|
"indicator--55bb3ea1-4a84-48a3-bb20-43af950d210b",
|
||
|
|
"indicator--55bb3ea2-3190-45d0-b1f7-4d74950d210b",
|
||
|
|
"indicator--55bb3ea2-d3dc-4cb8-9060-4c3e950d210b",
|
||
|
|
"indicator--55bb3ea2-a8cc-4f09-ae62-4663950d210b",
|
||
|
|
"indicator--55bb3ea2-f3f4-4f80-a8b0-4e64950d210b",
|
||
|
|
"indicator--55bb3ea2-a9e4-4468-a9b9-4a6c950d210b",
|
||
|
|
"indicator--55bb3ea2-4ea4-4d09-8b36-454e950d210b",
|
||
|
|
"indicator--55bb3ea2-ed88-41de-ba77-414f950d210b",
|
||
|
|
"indicator--55bb3ea3-43a8-45fa-addd-4993950d210b",
|
||
|
|
"indicator--55bb3ea3-d288-4c56-8cd7-4914950d210b",
|
||
|
|
"indicator--55bb3ea3-c350-443a-b618-47a0950d210b",
|
||
|
|
"indicator--55bb3ea3-2544-4358-b25e-4b53950d210b",
|
||
|
|
"indicator--55bb3ea3-1ec8-4258-817c-42ba950d210b",
|
||
|
|
"indicator--55bb3ea3-c324-4e7e-8919-403e950d210b",
|
||
|
|
"indicator--55bb3ea3-99c8-4ce6-a49b-4563950d210b",
|
||
|
|
"indicator--55bb3ea4-ee34-4b53-8ca8-44b5950d210b",
|
||
|
|
"indicator--55bb3ea4-e60c-444a-b552-4519950d210b",
|
||
|
|
"indicator--55bb3ea4-78d0-4da1-a489-4303950d210b",
|
||
|
|
"indicator--55bb3ea4-ce44-4ae8-8f0b-4012950d210b",
|
||
|
|
"indicator--55bb3ea4-3808-47b9-8bb9-4be8950d210b",
|
||
|
|
"indicator--55bb3ea4-b9c4-470f-92b0-4542950d210b",
|
||
|
|
"indicator--55bb3ea4-afc4-4b98-8edd-4a9b950d210b",
|
||
|
|
"indicator--55bb3ea5-5e2c-485b-9b96-482c950d210b",
|
||
|
|
"indicator--55bb3ea5-4b94-40ff-882d-4620950d210b",
|
||
|
|
"indicator--55bb3ea5-7034-405c-9af4-42e7950d210b",
|
||
|
|
"indicator--55bb3ea5-1a08-49a3-9a17-4cca950d210b",
|
||
|
|
"indicator--55bb3ea5-a758-4c80-90cf-43e2950d210b",
|
||
|
|
"indicator--55bb3ea5-23dc-4c5b-ab1c-4f6e950d210b",
|
||
|
|
"indicator--55bb3ea5-f6d8-46a6-8e92-4f1f950d210b",
|
||
|
|
"indicator--55bb3ea5-c2cc-49c7-bf81-4e1e950d210b",
|
||
|
|
"indicator--55bb3ea6-2ac0-4b41-8cb1-4952950d210b",
|
||
|
|
"indicator--55bb3ea6-265c-4f52-9751-4f5b950d210b",
|
||
|
|
"indicator--55bb3ea6-5524-4814-bb0c-412f950d210b",
|
||
|
|
"indicator--55bb3ea6-9774-4755-806d-43fa950d210b",
|
||
|
|
"indicator--55bb3ea6-0a58-4c32-ae3f-409c950d210b",
|
||
|
|
"indicator--55bb3ea6-1eb4-4add-883a-4369950d210b",
|
||
|
|
"indicator--55bb3ea6-0494-4058-b22c-4baf950d210b",
|
||
|
|
"indicator--55bb3ea7-e7b8-4ded-a2b8-408a950d210b",
|
||
|
|
"indicator--55bb3ea7-e9f8-44fb-822a-4368950d210b",
|
||
|
|
"indicator--55bb3ea7-a4bc-4f55-865e-4020950d210b",
|
||
|
|
"indicator--55bb3ea7-8090-41b3-99d7-4605950d210b",
|
||
|
|
"indicator--55bb3ea7-85f0-4a5c-8e2c-42bb950d210b",
|
||
|
|
"indicator--55bb3ea7-ba30-4a86-9b69-4a4f950d210b",
|
||
|
|
"indicator--55bb3ea7-e684-46c7-b6ec-4377950d210b",
|
||
|
|
"indicator--55bb3ea8-3ca4-4ba5-8868-4bd6950d210b",
|
||
|
|
"indicator--55bb3ea8-c800-4678-9cb2-47ce950d210b",
|
||
|
|
"indicator--55bb3ea8-78dc-4730-94a9-4beb950d210b",
|
||
|
|
"indicator--55bb3ea8-6bbc-4c01-a872-4c77950d210b",
|
||
|
|
"indicator--55bb3ea8-ee40-435d-8681-4abc950d210b",
|
||
|
|
"indicator--55bb3ea8-38c4-42ba-b4a8-4d08950d210b",
|
||
|
|
"indicator--55bb3ea8-3528-48a9-a2ef-4da5950d210b",
|
||
|
|
"indicator--55bb3ea8-72c8-4907-bcc7-403f950d210b",
|
||
|
|
"indicator--55bb3ea9-9d68-4ed6-af88-436f950d210b",
|
||
|
|
"indicator--55bb3ea9-ee90-4ee8-8e10-4232950d210b",
|
||
|
|
"indicator--55bb3ea9-94e0-4bef-a3ad-488b950d210b",
|
||
|
|
"indicator--55bb3ea9-cc40-43db-b907-467e950d210b",
|
||
|
|
"indicator--55bb3ea9-73bc-4036-bc6f-4d13950d210b",
|
||
|
|
"indicator--55bb3ea9-fc1c-46e9-8085-4af2950d210b",
|
||
|
|
"indicator--55bb3ea9-6324-4c4c-a957-4ef5950d210b",
|
||
|
|
"indicator--55bb3eaa-5628-4930-98e7-4bbe950d210b",
|
||
|
|
"indicator--55bb3eaa-8748-4506-b03a-4880950d210b",
|
||
|
|
"indicator--55bb3eaa-1fac-47e9-8def-49dc950d210b",
|
||
|
|
"indicator--55bb3eaa-3704-471d-b117-4958950d210b",
|
||
|
|
"indicator--55bb3eaa-52a8-4043-85cb-4df4950d210b",
|
||
|
|
"indicator--55bb3eaa-2050-485b-bb8b-431d950d210b",
|
||
|
|
"indicator--55bb3eaa-3d20-4b0f-aa14-4934950d210b",
|
||
|
|
"indicator--55bb3eab-d0d4-434a-b7b6-468c950d210b",
|
||
|
|
"indicator--55bb3eab-e3e0-4aad-a9c0-4bc3950d210b",
|
||
|
|
"indicator--55bb3eab-9f48-48b3-80d6-4d8e950d210b",
|
||
|
|
"indicator--55bb3eab-7860-4c79-beac-4f70950d210b",
|
||
|
|
"indicator--55bb3eab-76b8-4640-aa0a-4167950d210b",
|
||
|
|
"indicator--55bb3eab-c674-4282-a74c-408d950d210b",
|
||
|
|
"indicator--55bb3eab-72a0-4348-9be5-46e8950d210b",
|
||
|
|
"indicator--55bb3eac-5348-4c05-a847-4c43950d210b",
|
||
|
|
"indicator--55bb3eac-ec10-4cf0-88a9-4f56950d210b",
|
||
|
|
"indicator--55bb3eac-53e0-4c67-9bea-46da950d210b",
|
||
|
|
"indicator--55bb3eac-830c-423d-b045-4a73950d210b",
|
||
|
|
"indicator--55bb3eac-7bec-457f-b075-4abd950d210b",
|
||
|
|
"indicator--55bb3eac-7080-405d-b878-4f5e950d210b",
|
||
|
|
"indicator--55bb3eac-f5c0-452a-857c-4ce7950d210b",
|
||
|
|
"indicator--55bb3eac-1b28-4b2b-b35f-450e950d210b",
|
||
|
|
"indicator--55bb3ead-6e04-4474-8891-46d5950d210b",
|
||
|
|
"indicator--55bb3ead-c828-42c5-b736-46c8950d210b",
|
||
|
|
"indicator--55bb3ead-ec88-4107-b328-4e0a950d210b",
|
||
|
|
"indicator--55bb3ead-86bc-4111-b668-4f53950d210b",
|
||
|
|
"indicator--55bb3ead-a304-4235-9b91-4cb6950d210b",
|
||
|
|
"indicator--55bb3ead-ef18-4d11-b2d3-4147950d210b",
|
||
|
|
"indicator--55bb3ead-87bc-480a-a2d3-4a05950d210b",
|
||
|
|
"indicator--55bb3eae-9510-4537-bdf3-44f6950d210b",
|
||
|
|
"indicator--55bb3eae-1af4-431f-a3cf-43f6950d210b",
|
||
|
|
"indicator--55bb3eae-13d4-4621-ba78-4909950d210b",
|
||
|
|
"indicator--55bb3eae-f288-4fc7-bed6-40d5950d210b",
|
||
|
|
"indicator--55bb3eae-e1c8-4f17-b552-47b1950d210b",
|
||
|
|
"indicator--55bb3eae-3d18-4e20-833d-40be950d210b",
|
||
|
|
"indicator--55bb3eae-9098-4c04-ba15-4cde950d210b",
|
||
|
|
"indicator--55bb3eaf-3f00-4122-9782-48a4950d210b",
|
||
|
|
"indicator--55bb3eaf-a690-49be-82f7-45ae950d210b",
|
||
|
|
"indicator--55bb3eaf-e7d8-42fd-888d-4b3f950d210b",
|
||
|
|
"indicator--55bb3eaf-24cc-43fd-a85f-42ac950d210b",
|
||
|
|
"indicator--55bb3eaf-7b7c-401f-b5b4-4e6f950d210b",
|
||
|
|
"indicator--55bb3eaf-f95c-431e-b07d-408a950d210b",
|
||
|
|
"indicator--55bb3eaf-acf4-4f03-b8fd-478f950d210b",
|
||
|
|
"indicator--55bb3eb0-9f70-48ac-9967-4fbe950d210b",
|
||
|
|
"indicator--55bb3eb0-1b00-4e40-a20f-4d45950d210b",
|
||
|
|
"indicator--55bb3eb0-9ee0-42c6-9dea-4c46950d210b",
|
||
|
|
"indicator--55bb3eb0-7300-4987-bbad-43cd950d210b",
|
||
|
|
"indicator--55bb3eb0-f6e8-4fee-8366-44a7950d210b",
|
||
|
|
"indicator--55bb3eb0-b180-4b4b-9424-4a28950d210b",
|
||
|
|
"indicator--55bb3eb0-4ff8-42b7-a711-42e5950d210b",
|
||
|
|
"indicator--55bb3eb1-8e7c-4452-997d-47da950d210b",
|
||
|
|
"indicator--55bb3eb1-2e28-4a87-94fc-47f3950d210b",
|
||
|
|
"indicator--55bb3eb1-25b8-435a-a323-4f7c950d210b",
|
||
|
|
"indicator--55bb3eb1-b494-407b-929b-4d0b950d210b",
|
||
|
|
"indicator--55bb3eb1-6010-4876-8527-4acf950d210b",
|
||
|
|
"indicator--55bb3eb1-f958-47c4-8315-4ec9950d210b",
|
||
|
|
"indicator--55bb3eb1-bea4-41ff-8197-4a5e950d210b",
|
||
|
|
"indicator--55bb3eb2-48e8-4606-9062-4e9f950d210b",
|
||
|
|
"indicator--55bb3eb2-9c74-4920-a128-4624950d210b",
|
||
|
|
"indicator--55bb3eb2-3e28-44f2-beaf-4947950d210b",
|
||
|
|
"indicator--55bb3eb2-bb5c-4784-b9f7-425c950d210b",
|
||
|
|
"indicator--55bb3eb2-f240-4a40-801d-4b91950d210b",
|
||
|
|
"indicator--55bb3eb2-1f84-4fb5-8d59-45a4950d210b",
|
||
|
|
"indicator--55bb3eb2-0ce8-4ebc-a72a-4f7a950d210b",
|
||
|
|
"indicator--55bb3eb3-6760-4d9c-96f8-4198950d210b",
|
||
|
|
"indicator--55bb3eb3-0b08-4db1-83cb-420d950d210b",
|
||
|
|
"indicator--55bb3eb3-1588-4fb3-b59b-438b950d210b",
|
||
|
|
"indicator--55bb3eb3-63b0-4b72-ab1d-4254950d210b",
|
||
|
|
"indicator--55bb3eb3-1db8-4d39-851d-4ac7950d210b",
|
||
|
|
"indicator--55bb3eb3-e6fc-4a17-bc0c-4489950d210b",
|
||
|
|
"indicator--55bb3eb3-9eb4-481b-a92b-4f93950d210b",
|
||
|
|
"indicator--55bb3eb4-631c-4a47-b6ac-41b2950d210b",
|
||
|
|
"indicator--55bb3eb4-f198-49fa-95cc-433c950d210b",
|
||
|
|
"indicator--55bb3eb4-5c48-4c34-9ef5-40ad950d210b",
|
||
|
|
"indicator--55bb3eb4-dcd8-4bc1-9cfd-400d950d210b",
|
||
|
|
"indicator--55bb3eb4-d554-4341-9961-49e3950d210b",
|
||
|
|
"indicator--55bb3eb4-6f6c-4ddb-b7c7-4063950d210b",
|
||
|
|
"indicator--55bb3eb4-f598-4a34-a72b-4283950d210b",
|
||
|
|
"indicator--55bb3eb5-4514-4732-b264-4dcf950d210b",
|
||
|
|
"indicator--55bb3eb5-29a4-4f77-90d6-4675950d210b",
|
||
|
|
"indicator--55bb3eb5-e724-4888-aa5a-44c1950d210b",
|
||
|
|
"indicator--55bb3eb5-bbf0-46ed-91fc-42c7950d210b",
|
||
|
|
"indicator--55bb3eb5-6bc4-4ef7-bbb6-4328950d210b",
|
||
|
|
"indicator--55bb3eb5-ed5c-431a-8c73-4289950d210b",
|
||
|
|
"indicator--55bb3eb5-6298-409a-b6f9-4cf4950d210b",
|
||
|
|
"indicator--55bb3eb6-91a8-44b6-b199-4d99950d210b",
|
||
|
|
"indicator--55bb3eb6-f658-4d9f-8fbe-48ca950d210b",
|
||
|
|
"indicator--55bb3eb6-5dc4-4fce-a0d2-4d5b950d210b",
|
||
|
|
"indicator--55bb3eb6-9bec-4fc8-a4f6-40b1950d210b",
|
||
|
|
"indicator--55bb3eb6-89dc-4e0d-af49-48f1950d210b",
|
||
|
|
"indicator--55bb3eb6-6188-4406-a5f1-43c0950d210b",
|
||
|
|
"indicator--55bb3eb6-2354-4b8a-85a0-4404950d210b",
|
||
|
|
"indicator--55bb3eb6-1954-4824-a281-4633950d210b",
|
||
|
|
"indicator--55bb3eb7-55ac-4b3f-8293-42d4950d210b",
|
||
|
|
"indicator--55bb3eb7-ce08-4f77-9b58-44f9950d210b",
|
||
|
|
"indicator--55bb3eb7-6304-4659-b849-44a8950d210b",
|
||
|
|
"indicator--55bb3eb7-7370-4d6d-a2d0-42de950d210b",
|
||
|
|
"indicator--55bb3eb7-1340-43cc-93f0-4527950d210b",
|
||
|
|
"indicator--55bb3eb7-089c-4e52-95db-450b950d210b",
|
||
|
|
"indicator--55bb3eb7-a8d0-4ced-afea-4c95950d210b",
|
||
|
|
"indicator--55bb3eb8-c200-472f-b86e-4559950d210b",
|
||
|
|
"indicator--55bb3eb8-84d4-4d0e-878f-44dd950d210b",
|
||
|
|
"indicator--55bb3eb8-4a88-419d-841b-4810950d210b",
|
||
|
|
"indicator--55bb3eb8-406c-481e-b46e-4895950d210b",
|
||
|
|
"indicator--55bb3eb8-fef4-4092-841e-487e950d210b",
|
||
|
|
"indicator--55bb3eb8-727c-4613-9c06-418b950d210b",
|
||
|
|
"indicator--55bb3eb8-9654-4eb2-92b1-476d950d210b",
|
||
|
|
"indicator--55bb3eb9-fac4-4004-b29f-4c8d950d210b",
|
||
|
|
"indicator--55bb3eb9-b524-4e5f-99e9-4b44950d210b",
|
||
|
|
"indicator--55bb3eb9-b958-45d4-a471-45f8950d210b",
|
||
|
|
"indicator--55bb3eb9-1570-45b7-ae9b-40cd950d210b",
|
||
|
|
"indicator--55bb3eb9-f52c-4dbf-90a3-4e7c950d210b",
|
||
|
|
"indicator--55bb3eb9-539c-4c0c-bb11-4841950d210b",
|
||
|
|
"indicator--55bb3eb9-c48c-46e8-9141-4b18950d210b",
|
||
|
|
"indicator--55bb3eba-7d1c-4dc5-8830-4c2c950d210b",
|
||
|
|
"indicator--55bb3eba-2db8-492b-aa16-4fd9950d210b",
|
||
|
|
"indicator--55bb3eba-e984-4ffb-ad3f-4e79950d210b",
|
||
|
|
"indicator--55bb3eba-dc64-47b0-a0d5-4e39950d210b",
|
||
|
|
"indicator--55bb3eba-efd4-46a6-9d91-4cdf950d210b",
|
||
|
|
"indicator--55bb3eba-906c-42ad-acda-450c950d210b",
|
||
|
|
"indicator--55bb3eba-54f4-4c4e-91a6-44a9950d210b",
|
||
|
|
"indicator--55bb3eba-020c-4d92-8cfe-41c6950d210b",
|
||
|
|
"indicator--55bb3ebb-54e8-4c21-8fbb-44d3950d210b",
|
||
|
|
"indicator--55bb3ebb-a034-4cae-a636-4df2950d210b",
|
||
|
|
"indicator--55bb3ebb-8fb4-4228-8802-4b58950d210b",
|
||
|
|
"indicator--55bb3ebb-2150-4d30-a6bd-4d22950d210b",
|
||
|
|
"indicator--55bb3ebb-8bdc-40ed-bc9e-4de3950d210b",
|
||
|
|
"indicator--55bb3ebb-e304-483a-a0b7-4764950d210b",
|
||
|
|
"indicator--55bb3ebb-3c20-4cdc-8d9b-4668950d210b",
|
||
|
|
"indicator--55bb3ebc-ce04-418f-83b0-46b4950d210b",
|
||
|
|
"indicator--55bb3ebc-6838-4d5f-949f-4cea950d210b",
|
||
|
|
"indicator--55bb3ebc-ca50-4e55-bbbc-4fef950d210b",
|
||
|
|
"indicator--55bb3ebc-5b00-4876-9a64-46e7950d210b",
|
||
|
|
"indicator--55bb3ebc-88b8-4fe7-8d54-4363950d210b",
|
||
|
|
"indicator--55bb3ebc-db0c-440f-a709-4470950d210b",
|
||
|
|
"indicator--55bb3ebc-cacc-4f96-a728-461a950d210b",
|
||
|
|
"indicator--55bb3ebd-44dc-48d1-91ac-4708950d210b",
|
||
|
|
"indicator--55bb3ebd-791c-400c-ad02-4da6950d210b",
|
||
|
|
"indicator--55bb3ebd-e428-4d0f-85b4-4693950d210b",
|
||
|
|
"indicator--55bb3ebd-a378-4131-9f5a-44dd950d210b",
|
||
|
|
"indicator--55bb3ebd-f030-4014-aae6-43e7950d210b",
|
||
|
|
"indicator--55bb3ebd-2a4c-4ba2-b919-4b9c950d210b",
|
||
|
|
"indicator--55bb3ebd-cd7c-4203-b34b-4fd0950d210b",
|
||
|
|
"indicator--55bb3ebd-6044-4377-8864-4e2c950d210b",
|
||
|
|
"indicator--55bb3ebe-eeb4-4b80-b503-4b0f950d210b",
|
||
|
|
"indicator--55bb3ebe-04bc-47b4-81fb-420d950d210b",
|
||
|
|
"indicator--55bb3ebe-74c0-46c3-9f06-4ccd950d210b",
|
||
|
|
"indicator--55bb3ebe-d204-483c-adeb-454c950d210b",
|
||
|
|
"indicator--55bb3ebe-8fc4-469b-8f16-45b3950d210b",
|
||
|
|
"indicator--55bb3ebe-f770-4cea-9eb0-40aa950d210b",
|
||
|
|
"indicator--55bb3ebe-25b0-4c29-b78b-49b7950d210b",
|
||
|
|
"indicator--55bb3ebf-13a0-4551-ace7-4df8950d210b",
|
||
|
|
"indicator--55bb3ebf-8e94-4608-ba25-487b950d210b",
|
||
|
|
"indicator--55bb3ebf-134c-4891-b8dd-45a8950d210b",
|
||
|
|
"indicator--55bb3ebf-ff88-4d0e-ba2f-4f1e950d210b",
|
||
|
|
"indicator--55bb3ebf-7200-4f13-bac6-482a950d210b",
|
||
|
|
"indicator--55bb3ebf-fbcc-4565-9dc3-450e950d210b",
|
||
|
|
"indicator--55bb3ebf-06e4-4af2-8d99-42c0950d210b",
|
||
|
|
"indicator--55bb3ec0-c120-4fd5-965a-43a8950d210b",
|
||
|
|
"indicator--55bb3ec0-ce90-446b-9cdd-45bf950d210b",
|
||
|
|
"indicator--55bb3ec0-c644-44fc-b26a-414f950d210b",
|
||
|
|
"indicator--55bb3ec0-08b8-4f8e-ad20-4a76950d210b",
|
||
|
|
"indicator--55bb3ec0-5acc-4b18-b20a-4923950d210b",
|
||
|
|
"indicator--55bb3ec0-0cd4-437a-8699-486c950d210b",
|
||
|
|
"indicator--55bb3ec0-b57c-4a59-9b09-4b1a950d210b",
|
||
|
|
"indicator--55bb3ec1-40fc-4309-8e67-4dc1950d210b",
|
||
|
|
"indicator--55bb3ec1-1f4c-4c1d-ae91-4e43950d210b",
|
||
|
|
"indicator--55bb3ec1-cd2c-4b56-8d3b-42c6950d210b",
|
||
|
|
"indicator--55bb3ec1-c1c0-4efc-a007-4d67950d210b",
|
||
|
|
"indicator--55bb3ec1-c290-40bb-99ce-434c950d210b",
|
||
|
|
"indicator--55bb3ec1-30a0-4cd4-9be6-4000950d210b",
|
||
|
|
"indicator--55bb3ec1-2a88-4594-8430-4998950d210b",
|
||
|
|
"indicator--55bb3ec2-2648-40e9-a064-438b950d210b",
|
||
|
|
"indicator--55bb3ec2-0ca8-4c3e-b510-48a9950d210b",
|
||
|
|
"indicator--55bb3ec2-d490-45a1-91b4-4cf9950d210b",
|
||
|
|
"indicator--55bb3ec2-022c-4aea-9dc8-43d8950d210b",
|
||
|
|
"indicator--55bb3ec2-9f80-4c4c-9bde-49af950d210b",
|
||
|
|
"indicator--55bb3ec2-4314-4d76-b13a-4652950d210b",
|
||
|
|
"indicator--55bb3ec2-35b4-40bd-b986-4164950d210b",
|
||
|
|
"indicator--55bb3ec2-5bc0-4e81-8c75-4769950d210b",
|
||
|
|
"indicator--55bb3ec3-9640-462b-84a5-4af2950d210b",
|
||
|
|
"indicator--55bb3ec3-1b1c-42f5-9577-4093950d210b",
|
||
|
|
"indicator--55bb3ec3-8458-4994-9184-4ac4950d210b",
|
||
|
|
"indicator--55bb3ec3-4600-49b4-b4a9-426b950d210b",
|
||
|
|
"indicator--55bb3ec3-28dc-49d2-b7ee-468f950d210b",
|
||
|
|
"indicator--55bb3ec3-21bc-4ec5-a8f1-4926950d210b",
|
||
|
|
"indicator--55bb3ec3-5fc0-48a1-a142-40e5950d210b",
|
||
|
|
"indicator--55bb3ec4-6544-46ea-91ed-4256950d210b",
|
||
|
|
"indicator--55bb3ec4-449c-43ce-a947-43b1950d210b",
|
||
|
|
"indicator--55bb3ec4-3500-431a-8d90-431c950d210b",
|
||
|
|
"indicator--55bb3ec4-20d8-41cb-a8bb-4568950d210b",
|
||
|
|
"indicator--55bb3ec4-6cc8-4ebc-9b21-45ec950d210b",
|
||
|
|
"indicator--55bb3ec4-1b0c-44ca-8a04-4f90950d210b",
|
||
|
|
"indicator--55bb3ec4-72fc-4368-b7cd-451c950d210b",
|
||
|
|
"indicator--55bb3ec5-117c-4be0-b8a2-42fe950d210b",
|
||
|
|
"indicator--55bb3ec5-b230-48dc-b36f-40d7950d210b",
|
||
|
|
"indicator--55bb3ec5-4c88-476c-a654-4bf8950d210b",
|
||
|
|
"indicator--55bb3ec5-302c-4416-9dad-45bb950d210b",
|
||
|
|
"indicator--55bb3ec5-a200-4143-8425-418b950d210b",
|
||
|
|
"indicator--55bb3ec5-92ec-4a17-81c4-4016950d210b",
|
||
|
|
"indicator--55bb3ec5-9590-4587-85e7-472b950d210b",
|
||
|
|
"indicator--55bb3ec5-7da4-47f4-9a9b-4b43950d210b",
|
||
|
|
"indicator--55bb3ec6-51cc-41c2-ada5-4c37950d210b",
|
||
|
|
"indicator--55bb3ec6-8458-422a-87ae-471b950d210b",
|
||
|
|
"indicator--55bb3ec6-1634-43cc-89c8-4bd4950d210b",
|
||
|
|
"indicator--55bb3ec6-34d4-4e04-8625-49be950d210b",
|
||
|
|
"indicator--55bb3ec6-ae14-4373-807b-4cc8950d210b",
|
||
|
|
"indicator--55bb3ec6-0f40-4ea7-a82c-4750950d210b",
|
||
|
|
"indicator--55bb3ec6-4768-4e0c-ab9a-44bb950d210b",
|
||
|
|
"indicator--55bb3ec7-a0e8-44a5-9090-493c950d210b",
|
||
|
|
"indicator--55bb3ec7-10c8-4f9b-8060-4297950d210b",
|
||
|
|
"indicator--55bb3ec7-2244-4227-945e-47a5950d210b",
|
||
|
|
"indicator--55bb3ec7-f110-4ac8-ab05-4aa0950d210b",
|
||
|
|
"indicator--55bb3ec7-2720-4bc3-ad6e-4613950d210b",
|
||
|
|
"indicator--55bb3ec7-64c0-42a8-a411-4aa4950d210b",
|
||
|
|
"indicator--55bb3ec7-22c0-4a56-a345-41db950d210b",
|
||
|
|
"indicator--55bb3ec8-7fa0-4e55-808b-42a6950d210b",
|
||
|
|
"indicator--55bb3ec8-0df8-4068-90e3-417f950d210b",
|
||
|
|
"indicator--55bb3ec8-734c-46f6-9004-4542950d210b",
|
||
|
|
"indicator--55bb3ec8-07e4-4890-a3f5-42d7950d210b",
|
||
|
|
"indicator--55bb3ec8-0128-4a19-8e35-415c950d210b",
|
||
|
|
"indicator--55bb3ec8-2f8c-4249-a194-451f950d210b",
|
||
|
|
"indicator--55bb3ec8-cd20-4d25-b584-4034950d210b",
|
||
|
|
"indicator--55bb3ec9-5b1c-4635-91d3-4f82950d210b",
|
||
|
|
"indicator--55bb3ec9-94d4-4d43-97b5-4703950d210b",
|
||
|
|
"indicator--55bb4016-84d8-4936-ba45-490f950d210b",
|
||
|
|
"indicator--55bb4017-9f80-4607-8d21-4d60950d210b",
|
||
|
|
"indicator--55bb4017-c9b4-4513-b3b7-4d93950d210b",
|
||
|
|
"indicator--55bb4017-dd64-4bd5-b876-44db950d210b",
|
||
|
|
"indicator--55bb4017-9c90-4008-ae9d-4857950d210b",
|
||
|
|
"indicator--55bb4017-ead8-4614-8982-47ec950d210b",
|
||
|
|
"indicator--55bb4017-cb9c-4e28-ac52-4dce950d210b",
|
||
|
|
"indicator--55bb4017-c04c-4dad-9527-4d68950d210b",
|
||
|
|
"indicator--55bb4018-1b6c-422d-8435-4049950d210b",
|
||
|
|
"indicator--55bb4018-de80-49aa-800d-4ea4950d210b",
|
||
|
|
"indicator--55bb4018-a0f0-44dc-8c4c-4a77950d210b",
|
||
|
|
"indicator--55bb4018-ed3c-4374-aaa6-4f26950d210b",
|
||
|
|
"indicator--55bb4018-40e4-4385-8bdf-4929950d210b",
|
||
|
|
"indicator--55bb4018-e748-42d9-96bc-4d6f950d210b",
|
||
|
|
"indicator--55bb4018-ae98-4a9f-9ee7-430d950d210b",
|
||
|
|
"indicator--55bb4018-b918-4567-ae33-491c950d210b",
|
||
|
|
"indicator--55bb4019-67dc-4f6a-8c3d-442f950d210b",
|
||
|
|
"indicator--55bb4019-e630-464b-8abd-47ef950d210b",
|
||
|
|
"indicator--55bb4019-741c-4236-8b44-42d1950d210b",
|
||
|
|
"indicator--55bb4019-e74c-4469-9c9f-4b8a950d210b",
|
||
|
|
"indicator--55bb4019-885c-486a-b8fe-4923950d210b",
|
||
|
|
"indicator--55bb4019-d204-40ef-9af3-4816950d210b",
|
||
|
|
"indicator--55bb4019-88fc-4781-8f45-4c93950d210b",
|
||
|
|
"indicator--55bb401a-e16c-473c-82bf-41fb950d210b",
|
||
|
|
"indicator--55bb401a-1ac0-4139-8217-4d66950d210b",
|
||
|
|
"indicator--55bb401a-8fb4-4ad8-b878-4314950d210b",
|
||
|
|
"indicator--55bb401a-8720-4237-a30c-4741950d210b",
|
||
|
|
"indicator--55bb401a-f6c0-4e45-a3eb-43ca950d210b",
|
||
|
|
"indicator--55bb401a-f5fc-4b7f-8a94-4616950d210b",
|
||
|
|
"indicator--55bb401a-3a80-4574-afeb-462c950d210b",
|
||
|
|
"indicator--55bb401b-397c-4f6c-80f0-4a79950d210b",
|
||
|
|
"indicator--55bb401b-1e8c-4b11-b155-4eec950d210b",
|
||
|
|
"indicator--55bb401b-c6c8-4817-a332-4758950d210b",
|
||
|
|
"indicator--55bb401b-60b4-41f8-b3e6-4cd5950d210b",
|
||
|
|
"indicator--55bb401b-4bbc-4909-8413-4e86950d210b",
|
||
|
|
"indicator--55bb401b-033c-48e6-ab30-4a55950d210b",
|
||
|
|
"indicator--55bb401b-0e30-4162-a083-43b1950d210b",
|
||
|
|
"indicator--55bb401c-1240-4adb-a8db-4c22950d210b",
|
||
|
|
"indicator--55bb401c-82e8-4e8d-bc5e-4539950d210b",
|
||
|
|
"indicator--55bb401c-e454-44c4-bc73-45b8950d210b",
|
||
|
|
"indicator--55bb401c-3eb8-48ca-bb83-4aec950d210b",
|
||
|
|
"indicator--55bb401c-4308-44ff-b9e6-4b44950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"Threat-Report",
|
||
|
|
"misp:tool=\"MISP-STIX-Converter\"",
|
||
|
|
"type:OSINT"
|
||
|
|
],
|
||
|
|
"object_marking_refs": [
|
||
|
|
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55bb3919-f5f4-4112-90fb-419d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:00:09.000Z",
|
||
|
|
"modified": "2015-07-31T09:00:09.000Z",
|
||
|
|
"first_observed": "2015-07-31T09:00:09Z",
|
||
|
|
"last_observed": "2015-07-31T09:00:09Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"url--55bb3919-f5f4-4112-90fb-419d950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"link\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "url",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "url--55bb3919-f5f4-4112-90fb-419d950d210b",
|
||
|
|
"value": "https://www.rooksecurity.com/resources/downloads/"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55bb3919-5e3c-4275-9953-4568950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:00:09.000Z",
|
||
|
|
"modified": "2015-07-31T09:00:09.000Z",
|
||
|
|
"first_observed": "2015-07-31T09:00:09Z",
|
||
|
|
"last_observed": "2015-07-31T09:00:09Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"url--55bb3919-5e3c-4275-9953-4568950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"link\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "url",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "url--55bb3919-5e3c-4275-9953-4568950d210b",
|
||
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2015/07/Package_1.zip"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55bb3919-4efc-49de-8e60-47b4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:00:09.000Z",
|
||
|
|
"modified": "2015-07-31T09:00:09.000Z",
|
||
|
|
"first_observed": "2015-07-31T09:00:09Z",
|
||
|
|
"last_observed": "2015-07-31T09:00:09Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"url--55bb3919-4efc-49de-8e60-47b4950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"link\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "url",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "url--55bb3919-4efc-49de-8e60-47b4950d210b",
|
||
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2016/07/ht_malicious_windows_files.ioc_.zip"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55bb391a-bdd4-409f-9b67-4282950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:00:10.000Z",
|
||
|
|
"modified": "2015-07-31T09:00:10.000Z",
|
||
|
|
"first_observed": "2015-07-31T09:00:10Z",
|
||
|
|
"last_observed": "2015-07-31T09:00:10Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"url--55bb391a-bdd4-409f-9b67-4282950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"link\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "url",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "url--55bb391a-bdd4-409f-9b67-4282950d210b",
|
||
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2015/07/RookMilanoInstaller.zip"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55bb391a-9298-4e04-8168-488e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:00:10.000Z",
|
||
|
|
"modified": "2015-07-31T09:00:10.000Z",
|
||
|
|
"first_observed": "2015-07-31T09:00:10Z",
|
||
|
|
"last_observed": "2015-07-31T09:00:10Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"url--55bb391a-9298-4e04-8168-488e950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"link\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "url",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "url--55bb391a-9298-4e04-8168-488e950d210b",
|
||
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2015/07/Package_1.0.1.zip"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "x-misp-attribute",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "x-misp-attribute--55bb3927-0c70-41bd-8fdc-4274950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:00:23.000Z",
|
||
|
|
"modified": "2015-07-31T09:00:23.000Z",
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"text\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
],
|
||
|
|
"x_misp_category": "External analysis",
|
||
|
|
"x_misp_type": "text",
|
||
|
|
"x_misp_value": "Hacking Team"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55bb39c4-47b0-4b79-a585-4307950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:03:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:03:00.000Z",
|
||
|
|
"first_observed": "2015-07-31T09:03:00Z",
|
||
|
|
"last_observed": "2015-07-31T09:03:00Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"url--55bb39c4-47b0-4b79-a585-4307950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"link\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "url",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "url--55bb39c4-47b0-4b79-a585-4307950d210b",
|
||
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2015/07/HT_Malware_Observations.pdf"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55bb39c4-6838-418d-8dc2-4899950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:03:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:03:00.000Z",
|
||
|
|
"first_observed": "2015-07-31T09:03:00Z",
|
||
|
|
"last_observed": "2015-07-31T09:03:00Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"url--55bb39c4-6838-418d-8dc2-4899950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"link\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "url",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "url--55bb39c4-6838-418d-8dc2-4899950d210b",
|
||
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2015/07/All_HT_Files_Analysis_Notes.xlsx"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e11-bf10-4140-bdf3-41ff950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:21:21.000Z",
|
||
|
|
"modified": "2015-07-31T09:21:21.000Z",
|
||
|
|
"pattern": "[alert tcp $EXTERNAL_NET any >\r\n$HOME_NET any (msg:\"CVE20155122:\r\nAdobe Flash Exploit (Memory Corruption)\"\u00cd\u00be\r\nflow:from_server,established\u00cd\u00be content:\"|43 57 53|\"\u00cd\u00be content:\"|c9 66\r\n3d 21 24 49 68 69 69 39 12 61 04 4a 49 4e|\"\u00cd\u00be offset:127\u00cd\u00be sid:9931892\u00cd\u00be\r\nrev:2\u00cd\u00be)]",
|
||
|
|
"pattern_type": "snort",
|
||
|
|
"valid_from": "2015-07-31T09:21:21Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Network activity"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"snort\"",
|
||
|
|
"misp:category=\"Network activity\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--55bb3e5a-66f4-4b4b-a87e-4c5e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:22:34.000Z",
|
||
|
|
"modified": "2015-07-31T09:22:34.000Z",
|
||
|
|
"first_observed": "2015-07-31T09:22:34Z",
|
||
|
|
"last_observed": "2015-07-31T09:22:34Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"file--55bb3e5a-66f4-4b4b-a87e-4c5e950d210b",
|
||
|
|
"artifact--55bb3e5a-66f4-4b4b-a87e-4c5e950d210b"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"attachment\"",
|
||
|
|
"misp:category=\"External analysis\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "file",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "file--55bb3e5a-66f4-4b4b-a87e-4c5e950d210b",
|
||
|
|
"name": "hackingteam_openIOC1-0.ioc.xml",
|
||
|
|
"content_ref": "artifact--55bb3e5a-66f4-4b4b-a87e-4c5e950d210b"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "artifact",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "artifact--55bb3e5a-66f4-4b4b-a87e-4c5e950d210b",
|
||
|
|
"payload_bin": "PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXMtYXNjaWkiPz4KPGlvYyB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp4c2Q9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiB4bWxucz0iaHR0cDovL3NjaGVtYXMubWFuZGlhbnQuY29tLzIwMTAvaW9jIiBpZD0iN2EzNjU4NDItOTgyZi00M2I2LTk5M2YtMmM3ZGI1ZTQ4N2JjIiBsYXN0LW1vZGlmaWVkPSIyMDE1LTA3LTIxVDExOjIwOjIwIj4KICA8c2hvcnRfZGVzY3JpcHRpb24+SGFja2luZyBUZWFtIE1hbGljaW91cyBJbmRpY2F0b3JzPC9zaG9ydF9kZXNjcmlwdGlvbj4KICA8ZGVzY3JpcHRpb24+Q29udGFpbnMgZXhlY3V0YWJsZSBhbmQgbGlicmFyeSBmaWxlcyBoYXNoZXMuIFRoZXNlIGZpbGVzIGhhdmUgYmVlbiBhbmFseXplZCBieSBSb29rIFNlY3VyaXR5LCBhbmQgaGF2ZSBiZWVuIGRlZW1lZCB0byBoYXZlIHRoZSBoaWdoZXN0IGxpa2VsaWhvb2Qgb2YgbWFsaWNpb3VzIHVzZS4gVGhlc2UgZmlsZXMgaGF2ZSBiZWVuIGFuYWx5emVkIHVzaW5nIGR5bmFtaWMsIHN0YXRpYyBhbmQgbWFudWFsIGFuYWx5c2lzLiBXZSBhbHNvIGNvbXBhcmVkIHRoZXNlIGZpbGVzIGFnYWluc3QgVmlydXNUb3RhbCBhbmQgS2FzcGVyc2t5IHdoaXRlbGlzdGluZy4gSG9zdHMgY29udGFpbmluZyBhbnkgb2YgdGhlIGZpbGVzIGZvdW5kIGluIHRoaXMgbGlzdCBzaG91bGQgYmUgY29uc2lkZXJlZCBjb21wcm9taXNlZC48L2Rlc2NyaXB0aW9uPgogIDxrZXl3b3Jkcy8+CiAgPGF1dGhvcmVkX2J5PlJvb2sgU2VjdXJpdHk8L2F1dGhvcmVkX2J5PgogIDxhdXRob3JlZF9kYXRlPjIwMTUtMDctMjFUMTE6MjA6MjA8L2F1dGhvcmVkX2RhdGU+ICAKICA8bGlua3MvPgogIDxkZWZpbml0aW9uPgogICAgPEluZGljYXRvciBvcGVyYXRvcj0iT1IiIGlkPSI3ZGEwY2I1Yy0yZDczLTQ0YTMtYTY1ZC01MzkyZGVmMGYxZGUiPiAgICAKICAgIDxJbmRpY2F0b3Igb3BlcmF0b3I9Ik9SIiBpZD0iN2VjMzJhMDUtNTNiZS00ZjQ5LTg2OWEtZGE3NThmMjczZTEzIj4KICAgICAgICA8SW5kaWNhdG9ySXRlbSBpZD0iMDNmZDYwOTYtMTJhYi00NTM4LWJlMDgtNzJlZTRmYzNjYTkxIiBjb25kaXRpb249ImNvbnRhaW5zIiBwcmVzZXJ2ZS1jYXNlPSJmYWxzZSIgbmVnYXRlPSJmYWxzZSI+CiAgICAgICAgICAgIDxDb250ZXh0IGRvY3VtZW50PSJGaWxlSXRlbSIgc2VhcmNoPSJGaWxlSXRlbS9GaWxlTmFtZSIgdHlwZT0ibWlyIi8+CiAgICAgICAgICAgIDxDb250ZW50IHR5cGU9InN0cmluZyI+RmlsZW5hbWU8L0NvbnRlbnQ+CiAgICAgICAgPC9JbmRpY2F0b3JJdGVtPgogICAgICAgIDxJbmRpY2F0b3JJdGVtIGlkPSJmZTQ2NTBlMi0xZGQzLTRmMTItYWQxMS0wYmVhMDQ3ZGM0ODMiIGNvbmRpdGlvbj0iY29udGFpbnMiIHByZXNlcnZlLWNhc2U9ImZhbHNlIiBuZWdhdGU9ImZhbHNlIj4KICAgICAgICAgICAgPENvbnRleHQgZG9jdW1lbnQ9IkZpbGVJdGVtIiBzZWFyY2g9IkZpbGVJdGVtL01kNXN1bSIgdHlwZT0ibWlyIi8+CiAgICAgICAgICAgIDxDb250ZW50IHR5cGU9Im1kNSI+TUQ1PC9Db250ZW50PgogICAgICAgIDwvSW5kaWNhdG9ySXRlbT4KICAgICAgICA8SW5kaWNhdG9ySXRlbSBpZD0iM2QwZDM0OGYtNzRkMS00YmVkLThmNzUtZTUzZmIyYTk3M2Y4IiBjb25kaXRpb249ImNvbnRhaW5zIiBwcmVzZXJ2ZS1jYXNlPSJmYWxzZSIgbmVnYXRlPSJmYWxzZSI+CiAgICAgICAgICAgIDxDb250ZXh0IGRvY3VtZW50PSJGaWxlSXRlbSIgc2VhcmNoPSJGaWxlSXRlbS9TaGEyNTZzdW0iIHR5cGU9Im1pciIvPgogICAgICAgICAgICA8Q29udGVudCB0eXBlPSJzaGEyNTYiPkhhc2ggKFNIQTI1Nik8L0NvbnRlbnQ+CiAgICAgICAgPC9JbmRpY2F0b3JJdGVtPgogICAgICAgIDxJbmRpY2F0b3JJdGVtIGlkPSJkNDc0NDE2OS1kYzcwLTRjNDQtYTU3Yi0yZDIyYmMxZWM0ODUiIGNvbmRpdGlvbj0iY29udGFpbnMiIHByZXNlcnZlLWNhc2U9ImZhbHNlIiBuZWdhdGU9ImZhbHNlIj4KICAgICAgICAgICAgPENvbnRleHQgZG9jdW1lbnQ9IkZpbGVJdGVtIiBzZWFyY2g9IkZpbGVJdGVtL1NoYTFzdW0iIHR5cGU9Im1pciIvPgogICAgICAgICAgICA8Q29udGVudCB0eXBlPSJzaGExIj5TSEEgMTwvQ29udGVudD4KICAgICAgICA8L0luZGljYXRvckl0ZW0+CiAgICA8L0luZGljYXRvcj4gICAgIAogICAgPEluZGljYXRvciBvcGVyYXRvcj0iT1IiIGlkPSI5ZTFmZjIyMi1mYmFmLTRiZjUtYTI3ZS1kN2JkNmMwYjdkM2MiPgogICAgICAgIDxJbmRpY2F0b3JJdGVtIGlkPSIzZGU2ZTVhNS0wZDdkLTRkNTgtODVlNi03ZTIxYjkyOWIyODAiIGNvbmRpdGlvbj0iY29udGFpbnMiIHByZXNlcnZlLWNhc2U9ImZhbHNlIiBuZWdhdGU9ImZhbHNlIj4KICAgICAgICAgICAgPENvbnRleHQgZG9jdW1lbnQ9IkZpbGVJdGVtIiBzZWFyY2g9IkZpbGVJdGVtL0ZpbGVOYW1lIiB0eXBlPSJtaXIiLz4KICAgICAgICAgICAgPENvbnRlbnQgdHlwZT0ic3RyaW5nIj5mYWtlZG9jX2ZpbmFsLmV4ZTwvQ29udGVudD4KICAgICAgICA8L0luZGljYXRvckl0ZW0+CiAgICAgICAgPEluZGljYXRvckl0ZW0gaWQ9ImNmNjRiNGI1LTlmYTQtNDQ0ZS1iODBhLTU0NDhmZTlmZmM5OCIgY29uZGl0aW9uPSJjb250YWlucyIgcHJlc2VydmUtY2FzZT0iZmFsc2UiIG5lZ2F0ZT0iZmFsc2UiPgogICAgICAgICAgICA8Q29udGV4dCBkb2N1bWVudD0iRmlsZUl0ZW0iIHNlYXJjaD0iRmlsZUl0ZW0vTWQ1c3VtIiB0eXBlPSJtaXIiLz4KICAgICAgICAgICAgPENvbnRlbnQgdHlwZT0ibWQ1Ij4yYTI1NzhkN2YyMmQzYjJlZTUyYzVkNDZiYjVmZGYwNTwvQ29udGVudD4KICAgICAgICA8L0luZGljYXRvckl0ZW0+CiAgICAgICAgPEluZGljYXRvckl0ZW0gaWQ9IjFkMzc3ZGIxLTAxZTgtNGVjMC1hNThmLTM3NWUzMzRlNTBkYiIgY29uZGl0aW9uPSJjb250YWlucyIgcHJlc2VydmUtY2FzZT0iZmFsc2UiIG5lZ2F0ZT0iZmFsc2UiPgogICAgICAgICAgICA8Q29udGV4dCBkb2N1bWVudD0iRmlsZUl0ZW0iIHNlYXJjaD0
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8c-e68c-44e3-8156-417c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:24.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:24.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0097a9fba6b0bcb09e9473816e51c2c8e48284ff']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:24Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8c-0bb8-4a5d-805b-4700950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:24.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:24.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2a2578d7f22d3b2ee52c5d46bb5fdf05']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:24Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8d-830c-4dd5-80a2-49ce950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:25.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:25.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '4d9ced2ee7d979055d33564cfa5a67773e34f3e51d615f162003311c76f51bdb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:25Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8d-bfc8-4570-8ce6-4f8d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:25.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:25.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0540e5eacd37ea3285f8a239dd72e3e7e4faf33e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:25Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8d-145c-41ba-99c2-46da950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:25.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:25.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f713c1e740d67292db2d96c7755a63bc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:25Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8d-cdc8-4cfe-8ca9-445a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:25.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:25.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '9f3673b51a622dbe8ea5f92ad37ff12ed0a03ff5c30a9ca20575dca08c624fa3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:25Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8d-4a7c-4158-9c7a-49ba950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:25.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:25.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '076b09d71c5c55e7ae6f044791142470799648bc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:25Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8d-b38c-4e40-b38d-427c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:25.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:25.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'dfd6d9d5d7074e3d822ee7002a2538b6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:25Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8d-6934-4977-92d5-4d19950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:25.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:25.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd70699e40511f4dd459420751e66a2564f050ab17b101ca9955423de2c579fa6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:25Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8e-efd8-4d2a-b870-4bf0950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:26.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:26.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0837b3eed579123555ae09244b3f23aded72b9b4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:26Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8e-2670-4c78-97ab-4237950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:26.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:26.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5c1215ec7da96f58a1e3e66b60c1d4ed']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:26Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8e-be4c-4def-aeb1-4d9d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:26.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:26.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '2ef643a29808aa6dedeb69165d8682d5a58a95aa68bce856783a2b8dc2d71087']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:26Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8e-c280-46f8-bfa6-481a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:26.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:26.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '09920b2f0d20df022da507ab7b334392f7380cb4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:26Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8e-e84c-4572-9f45-4d24950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:26.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:26.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '4b5d19d8a0bc70b2165144cb9be227e7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:26Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8e-5764-43b3-931a-4522950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:26.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:26.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '8306c3a000636a21275774fcc17cd0bf75d1959bd9ea6bdb272666fda8494649']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:26Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8e-dba8-4660-b2af-4523950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:26.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:26.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '09a77488453f586ac03782a539225487c44c3a30']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:26Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8f-a0c4-45cd-b71e-4f6e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:27.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:27.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '365bf9ae89eebc67a34e09ad07ebf166']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:27Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8f-1e5c-4550-8fc3-46af950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:27.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:27.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '314211107852b35dbf7d2abc54581aadfce1ddf79e1930bb44e37ea4af338541']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:27Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8f-74c8-458d-a3bb-4555950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:27.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:27.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '09b49ee08641e1d18532a67acc09d98a1b708545']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:27Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8f-7ad8-4809-8c2b-4589950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:27.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:27.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '710cdda3bc6ff73c2399d0a718c9fbe8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:27Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8f-c9d8-4b1a-b3a5-44a8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:27.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:27.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '8caa3a2f4c39992952cd2bb38bebadbbee5fb68114500e37832221d4e59aea30']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:27Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8f-43f4-4103-9826-415b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:27.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:27.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0ac7f04dd08120e93ea449b49eb8e557a5a2ef22']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:27Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e8f-4cd4-4265-8418-4907950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:27.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:27.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '94bac050560b074bf7f48dcc282ab7ff']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:27Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e90-8a24-4451-9317-4363950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:28.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:28.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b0d3aad477487039fbe9a33a66bd3654fb17f8af731c965d78977ebeb20392a8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:28Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e90-1e90-45c7-b0a4-4122950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:28.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:28.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0ad4455380b6c2224bf6d0d5112653db2e05ab28']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:28Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e90-6334-40b1-840f-4d3e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:28.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:28.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '37b5ee810eee08eb46da2d4d1710262f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:28Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e90-f49c-4747-a365-4980950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:28.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:28.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f3fc6d8ed53b5be3be601281848d26134fa85ba4737ab69b13a50a3a8dd523cb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:28Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e90-723c-4a12-99d1-4b03950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:28.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:28.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '0e6ebd6d90cc59eb572762afaca548dcc63397d8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:28Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e90-392c-4007-8990-4f68950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:28.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:28.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '0be0c072cf2a885d77886705e24e08d8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:28Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e90-9868-4e17-8609-44bd950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:28.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:28.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b924993e72cc8fd0b505e95cea5e8b09d17d2a15c9d9ebc2b0c32843edcd40ee']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:28Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e91-9e40-4bc1-8d85-41b1950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:29.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:29.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '11662f991e15213c282357723bcc49059f6c55f2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:29Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e91-1528-4e9b-97f9-4ca7950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:29.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:29.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '158105fd8f227ab0a2e3440724520275']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:29Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e91-1f10-4a05-9e2e-4569950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:29.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:29.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd64a0092cf3b55f68c671d462be80241d3a45b75667bb29f624f52aea7f1246f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:29Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e91-9258-4c7f-a861-46a5950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:29.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:29.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '11c87f734bce1fec82087fd16e568472e960fe17']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:29Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e91-ac48-48cf-85f8-4b69950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:29.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:29.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '84964d5410d6c7754e36e7592334df5e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:29Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e91-b3c0-4a8f-832b-429a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:29.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:29.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'da07eca4cd4cccc81d9418fcc796d28bc95756c8d6d4ad9503effd12b6c0aef7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:29Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e91-4648-4af0-973b-4a3b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:29.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:29.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '1351e784ebdffacf0fd143c07581136e94ca2319']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:29Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e92-d7c0-4807-b6b7-40a8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:30.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:30.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '48d638a3194f8740d9f05faf62670ff9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:30Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e92-9c08-4786-8e91-42c3950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:30.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:30.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'fb3b9464e866b35b3d7a3b506f967b32e1c2015e0703780c89993ce6d50a0ea6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:30Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e92-60b4-4e6c-9072-45c2950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:30.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:30.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '13b20e7945eb7342540b5fab2eb2f03063518239']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:30Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e92-aa70-4a5b-be6d-43d6950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:30.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:30.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '0df77ac381a54c34bf3f12d13f516be1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:30Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e92-e9e8-4af2-9714-43cc950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:30.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:30.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5e75e0babe92f1a7691a43641fadb7be84d4d273b8bcc6cce5dfeb5523a6b709']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:30Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e92-a7b0-4015-8830-4331950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:30.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:30.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '158be9f90b5f37590808e0c97323b6476d4c9f9b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:30Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e92-4c0c-4dce-9d03-4477950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:30.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:30.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '38bd6cd2b91810c30ceb661e54032f5c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:30Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e92-d5fc-4f4c-8dd1-443b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:30.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:30.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '92af7c751d9353ceb1b449bb6ea1a29c7a68a5bd2344759ad1c974ac5c63dee6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:30Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e93-5db8-4724-af10-4602950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:31.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:31.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '1b8f53c2ee42fff1f333223e82d3e538792b9778']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:31Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e93-8a28-4ec3-8847-4a90950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:31.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:31.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '309ad3a96832730545d1ff1f4fdd8de2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:31Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e93-3a60-48b2-bfdb-43c6950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:31.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:31.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '0a5c0224092468a4669f04721e291e3e89653d1ecf436c5c4dd7f1f8df4d0ff7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:31Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e93-2874-42bf-a0ee-4e11950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:31.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:31.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '1ba03151aee8276e95666df59e36506a9136634d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:31Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e93-ecd8-45a4-b019-4a2d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:31.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:31.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f7133f6037738c9c0ade22104349e8bc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:31Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e93-7ad4-4652-8682-4e76950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:31.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:31.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3d8a446c2da93d0c909caf9724ad452c66c944cf71f582a9b5002e9b2cc67793']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:31Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e93-69f0-49be-9cbd-4299950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:31.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:31.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '1f78800e17ecf9535eb695b5665f1da4258be70b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:31Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e94-2c84-4595-82bd-400c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:32.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:32.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '432f4e8794a2ea8a64e4c75ea80b790e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:32Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e94-e16c-481e-ab68-4175950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:32.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:32.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd94b971cecd864fe6153ebe94a775157f3cdb69e8ad802eb78cfc0136737c0f2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:32Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e94-debc-4f58-bf8b-4276950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:32.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:32.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '21b5f25b33e6db635ecc245291b092748d075719']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:32Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e94-d544-4ee7-9f69-47d2950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:32.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:32.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '652a5cd27ff8966d26db94bb394ce4d1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:32Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e94-dd84-44d9-8c7d-4424950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:32.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:32.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b6d736a68360253a94cc89bafbfa3141c382079d3e74346b12251da26149d1c3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:32Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e94-8ecc-4e3a-bf6e-4161950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:32.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:32.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '23442e4cee456a1571f65c75e0e53c388e194d7f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:32Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e94-44a0-4e39-8521-4e80950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:32.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:32.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '92a05da3047dd74826e09acc2692fe57']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:32Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e95-7414-4310-9a44-4074950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:33.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:33.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'cfa438d2d1426c983134203329e30ac92a4c5f6170e1687dc287ecf67ef53404']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:33Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e95-4478-406d-ba84-4704950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:33.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:33.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '23ba80af8dfb460b579b46309f4b7f0de53bbdd4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:33Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e95-c56c-47f8-83e6-43e7950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:33.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:33.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'c36d60abed084c6d61741b08ff6681df']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:33Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e95-0f4c-4927-904f-489d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:33.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:33.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a1eae49b5f732a7ceef30fa8aa1218c9c97e6436bfab5555ed79e4b29b0fda83']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:33Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e95-85b4-4393-81e4-44d4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:33.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:33.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '26f87e87c78f075ff69aa7de4f6c50f97f499ab7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:33Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e95-8c64-442e-972b-45c5950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:33.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:33.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'e3bd52648f653b38d75d325f2c205130']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:33Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e95-3e50-4b75-af35-4bee950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:33.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:33.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '79deeb5af79f9a48cbbbb37400b940dc1e709230d0b176669bc1d095c4bedca7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:33Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e95-a21c-4875-973c-4435950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:33.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:33.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '275c5629439be1efa5f586b0bde9f447b85be829']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:33Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e96-7e5c-4209-82b0-47a9950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:34.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:34.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2e6707641e23e18134e93e3c4f51c840']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:34Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e96-007c-4e23-acd6-43a2950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:34.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:34.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '71864e38545034655c934d46f6b50485cb3d605ad39a7c3889f7d3816440bf1c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:34Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e96-7dec-402c-aa3b-473f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:34.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:34.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '28fb3ef8f16da864f44529f1fa09872af6b7e858']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:34Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e96-3fb8-470e-8cd8-4d3e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:34.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:34.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '081b26d9ca74faae821e0b2eb2bb1fc5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:34Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e96-b3ec-4031-bf0f-44fe950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:34.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:34.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '4ae1e35dc83825dc81e886b7597f00781b184be4fa288a8aa7a3c0f62a526387']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:34Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e96-c5b0-4edc-b928-4611950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:34.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:34.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '2f4e851d21c45e9b0a77a9cd9a0d5500a7740395']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:34Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e96-0d38-42ba-8d3f-4cff950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:34.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:34.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '68cd61eefa0e6a7a6b36fb359bdd93ae']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:34Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e97-2d70-4447-bb6c-4415950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:35.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:35.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b785b107632a3b8e9070a5a9a610202b46d916709f6b969b30c5d3375a2f38e7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:35Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e97-14e0-4263-a34e-4339950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:35.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:35.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '2f9a28719745d1f95818c424bef3bd202f4172e9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:35Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e97-74a0-4d90-9f30-43bf950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:35.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:35.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '56fd59bf9f93ab512cfb0822e20dc157']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:35Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e97-f428-4f3f-841a-4a01950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:35.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:35.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f82c4673a15ff6c5806f54811c4e782b595a0a445476c3ccdbdc4cd200bfe36e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:35Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e97-41f0-4f7c-8fd4-4376950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:35.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:35.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '333a5d4082808206eeedd309e02d88e720587e4f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:35Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e97-2874-49d5-9142-42ef950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:35.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:35.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '1fc10a99ce2652ba0ec7bed0f8f05c2c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:35Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e97-f2b4-4873-b2fb-4fd1950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:35.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:35.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f08e6bc6c3a6771f697d4f724bb238f837f61d988c29a2d77dd73cd36a4a38b7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:35Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e98-1cb0-4621-9058-49cd950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:36.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:36.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '33aa87925aaafa5c97df0c4334b3e70b5ce43552']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:36Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e98-bce4-4a6e-8445-4582950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:36.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:36.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '0bb14e2cbce99ac845c62bea9c5d62ba']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:36Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e98-1b38-4c5a-9c1a-4c40950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:36.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:36.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '4f9f7f9b2a3ee884f4aa08c066a458a52f175a78b7748ef4a751543213b92d29']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:36Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e98-f53c-4414-a35f-4884950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:36.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:36.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '3412967b6ff4d2ceece701b899571987b8c5d70c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:36Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e98-91ac-4e3d-9f38-45ed950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:36.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:36.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'd553160f4db53c3ef30bf57aac67811a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:36Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e98-ebf4-40b4-98c4-4167950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:36.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:36.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '2c2a1044acd7d47ade2e74b06fe366fdc1c363297b5292c8a362f34018ae100b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:36Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e98-e344-4bda-a558-4046950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:36.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:36.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '34da42515658486c097b4a16c8e7ab6d3fd14020']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:36Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e98-9ffc-4a65-8940-439a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:36.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:36.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'd7697f8af52b42e2fb59a350886f02a1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:36Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e99-a1fc-4a57-9559-48da950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:37.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:37.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '0418ecb096bdb3360694780a76838cd333900ebb26a168e3a95225e6579ea20e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:37Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e99-9b64-478d-8f96-48db950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:37.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:37.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '36016bbccebddd9060073f1c9f0c80a2c2dd9cc1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:37Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e99-6244-4621-901f-4eca950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:37.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:37.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '42202e223b9d21079f397b9116093ac6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:37Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e99-1088-48fd-974b-49f4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:37.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:37.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '79c4bcc19a33e6b1ef4308b8d8ca93a6f97a08280d80d3ed856805d560e4489d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:37Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e99-a4a0-463b-842e-44b3950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:37.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:37.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '389c1d337548d2e3721466a3ca3fd54881cd5aee']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:37Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e99-0f50-4d38-8fac-48fe950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:37.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:37.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '97ff374ab1a7358eb362406baa0554c8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:37Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e99-795c-45ce-b020-4f66950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:37.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:37.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '010ce301d6ff509e111e9102ec7b883fd888f1510fe3bfba6d71986704dbcd28']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:37Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9a-0dbc-4b06-8fce-4b45950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:38.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:38.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '3cbedf6f7e7c842f1aa3cc6440449fd2defa7df7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:38Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9a-bdb4-44e4-b673-42be950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:38.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:38.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '360303fbb9f31d82afae87a4e71c8e93']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:38Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9a-580c-4700-8b62-4ede950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:38.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:38.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd31c5d91556d0dc52ddc77d70678441f6f7a647eaaf8e1438fdc5cf3160fb935']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:38Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9a-df00-4ebd-a876-46f0950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:38.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:38.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '41b844cd42208eab05e203b5e22712eaf568d133']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:38Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9a-6828-44fc-90ad-4929950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:38.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:38.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '768ee422a113dc1ae0310f6bc4d7c66d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:38Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9a-085c-4d00-b5f7-469d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:38.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:38.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'cba8e646e951dbfde33daddc1ad6429814dad1ae1786c886948ce9ed7029f487']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:38Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9a-6b3c-46e3-8912-487d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:38.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:38.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '4357e25f04f902a67604b8b9a6a122a9d3ca0357']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:38Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9b-3f88-49cc-b9ca-4535950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:39.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:39.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a835bd1a588d516e8d9b12c7b85d54de']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:39Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9b-1798-4c87-96ad-4571950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:39.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:39.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '31e9433eccf1c150462b705af11eff50587d25526225d0c4ba07312af0c81969']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:39Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9b-bb50-46b0-b4a3-4509950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:39.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:39.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '441a3f4e360996f53a0ca5bf7280c03771badb90']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:39Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9b-b9cc-445f-9f33-4da9950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:39.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:39.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '7cefad54a4656d68d5662836d794b5bb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:39Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9b-8a70-4345-a609-4e62950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:39.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:39.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '7fcd2160127471fbd92e3dfd656d73eef31195f1fe5a1c77027bd2a961467883']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:39Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9b-66f0-4a3d-bed7-4d03950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:39.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:39.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '4437315b462fce721d16edbe77362b0e634aa559']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:39Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9b-ac20-48a9-ad9f-4785950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:39.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:39.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '33f2a0070170ab861e92435114db52d8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:39Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9b-f150-431e-8275-4f18950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:39.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:39.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'bfb2ac272617e4af5ddf176bb4bffcc090e47b1208f4285a7108d6a59ec51837']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:39Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9c-f520-4732-9c83-4ed2950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:40.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:40.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '48220b4aeb4a96e983d6b1478144592e26fc982b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9c-4c88-47ed-95da-4dd5950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:40.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:40.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '47aeacba39f33b6ce2fd1f654f760a6c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9c-9bbc-4914-b6e4-4b51950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:40.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:40.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '40a10420b9d49f87527bc0396b19ec29e55e9109e80b52456891243791671c1c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9c-de94-4a34-bdb2-40df950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:40.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:40.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '48c3fa74a00f1115c0e089f23997f112c85741b4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9c-baf0-4c51-8b7a-4315950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:40.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:40.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'b043ec1567ecceb84c20a853d9245132']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9c-0214-4a4d-9574-451f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:40.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:40.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f6c3d4c2db6e10d5fe9dcddf771d6261a525e7789189f0cfdb4a87faf34d6dd6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9c-3b8c-4a61-9e5c-46cc950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:40.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:40.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '4dbdb482e6f4882ed8d31e1362e84fc104b397d2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:40Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9d-5264-43e9-bffb-4217950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:41.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:41.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '9ed0d182100447ad46b38f8ceef612f2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:41Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9d-3758-48fe-b4b9-40c9950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:41.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:41.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '656c897b39d7867bd4d38696100a09e379b06ab5e5f6842c1329f6bb83e70161']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:41Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9d-b24c-45ac-a475-4b11950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:41.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:41.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '4eb87cff1cf2f1411248cd06b497cac564ed63fd']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:41Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9d-0c70-4e58-9b91-4096950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:41.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:41.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'ae0d2278aa783b8dc1675f41cff9d07d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:41Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9d-d60c-486e-b3c9-49aa950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:41.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:41.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd5b3cc429c8a6fba074d9b1e2963273ac13cead47f63dbbb97e640b74e407134']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:41Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9d-2820-4023-b96b-4779950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:41.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:41.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '4edb69adbc1ebc884aa65cd42e1187f9223de3d3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:41Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9d-be2c-49f5-abe0-402e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:41.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:41.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '27f45f64f69d31839a6ec82185b5e030']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:41Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9e-9bd8-4a7f-868b-4d42950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:42.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:42.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5ec8cd3180a2576b92d53085ff5e3dcf4e3dccaf2154b59879969ef8011fd1c2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:42Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9e-8130-4ebd-8895-4a6b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:42.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:42.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5004f0d0410666e923212e941f646777b91958b0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:42Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9e-2e6c-48a7-ac9a-4111950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:42.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:42.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f855633c69c3095b20a99bd12d023271']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:42Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9e-c17c-4894-bd42-432a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:42.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:42.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '7927f3a35d87250253d8abc021d44cc496d2185f376f0d33b0365a68ba81e636']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:42Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9e-09cc-43a6-800c-4ad1950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:42.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:42.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '50651dbc0af0ff5f1623c468fd4ed4eeb3f2460d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:42Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9e-8e68-4e58-a537-43df950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:42.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:42.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5cd44e29316435cda62790801ec4f473']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:42Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9e-0bd8-49ce-8928-4855950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:42.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:42.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '2b5560f11b24de4fac1b0998cfe80138c2a4f87bb15f6eba6f7f58a5cf1f8622']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:42Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9e-e984-4c6d-8c4c-4f61950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:42.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:42.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '52fa70529cee1101067e7f6cc2532ee64506ba11']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:42Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9f-ca90-466b-92bc-4d62950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:43.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:43.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'ed6d8b6078e103b2d12a7fd339838a9c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:43Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9f-d014-4a35-b980-4145950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:43.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:43.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'bf2f9d19521cae12bf25a4108418f6c234af6cad2d7a6482323a12a2da13ebd6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:43Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9f-0158-4008-9f4c-44f2950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:43.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:43.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '537506539114118726725947814c6368cc507ed4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:43Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9f-fb64-439c-b36c-46b4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:43.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:43.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f063ea5b63c9eb0e8aff3420caf4b64d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:43Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9f-43b4-4fe9-8cb6-4e3e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:43.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:43.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'ce5d792faaca61d7bb63367f8772f492ee963f054bc03e61b4fae774c3a3c343']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:43Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9f-fd0c-47e7-925a-46d7950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:43.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:43.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '548e8ab0169f36b548a5aa5678ef1b033acbcda4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:43Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3e9f-f13c-4331-9d61-483a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:43.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:43.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '4170d7f066178181b7f86b5a1125a761']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:43Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea0-0e54-454b-82d7-421f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:44.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:44.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b7df931aa020195726002b235740bc844fc4b105920d4a139ca6b5a069e43575']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:44Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea0-ae00-4af8-b19c-4438950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:44.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:44.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '57a0d519db2354fb7f83f5243d4a9fbecf37f677']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:44Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea0-c300-4094-bdcf-48c9950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:44.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:44.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '7f1c1146f08a03ec811f443ac6decc15']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:44Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea0-94d0-4fdf-b0cd-4801950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:44.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:44.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3e9a6f168c4f9f6ce6c6db3fee35218408ee0f79189f53e174f19a439e4036fb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:44Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea0-8130-4a3d-ac14-4066950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:44.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:44.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '58611fe7ab6aa2e2550c40a059c9f11e88b04252']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:44Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea0-5940-47e1-8d6c-49a5950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:44.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:44.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '40e118e4ed768f32da3bd4737a5fc60b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:44Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea0-9254-4d41-8b95-4f78950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:44.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:44.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '7a136aff189f79dee342378d9d011ef35b639840148989670cd9ed3aaa404cdd']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:44Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea1-1628-4da8-88ed-4e64950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:45.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:45.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '589c73842529a15fa9b77b6d4c09b4f519b16fc5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:45Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea1-4ed8-4561-bbfd-42c8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:45.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:45.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5bcdf425169900ec224039b72c6ec5dc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:45Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea1-32a0-4287-af3c-4208950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:45.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:45.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'c65d9d6defebeacbf761ae61baee0386dd7aeb2bd8577611edfadfb765e6ca52']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:45Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea1-df54-4aca-9141-40f6950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:45.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:45.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5ab36b7bb8b782cdc3a4670adf3afa2dabc978b8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:45Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea1-1c90-4158-af81-4f9c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:45.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:45.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2911e7d0f7a9ee343532865de81b1cc5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:45Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea1-31f4-4163-bd67-4512950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:45.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:45.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '9db48e1cb712104830461c062d0a93f8e3b4043c0ab8b2dc0e1f5599827f4e21']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:45Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea1-84d0-4569-813d-42cc950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:45.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:45.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5ef6c7729e2f6d445fd3fd72f93ec637a5c32789']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:45Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea1-4a84-48a3-bb20-43af950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:45.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:45.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '7f2aad2ad7bced650d9eb19dc80502c9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:45Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea2-3190-45d0-b1f7-4d74950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:46.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:46.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'e378812f4347b6ec7a517d9c06dc1cd608322033743ec075afe26857bb65c6b0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:46Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea2-d3dc-4cb8-9060-4c3e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:46.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:46.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5fe9dad18883d1dc64dacb7aa8dd7988ca7b52bb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:46Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea2-a8cc-4f09-ae62-4663950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:46.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:46.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '3b726e15b2e161a5acadb1a1bce87cb9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:46Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea2-f3f4-4f80-a8b0-4e64950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:46.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:46.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '60562a923d1fb595d6e144a0957bc5f9fda0d3f105c316ab5e7d7cd27ff0c27f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:46Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea2-a9e4-4468-a9b9-4a6c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:46.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:46.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '6081a7794e1fb5349ac25fbba1bb80e4df857c35']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:46Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea2-4ea4-4d09-8b36-454e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:46.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:46.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2a6ad4fb3a29795ec7b2f02304464b36']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:46Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea2-ed88-41de-ba77-414f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:46.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:46.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '01b3cd088328aa2d87f6b3c435fef56b8a6033f78767a680d416f88c3e3ddae7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:46Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea3-43a8-45fa-addd-4993950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:47.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:47.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '6204297b04970e0f7c843a28636b2e5e28213e93']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:47Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea3-d288-4c56-8cd7-4914950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:47.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:47.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '148b8f6c9e47e59f171e2cc938382ecc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:47Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea3-c350-443a-b618-47a0950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:47.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:47.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '60f4e50985afa8c0b2437c78467fc11784416791cd8cacdb37542a3e14d79871']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:47Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea3-2544-4358-b25e-4b53950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:47.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:47.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '621e2fbcddee9d4915c2bd4689234ed40475dfb3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:47Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea3-1ec8-4258-817c-42ba950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:47.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:47.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'aec0f36dd1296689a740e43e3b51d734']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:47Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea3-c324-4e7e-8919-403e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:47.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:47.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'c14327a7d2c7ab2d3edb5c0db2f87688c30f4f781c10b6017183f74403494c07']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:47Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea3-99c8-4ce6-a49b-4563950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:47.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:47.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '62de7920de0dd9904b9af388ef5bb4c277a61051']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:47Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea4-ee34-4b53-8ca8-44b5950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:48.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:48.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'ef61dcb3711fd43d1a7e40b6dbd7d361']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:48Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea4-e60c-444a-b552-4519950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:48.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:48.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'feee319cff39fe40dd0e0651bdbb24e9701d7f5adc9eefbfbd4e7e465ebee7f1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:48Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea4-78d0-4da1-a489-4303950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:48.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:48.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '6a951c1da9080886fb931d01711b225c1368e6e6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:48Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea4-ce44-4ae8-8f0b-4012950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:48.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:48.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '29d51c29dd3f0811d403c329053a2f35']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:48Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea4-3808-47b9-8bb9-4be8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:48.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:48.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f1ab31f87585c824381ecd5411441bb1c755d81dd0f42bc08fbb061b9066fba0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:48Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea4-b9c4-470f-92b0-4542950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:48.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:48.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '6efd210c94ef5d49de0f705931b9e93b37e688fb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:48Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea4-afc4-4b98-8edd-4a9b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:48.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:48.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '0ee9ea3b831677df1ccde2eaafacd165']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:48Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea5-5e2c-485b-9b96-482c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:49.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:49.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '13397ce53d5bcc5339a9e5b83144eed11e051666abcf26ad393505cfd82ee9ea']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:49Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea5-4b94-40ff-882d-4620950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:49.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:49.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '6f733dea7027321529d43421cb2cc5444b4e0785']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:49Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea5-7034-405c-9af4-42e7950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:49.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:49.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '57acb822c5a03afabf9082ef3fd3306d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:49Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea5-1a08-49a3-9a17-4cca950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:49.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:49.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '0dd0325e09c0ba103aedc9e899192204ab29f4a0d35a7e53e5c800d9284a37e8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:49Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea5-a758-4c80-90cf-43e2950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:49.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:49.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '753bb0e7250d930957dabfdc0809352eed153b31']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:49Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea5-23dc-4c5b-ab1c-4f6e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:49.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:49.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'd341cd4cde7d8b10b3362b3d1b640d14']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:49Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea5-f6d8-46a6-8e92-4f1f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:49.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:49.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '639152dcce89b669fa00213d853425bee35f8b79970a663492d24ce29421fb75']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:49Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea5-c2cc-49c7-bf81-4e1e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:49.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:49.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '779946589786d2dfea06bd102be88df02426b491']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:49Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea6-2ac0-4b41-8cb1-4952950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:50.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:50.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'cc0bb7d434d786bf35447cf90e3b88df']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:50Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea6-265c-4f52-9751-4f5b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:50.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:50.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5691fefbba82244c63e2166e246b1ef16d66b46ff1434e13815c8796177dc522']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:50Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea6-5524-4814-bb0c-412f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:50.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:50.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '7818cbabec362de92407234c123f5a6dd910122c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:50Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea6-9774-4755-806d-43fa950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:50.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:50.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f4f3692c0bb00a94130d3b205e1e9baa']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:50Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea6-0a58-4c32-ae3f-409c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:50.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:50.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3ea8909c7e92d10a39ba08b002b489e718d77f12754e1bac8e69d62891ac8417']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:50Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea6-1eb4-4add-883a-4369950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:50.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:50.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '79fc0befe9e5530e2496a9fa6beadaa636119aa8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:50Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea6-0494-4058-b22c-4baf950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:50.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:50.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '640b52a15b798fa6cee52f2f309f43f4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:50Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea7-e7b8-4ded-a2b8-408a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:51.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:51.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '4d96580225828b1b735a02835b5d753992be7ccdfcfb80c50d7acaae3e8c63c6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:51Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea7-e9f8-44fb-822a-4368950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:51.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:51.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '7b2507e7e06044fe193b811b7c6ee3768652fc67']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:51Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea7-a4bc-4f55-865e-4020950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:51.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:51.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5bad3163f9caf8686c7b9e43934a696f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:51Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea7-8090-41b3-99d7-4605950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:51.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:51.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '988246ec5ee40470dd1c6661f7509d43dfa3debadd66ae4722a091935ecb56d9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:51Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea7-85f0-4a5c-8e2c-42bb950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:51.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:51.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '7c1db3fff72b3c8180fe0eedd092328e29b61588']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:51Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea7-ba30-4a86-9b69-4a4f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:51.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:51.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'fa6d890c0780e5bb42550ac52e46e94d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:51Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea7-e684-46c7-b6ec-4377950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:51.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:51.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3b471511630e5ae364c28de07dae041a5b44a040f49e15735afa509e44801863']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:51Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea8-3ca4-4ba5-8868-4bd6950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:52.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:52.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '80bf90a45be02815e6765e931063948bc563a8af']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:52Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea8-c800-4678-9cb2-47ce950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:52.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:52.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'dae2dab64bdffe40c3730f7797c4c372']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:52Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea8-78dc-4730-94a9-4beb950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:52.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:52.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '1c5f12e0c15adf930b31402e6586f3a05a0173237ea13adce2f01edde9748992']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:52Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea8-6bbc-4c01-a872-4c77950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:52.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:52.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '827ad016a75e822dccd4d3c0c0cc178e7702a99b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:52Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea8-ee40-435d-8681-4abc950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:52.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:52.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '21749bb7bdeac89843a60b0d032cf874']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:52Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea8-38c4-42ba-b4a8-4d08950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:52.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:52.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3bee8a4ee4efc157949587342ca73316eb9c95442cdb25dc349008c43dc64ba6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:52Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea8-3528-48a9-a2ef-4da5950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:52.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:52.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '83852d86836e9d2193067919815418972e5cc03a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:52Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea8-72c8-4907-bcc7-403f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:52.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:52.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '32d9d4da5e7b99e2d70200d14003e830']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:52Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea9-9d68-4ed6-af88-436f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:53.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:53.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a61c9ae6ac4149619f058a09b83e7ba16bf6bf2492201fa299c25495ef01ba30']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:53Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea9-ee90-4ee8-8e10-4232950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:53.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:53.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '84fe4e29cceafae55caf85952c0a83b92c75fba1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:53Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea9-94e0-4bef-a3ad-488b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:53.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:53.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a7bb3bcbd0b76c71cead0c9c41d060f3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:53Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea9-cc40-43db-b907-467e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:53.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:53.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '6e6f6e40a2716d11425a88b560e80fefd1a16d81ddee9663ff42ab82ea3a35bd']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:53Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea9-73bc-4036-bc6f-4d13950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:53.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:53.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8561291a00ec2c7cef2bd1d5daf48b350baeae8b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:53Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea9-fc1c-46e9-8085-4af2950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:53.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:53.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '637969fbc85e184e93a96f146abd7bad']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:53Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ea9-6324-4c4c-a957-4ef5950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:53.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:53.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '9261693b67b6e379ad0e57598602712b8508998c0cb012ca23139212ae0009a1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:53Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaa-5628-4930-98e7-4bbe950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:54.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:54.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8697fca8fb4c27f64f42c393e527165e9604ae4e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:54Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaa-8748-4506-b03a-4880950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:54.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:54.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '41ff8be81c58eb94b5f59e5f91ba0eec']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:54Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaa-1fac-47e9-8def-49dc950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:54.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:54.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '8d9695d0af6c38b8552ab3182f41f7ae96dc6cd90e107ee7ce9c132ac9394b61']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:54Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaa-3704-471d-b117-4958950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:54.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:54.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '87c6760c13c17e35d90a203a2acacfdf2ada0ed2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:54Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaa-52a8-4043-85cb-4df4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:54.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:54.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f413e8519a67390e4618fb3653250572']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:54Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaa-2050-485b-bb8b-431d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:54.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:54.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'adca333d2cee959c9323327ec8b3abd1193f34c520b80e4f699b49f70e14971c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:54Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaa-3d20-4b0f-aa14-4934950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:54.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:54.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '88c9e88086c8aa987eeebe70c5876b7660cd12d0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:54Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eab-d0d4-434a-b7b6-468c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:55.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:55.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a64c6ebab211184ab23ae72aebdab976']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:55Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eab-e3e0-4aad-a9c0-4bc3950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:55.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:55.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '8cf6258d002326a03cf4cd70d97837b02a1ba5f3451e88fa354947180fb93eaa']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:55Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eab-9f48-48b3-80d6-4d8e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:55.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:55.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '89b07f90ec9db28d0c53423e6f64745da7e607cb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:55Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eab-7860-4c79-beac-4f70950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:55.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:55.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '56ac87bbab2e471bad63918f3b953745']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:55Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eab-76b8-4640-aa0a-4167950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:55.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:55.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'edc3fba72f9a485c43c1aa3cbe0c5752d8af2ec7bfecb48a46f467e549daac05']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:55Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eab-c674-4282-a74c-408d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:55.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:55.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8a0fa4074403caeef809113ba7c84eba4404ed9c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:55Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eab-72a0-4348-9be5-46e8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:55.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:55.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2c367d915ca37e237df16d8548151a8b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:55Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eac-5348-4c05-a847-4c43950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:55.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:55.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b40d0ed8d1b7bbd0d52990ccbb7e927777d9854640c6c4b0adc683d55a965758']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:55Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eac-ec10-4cf0-88a9-4f56950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:56.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:56.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8cddf9c84e4a7eee3da4939ee0147d1e39ee3e1f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:56Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eac-53e0-4c67-9bea-46da950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:56.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:56.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '56f3437184e1ee96b1161135f3c5a1ab']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:56Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eac-830c-423d-b045-4a73950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:56.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:56.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '8bba59ce301d510bc3b24c941841ee4a8b0858d37e31c9d59193b78e7da81d9a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:56Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eac-7bec-457f-b075-4abd950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:56.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:56.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8cec37385290b004e0b6514a44cb0bf7b7e64aac']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:56Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eac-7080-405d-b878-4f5e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:56.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:56.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'bc7e2c790deaecf69a69c042932e428b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:56Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eac-f5c0-452a-857c-4ce7950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:56.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:56.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd5d23fbad723009a6a6364ef28153ffc95190e269cf3749c3cf28128d4c89be1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:56Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eac-1b28-4b2b-b35f-450e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:56.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:56.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '90342657a424fcffa836dfa5136eb362f49fdfb6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:56Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ead-6e04-4474-8891-46d5950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:57.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:57.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '19e932c289b936f407cd93dc4162eec4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:57Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ead-c828-42c5-b736-46c8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:57.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:57.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'fff8c7da09ace612e203a7d91b24e56a9e1715d5bfe6a7a4466adff284009a1e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:57Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ead-ec88-4107-b328-4e0a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:57.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:57.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '9432d96afa2618213a7e2ccd6c9735291c694b9a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:57Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ead-86bc-4111-b668-4f53950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:57.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:57.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'bdfc8d71ed9d065f7fba87f84adeea3f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:57Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ead-a304-4235-9b91-4cb6950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:57.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:57.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '91b0995ee522a6a01fe112dd6cdc21f2cd57b26ac84d8e3065f124ccb93c5eb4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:57Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ead-ef18-4d11-b2d3-4147950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:57.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:57.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '944e99725740271a01012d13ccbc9b9b4094fdbf']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:57Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ead-87bc-480a-a2d3-4a05950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:57.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:57.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5a0ae7088982e61cad12d0bfcc14d070']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:57Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eae-9510-4537-bdf3-44f6950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:58.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:58.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '374f1774b3689e8f1cbbee2cdcef9a94bb30048b0f4f243b8c1c8d1d70ec8442']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:58Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eae-1af4-431f-a3cf-43f6950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:58.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:58.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '956397670afa8921a29110f9926ba118b0a9b5fe']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:58Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eae-13d4-4621-ba78-4909950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:58.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:58.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'c2979839d2dfee2d26b32510d4c35bc2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:58Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eae-f288-4fc7-bed6-40d5950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:58.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:58.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'ea2244395a2f750564fc26d64b4cd50c2afd779b4404497564e0fe13a255b707']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:58Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eae-e1c8-4f17-b552-47b1950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:58.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:58.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '97400f2cd6873187109fb9a4be4cc199067e8e4b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:58Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eae-3d18-4e20-833d-40be950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:58.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:58.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '32fcb852290c66212c9f5377313b3c54']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:58Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eae-9098-4c04-ba15-4cde950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:58.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:58.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '0ca7fafd58f8ddca6dd182790b1a634205f45bac5c4a3ff4cecc3473d0c47726']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:58Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaf-3f00-4122-9782-48a4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:59.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '9b1ed2cd261bc4b6f1ccf8441dbf3d5c936b63c4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaf-a690-49be-82f7-45ae950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:59.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '58a5485bebda446634c538f20362f0e4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaf-e7d8-42fd-888d-4b3f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:59.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '976a843ee5a35e5015b5b2394e520e82403e6f81f877a4206bfe705bcb5e13e4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaf-24cc-43fd-a85f-42ac950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:59.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '9cfa6d066024a458e133fb9cfbafbdfa0b1c64f9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaf-7b7c-401f-b5b4-4e6f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:59.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '63de9e55e07f81e6d38eb859483b103d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaf-f95c-431e-b07d-408a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:59.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '6d22dbb5285391be5dcce7a2aed9f14b7ef57de90fd5b02d4bd7ba07d4a5d455']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eaf-acf4-4f03-b8fd-478f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:23:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:23:59.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '9f6a16d59f1159110caf32df1ad2bb6183d8bc49']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:23:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb0-9f70-48ac-9967-4fbe950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:00.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '1ee3aa67213868df9b08d00f3bfca6b1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb0-1b00-4e40-a20f-4d45950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:00.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5e5157e77089c4cfcfb2dfc82a574e465a943323e330dfe15316553d41f3d7eb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb0-9ee0-42c6-9dea-4c46950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:00.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'a047c5270762a05632b908c65beb14908bc4972f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb0-7300-4987-bbad-43cd950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:00.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'b4ffce10c64d1107901318b43b012e9a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb0-f6e8-4fee-8366-44a7950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:00.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'c8b3fa82fdd97f731851fa19611499b2c7a493cd689ac4d1796b3687d7fb6c82']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb0-b180-4b4b-9424-4a28950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:00.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'a14d7340ac6baf0b38eee37d7e3097d92a7e75e7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb0-4ff8-42b7-a711-42e5950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:00.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a05c9161177ee61f3e5aba75fc0a4970']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb1-8e7c-4452-997d-47da950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:01.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '559266876f060621f9b910ec75404946121460375b6f7812da717896e96dec26']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb1-2e28-4a87-94fc-47f3950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:01.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'a3a7545333638ec13ad33af6c4ec32a2d4f56c5d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb1-25b8-435a-a323-4f7c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:01.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '9bce542aa3fdd21c63e18d453ae8039d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb1-b494-407b-929b-4d0b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:01.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '957fcc2d137e9164635831dd0ab8bca8079ec8b1a4c2eb6e8ac254c5732b025b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb1-6010-4876-8527-4acf950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:01.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'a56a1b3f473346f0395c0de433938dbf4fa25a11']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb1-f958-47c4-8315-4ec9950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:01.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'c219ac463ef4bb377b0b5e7ec19ce976']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb1-bea4-41ff-8197-4a5e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:01.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a5948e46db292b61d4c4032a7c7af15453477dd6ce4453daa4a6753c7763d873']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb2-48e8-4606-9062-4e9f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:02.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'a6e5539410661a8407ea022f4f55aa13ca674fa1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb2-9c74-4920-a128-4624950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:02.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5e000fd125d326782a4b3dbd8eb65cf2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb2-3e28-44f2-beaf-4947950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:02.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '602bb8e06f9ec55f1b4c78a77e4ec229548763076a69e6606a898c4dd9731ff4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb2-bb5c-4784-b9f7-425c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:02.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ab30ae8b0bf1f3986d9635ea6caddf3878b26fa1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb2-f240-4a40-801d-4b91950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:02.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '89eab97e6862ab4c47d9f66f850e58ee']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb2-1f84-4fb5-8d59-45a4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:02.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '84058a01bb257a5c0f9a27f893ded585d349c9d87036d1a386fb8368cea2f545']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb2-0ce8-4ebc-a72a-4f7a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:02.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ab57daff9d93e71bcdf7f4b356089d3ae681602b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb3-6760-4d9c-96f8-4198950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:03.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'c89f6c16e581e975a12ec19191a766d1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb3-0b08-4db1-83cb-420d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:03.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '654e7dd64ab4ef04ea22f63fb0497346fb8d484a488be428d78d32a17654604d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb3-1588-4fb3-b59b-438b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:03.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ac63f0f2ccfd7ef77b1369130e2d4316c306b4d8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb3-63b0-4b72-ab1d-4254950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:03.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5169e6cf3d06429b94bafd835b5e2791']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb3-1db8-4d39-851d-4ac7950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:03.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'ec0e0c640f83d91fc50d657870f4b1d07bff0300ad6ba841bc7a211160ca79bf']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb3-e6fc-4a17-bc0c-4489950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:03.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ac8945be4493b660b4ab4283e644b9b0ab3f74a7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb3-9eb4-481b-a92b-4f93950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:03.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f91a6d14a7e0257d2da9b1b6fbc6010c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb4-631c-4a47-b6ac-41b2950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:04.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '72ec760b698dc19693eaa846b2cc21ebceec4ee122feb30cb0802a9920af9898']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:04Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb4-f198-49fa-95cc-433c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:04.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ae4ca2e5a431c67a427a36823aeeebd89f3ed0cb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:04Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb4-5c48-4c34-9ef5-40ad950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:04.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '8aa3c6e9cdb8724088c67c414691b66e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:04Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb4-dcd8-4bc1-9cfd-400d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:04.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a801ca60fe94c8182274cbea1f5d3666d0b9aada7feffe3d9a613eb1c3a6f949']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:04Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb4-d554-4341-9961-49e3950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:04.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b01b815d200a6cc90a0a15f9cde89fa93b7f9dc6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:04Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb4-6f6c-4ddb-b7c7-4063950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:04.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f2e0816f239a4066dcf4f035d3c91021']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:04Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb4-f598-4a34-a72b-4283950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:04.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f4c27c563e9fd56990f1082cc185c8a6f0b04fee97b57042db10300e1eb37f97']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:04Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb5-4514-4732-b264-4dcf950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:05.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:05.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b0e59fc1d41f66919fc25e454d26d9fd004e03bb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:05Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb5-29a4-4f77-90d6-4675950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:05.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:05.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'b0d0828a54cd184137de8d0deb698119']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:05Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb5-e724-4888-aa5a-44c1950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:05.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:05.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '6e678dc4d933b186557f671913fb2fada37f342d5007dac0b745ca718d2e7405']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:05Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb5-bbf0-46ed-91fc-42c7950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:05.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:05.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b149a8009f1c4e845778370d25f2df980adea362']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:05Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb5-6bc4-4ef7-bbb6-4328950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:05.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:05.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '6f653987ef4837ab20bd0b2d2f609ab0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:05Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb5-ed5c-431a-8c73-4289950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:05.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:05.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a9e25fbb95253412de09bc1e4323602afbf5077aca71f861cbc7ad74581511a2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:05Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb5-6298-409a-b6f9-4cf4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:05.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:05.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b36ceec3b2bf64802b56c610d3f0be29adc7d4b5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:05Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb6-91a8-44b6-b199-4d99950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:06.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:06.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '0a011ad2222a93014e7420db94f6aa2d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:06Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb6-f658-4d9f-8fbe-48ca950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:06.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:06.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '7279dfe295bfb075bff6a856097491fbd4c932970bb654c969a995322f0d03db']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:06Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb6-5dc4-4fce-a0d2-4d5b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:06.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:06.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b6435e8a9356ef2dc0d31b491b78f8c870a4bbec']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:06Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb6-9bec-4fc8-a4f6-40b1950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:06.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:06.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '4b8bb84127b0967d316e3d507a0f3b59']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:06Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb6-89dc-4e0d-af49-48f1950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:06.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:06.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f8addfa091021a34f8b16fac0687b685b72ff1cac87ba1392d6195ab42954d42']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:06Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb6-6188-4406-a5f1-43c0950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:06.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:06.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b683759f398e76e471879efb52df1738bf1fc307']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:06Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb6-2354-4b8a-85a0-4404950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:06.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:06.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '875a81e316b0759f246bde12bf5be852']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:06Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb6-1954-4824-a281-4633950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:06.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:06.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'eda9ba61ad01810aa53eece81626e913c4058a3b3cbf65fded907528117db0ec']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:06Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb7-55ac-4b3f-8293-42d4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:07.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:07.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b70d21894318a95717db2c5113be455ccd4c72e0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:07Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb7-ce08-4f77-9b58-44f9950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:07.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:07.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a4d16a3874aaf01d69c27032cb8988c3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:07Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb7-6304-4659-b849-44a8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:07.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:07.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b15b2acbe02d7b0649b41d1fe7e0cd008761cba28d20c5d9fa9c17e3a430d0eb']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:07Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb7-7370-4d6d-a2d0-42de950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:07.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:07.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b7ec5d36ca702cc9690ac7279fd4fea28d8bd060']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:07Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb7-1340-43cc-93f0-4527950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:07.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:07.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '56eac983a8caa8c0037c6ba25e9a2d9f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:07Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb7-089c-4e52-95db-450b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:07.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:07.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'fc609adef44b5c64de029b2b2cff22a6f36b6bdf9463c1bd320a522ed39de5d9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:07Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb7-a8d0-4ced-afea-4c95950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:07.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:07.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'b904f58d5bfd82d0778bdc9911f3b2193398e7cc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:07Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb8-c200-472f-b86e-4559950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:08.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:08.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '251de11b2d47bab208b578db6f4aa38f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:08Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb8-84d4-4d0e-878f-44dd950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:08.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:08.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a9af1d410b796a7d89050bb8189048260564a1ff0b94db25d0f465ea18b1c02b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:08Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb8-4a88-419d-841b-4810950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:08.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:08.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ba553804706964473d3782468b1575548da0e211']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:08Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb8-406c-481e-b46e-4895950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:08.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:08.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '64e273360b3f45a60cf99ad564954a19']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:08Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb8-fef4-4092-841e-487e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:08.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:08.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '73ab06fce6b9746c1010a3c588c62069213d94134823b7527559a0f41c88d20d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:08Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb8-727c-4613-9c06-418b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:08.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:08.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'bab514067c72f51786054136d2e6ab927c62b275']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:08Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb8-9654-4eb2-92b1-476d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:08.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:08.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'b8bb19a432127cae3680ab46140c4789']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:08Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb9-fac4-4004-b29f-4c8d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:09.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:09.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5a45524e9ad739585c3851b32f660d777624c811d0b293b3474fa2568e8022d4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:09Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb9-b524-4e5f-99e9-4b44950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:09.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:09.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'bbfbf78a4bfa692b9d152ecc679dcfe1db63ccd6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:09Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb9-b958-45d4-a471-45f8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:09.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:09.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'cef9886a936a35af81ed23b702305ab6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:09Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb9-1570-45b7-ae9b-40cd950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:09.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:09.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '61fe96a5118b531e7f1659085bcd61084354961fb557588bae3619665a8dc681']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:09Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb9-f52c-4dbf-90a3-4e7c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:09.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:09.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'be8a1093a62d3c2741227510ec09029a18b23a27']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:09Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb9-539c-4c0c-bb11-4841950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:09.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:09.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f62c6e428738f074cf90f21e289dd34f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:09Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eb9-c48c-46e8-9141-4b18950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:09.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:09.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a4afe60c024a34ae16dfbde1224550224ab3195f3d5dfe35c50ebd6a12fd4170']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:09Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eba-7d1c-4dc5-8830-4c2c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:09.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:09.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'bff3f180564f072f45d72bd6a840e9cde68e863e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:09Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eba-2db8-492b-aa16-4fd9950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:10.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:10.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '83aff63d5b3855cff982422bebc779d4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:10Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eba-e984-4ffb-ad3f-4e79950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:10.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:10.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '32599e86cb3bc9e1f91ff630fa41cd140354a21ac47bdb48082fbb8fba900f53']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:10Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eba-dc64-47b0-a0d5-4e39950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:10.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:10.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'c520096fc851bb0da060fb6cab274387ca8e8f88']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:10Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eba-efd4-46a6-9d91-4cdf950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:10.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:10.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '780c1904904356bb7e4304f37bd98c7b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:10Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eba-906c-42ad-acda-450c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:10.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:10.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'c52f4d1cf3ff09b22cf2f4bef867456aa7426c00fcd19c38b66ee3adc7eba057']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:10Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eba-54f4-4c4e-91a6-44a9950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:10.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:10.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'c5959b7d97f2855950bc35c9e0477b1940a43fc2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:10Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3eba-020c-4d92-8cfe-41c6950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:10.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:10.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'bcd74698b43531a3df7fb2f76f4b0a56']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:10Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebb-54e8-4c21-8fbb-44d3950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:11.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:11.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a23b5fc7d309b982f9dafc712b6a95c1cfce6102f86a7dc3f3013819638081a9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:11Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebb-a034-4cae-a636-4df2950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:11.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:11.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'c6993c06bb4721a8637390b282e30d5a1c91a22f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:11Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebb-8fb4-4228-8802-4b58950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:11.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:11.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5a724230ca622bdcdc0ba41e524821ca']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:11Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebb-2150-4d30-a6bd-4d22950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:11.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:11.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '90324a869541e0e67f0a3d4dcbdcdeefcaa4839edcb55ee163b7f26f80725278']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:11Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebb-8bdc-40ed-bc9e-4de3950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:11.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:11.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'c7d3c7b4ff167ccc0957f5659c5591f2ed43e70a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:11Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebb-e304-483a-a0b7-4764950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:11.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:11.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'b1c1f4f3e9189ca1763e8b2ca3bbfdfa']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:11Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebb-3c20-4cdc-8d9b-4668950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:11.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:11.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'cedaf3f2bdbd936ca276b636bb119136d67e0e2fa74614442c95bdbae6c50585']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:11Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebc-ce04-418f-83b0-46b4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:12.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:12.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'c893cd86c0e0d6ed267a5f38c8e51b79436dac62']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:12Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebc-6838-4d5f-949f-4cea950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:12.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:12.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'd9faaf817ef1c3ee664659049dde5f39']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:12Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebc-ca50-4e55-bbbc-4fef950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:12.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:12.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'ab4de0951de38c475d846da1da8336b97e886b6dbd694332f3624ee5595186fe']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:12Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebc-5b00-4876-9a64-46e7950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:12.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:12.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'c926351a98a617b0be47608c5d03d08a2a82ee1d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:12Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebc-88b8-4fe7-8d54-4363950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:12.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:12.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f69da77c13a651074c919ab26507c011']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:12Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebc-db0c-440f-a709-4470950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:12.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:12.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '07ed3d9bd82a3b490f33f36117af3ad02152d51e9c2470eb0089dab1305368f1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:12Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebc-cacc-4f96-a728-461a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:12.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:12.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ca84583819c9723fe8d9fc69d8cee66687a180c7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:12Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebd-44dc-48d1-91ac-4708950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:13.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:13.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5cb4e4e218b97c09c885d157e83f7247']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:13Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebd-791c-400c-ad02-4da6950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:13.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:13.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '150924668c8d7cd9899360eba12f13246538c50fbe7ef1ebf234ed7128c9936e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:13Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebd-e428-4d0f-85b4-4693950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:13.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:13.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd228b700a6f4542a63337ab0899bd7e90982c30e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:13Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebd-a378-4131-9f5a-44dd950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:13.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:13.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '5527d16136944bc3795bc65bcbbe65f3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:13Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebd-f030-4014-aae6-43e7950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:13.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:13.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '42dc1f9417fb067c3b96622ccf6e8c80c9d07202cc28f3c4d460d5bdc6ff249f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:13Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebd-2a4c-4ba2-b919-4b9c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:13.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:13.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd2cc4bf197b9d408bcec69252725bbcdb516308c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:13Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebd-cd7c-4203-b34b-4fd0950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:13.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:13.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'b58e692d0558ba1b9cfcdda2775c7fac']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:13Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebd-6044-4377-8864-4e2c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:13.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:13.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'ad55c2dcf7e3373ea074061d119c891b34e4364cd7f5f679b475b5ec3371592e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:13Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebe-eeb4-4b80-b503-4b0f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:14.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:14.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd73123ae61b9183f82ac9fa64c813f2b7483e772']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:14Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebe-04bc-47b4-81fb-420d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:14.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:14.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '9ff1afd5fc8595cd35741696a7a24a4c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:14Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebe-74c0-46c3-9f06-4ccd950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:14.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:14.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '637cf542512b0b6507b39686c7e87af30e7aa3a02eb9481a49efb4d0951adfe8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:14Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebe-d204-483c-adeb-454c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:14.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:14.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd86c6c85f3fe7981f7824f21bcaf45f876943e55']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:14Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebe-8fc4-469b-8f16-45b3950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:14.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:14.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2b7677ebb41abfd97225b2dcf8bbea35']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:14Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebe-f770-4cea-9eb0-40aa950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:14.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:14.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'dac6abd5ba0865b7983cff40f7a13d9cde89fed3c5b81c2b785e884f9ccdf28c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:14Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebe-25b0-4c29-b78b-49b7950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:14.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:14.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd89f0d3e65532a41615d0ee21f2b2379eb0b27d5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:14Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebf-13a0-4551-ace7-4df8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:15.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:15.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '738cf6db1f93006967ed1aeef87c6ba6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:15Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebf-8e94-4608-ba25-487b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:15.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:15.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5f6bc6573d006609d1f0b5c3d051dc6eb5b30dbc60c4e2e7c7b6826434c6a59b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:15Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebf-134c-4891-b8dd-45a8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:15.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:15.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd981a1a553729bc6ad875d57825dda17b226c385']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:15Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebf-ff88-4d0e-ba2f-4f1e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:15.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:15.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '168b06ee1219ada0afe184f9a70d12a0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:15Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebf-7200-4f13-bac6-482a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:15.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:15.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'cc87e067021f8b419cc73863d26bd54e25b6f4c8149d6d331ba50e54aea917ad']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:15Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebf-fbcc-4565-9dc3-450e950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:15.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:15.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'dd6ac4da70c52dc6aad69590c2335925859c838b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:15Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ebf-06e4-4af2-8d99-42c0950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:15.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:15.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '713c269faa5f650710997004d3be6971']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:15Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec0-c120-4fd5-965a-43a8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:16.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:16.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '6739dd4361c559fd9099dfc967b06eb5bac95ee8693986ac29c7b368dc7cff08']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:16Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec0-ce90-446b-9cdd-45bf950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:16.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:16.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ded04333c0eeb0f7978da4f298c191ecf42f98c2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:16Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec0-c644-44fc-b26a-414f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:16.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:16.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'e1e36fa0c482c71fd777be049272f7d2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:16Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec0-08b8-4f8e-ad20-4a76950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:16.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:16.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'e32cfd415d5aee289a62a02b28b7815346cd150d70c0e1f95bb92ecf26a855de']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:16Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec0-5acc-4b18-b20a-4923950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:16.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:16.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'df7e96430c086efef38810de0ce981f7c4b5bd3a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:16Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec0-0cd4-437a-8699-486c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:16.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:16.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a226d93f726bdaf119088e62b9b70989']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:16Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec0-b57c-4a59-9b09-4b1a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:16.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:16.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b20b198d9e3af27ecac4a83b66234cae4eef6db0c1192b6f9ba9ca946033034b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:16Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec1-40fc-4309-8e67-4dc1950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:17.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:17.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'e113e2904aaae7aa5c2438fea757846cad8a7e9b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:17Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec1-1f4c-4c1d-ae91-4e43950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:17.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:17.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'aaf26a0477841b45969fdce35bd2e1e1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:17Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec1-cd2c-4b56-8d3b-42c6950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:17.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:17.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd9c55606c757e78940c3a22fc25ae12ed93a68c9f88983e58cd4795047504246']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:17Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec1-c1c0-4efc-a007-4d67950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:17.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:17.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'e19a240f49e953a8ec9a7efc3b0e47cc8ecb07c2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:17Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec1-c290-40bb-99ce-434c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:17.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:17.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'aee7029335a4df8ac44d3587e41c21dc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:17Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec1-30a0-4cd4-9be6-4000950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:17.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:17.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3f85279eee498578935e7f51881f8411be5ac7ba45f2334699230cd0b9d60032']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:17Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec1-2a88-4594-8430-4998950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:17.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:17.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'e4c874697e71bb3b3b7fa0d5142f5c28df786313']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:17Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec2-2648-40e9-a064-438b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:17.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:17.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '448975cbf086c450d1ac6285f1b57e95']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:17Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec2-0ca8-4c3e-b510-48a9950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:18.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:18.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b606cad7024a165b899e3d2ae9625e6d0f207928eb2838a6c4c8b26ddd583bb8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:18Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec2-d490-45a1-91b4-4cf9950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:18.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:18.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ea072de4b781749a694628da0758c934ce9cb0a4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:18Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec2-022c-4aea-9dc8-43d8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:18.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:18.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '014402d32082497d9fae6b339f358401']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:18Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec2-9f80-4c4c-9bde-49af950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:18.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:18.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '941ceeb2cbe1969dc41059e0766b5d6df687e8e8d96e31efea71699686ab6b9e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:18Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec2-4314-4d76-b13a-4652950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:18.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:18.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ec316bb9b9d0a09c2bd566e98d6507edb9932eec']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:18Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec2-35b4-40bd-b986-4164950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:18.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:18.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'd54e2e633cea68716023e0e524325ffc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:18Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec2-5bc0-4e81-8c75-4769950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:18.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:18.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '72dc79c35aac14f453674ac3b62c268843a9c614ae99da01879db04c1dd995f9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:18Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec3-9640-462b-84a5-4af2950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:19.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:19.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ed91c8a09126bd27edeb0a6f9e5ef64a9b5bd29c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:19Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec3-1b1c-42f5-9577-4093950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:19.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:19.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'a0764ea07a40604b295e8600a3b73231']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:19Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec3-8458-4994-9184-4ac4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:19.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:19.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '9a1dc317baac5b31e8f9498c979e623db6e57f34aaea6dac923853cec1a30397']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:19Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec3-4600-49b4-b4a9-426b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:19.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:19.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'edc03b57e86aab5f869533ce2487f6918e26d5fe']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:19Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec3-28dc-49d2-b7ee-468f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:19.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:19.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'c170a9961560e4c96215a06f75985fc8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:19Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec3-21bc-4ec5-a8f1-4926950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:19.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:19.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '598bab73e4e2e9a09da64a16c807fea62bac20ec206384194478fcaf9eac1b14']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:19Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec3-5fc0-48a1-a142-40e5950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:19.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:19.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ee0d1a3ca639971d130eff10c22350c77a4a062c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:19Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec4-6544-46ea-91ed-4256950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:20.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:20.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'cca243be233cfa4c3f44c2035b5db135']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:20Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec4-449c-43ce-a947-43b1950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:20.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:20.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '1a178c22b5e9a7e99c0c733ff9d8452b22a3418b3c137687c8407c309e79a714']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:20Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec4-3500-431a-8d90-431c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:20.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:20.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ee52c9416e9da9a1f67785bada3c9f4dae89d1e3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:20Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec4-20d8-41cb-a8bb-4568950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:20.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:20.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '4bd8de4ce17067db858d63997315aee3']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:20Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec4-6cc8-4ebc-9b21-45ec950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:20.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:20.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f2f6dfc7fc3ff1170a80d661c1dbc18dbdfa456c1327ac475a7b21a38ec014be']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:20Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec4-1b0c-44ca-8a04-4f90950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:20.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:20.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f039f975acec4b8b60b7619cc75e0b87d809315c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:20Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec4-72fc-4368-b7cd-451c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:20.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:20.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '60b9933665169020a3565781e4058e08']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:20Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec5-117c-4be0-b8a2-42fe950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:21.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:21.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '200c0623f75433c1e2821d930e6f3e072c5e06f2bd1770551595acc3b170febf']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:21Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec5-b230-48dc-b36f-40d7950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:21.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:21.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f19e73120166b637ee7a941540979efaa4a284b5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:21Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec5-4c88-476c-a654-4bf8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:21.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:21.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '7ebc36666f11c4285ee68501dc3c1b5a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:21Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec5-302c-4416-9dad-45bb950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:21.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:21.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '71fe815f897877e69e4a37844a6d2feb40fdecaed1dd55b07472234e87e22767']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:21Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec5-a200-4143-8425-418b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:21.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:21.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f3c3f9e3139efb822e7b574898e95c38498462c0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:21Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec5-92ec-4a17-81c4-4016950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:21.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:21.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2377d5fa8c47ed262d49575e2e612433']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:21Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec5-9590-4587-85e7-472b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:21.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:21.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b524abb464b30366afff9b01da259432f76fef62a7b9d128284e289e76b3da16']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:21Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec5-7da4-47f4-9a9b-4b43950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:21.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:21.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f7653b3b9d71303d8ac9425985400b321934ddcc']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:21Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec6-51cc-41c2-ada5-4c37950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:22.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:22.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'be6655c17f0a797f2c01b2ab42b55107']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:22Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec6-8458-422a-87ae-471b950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:22.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:22.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '7561ace6f04ca6d023d7eba0c8cd49b2515baa71a40926f625538e41e21f641f']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:22Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec6-1634-43cc-89c8-4bd4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:22.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:22.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f771f3b68376fa211e590a7f5cb65f7cbab20187']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:22Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec6-34d4-4e04-8625-49be950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:22.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:22.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '7421ef518702479d9b1a4b82318a1095']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:22Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec6-ae14-4373-807b-4cc8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:22.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:22.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'b800ba5adfc26f20b4049dba2442be73347e999a224716c7ecb5271e482e0a4d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:22Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec6-0f40-4ea7-a82c-4750950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:22.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:22.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f80dbd487b738df05fe27b8d5238cbd3e429dd97']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:22Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec6-4768-4e0c-ab9a-44bb950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:22.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:22.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '8a19326b0ecbad83058b0ab803bad254']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:22Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec7-a0e8-44a5-9090-493c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:23.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:23.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '2c72175f96c651eea3d3411efacf73e0fb3e7543451b73f5e2521f47be67f006']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:23Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec7-10c8-4f9b-8060-4297950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:23.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:23.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f9860169568558df2eb06b9a7ab9d0a89f45cd44']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:23Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec7-2244-4227-945e-47a5950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:23.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:23.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '1c5764dd71b9109dbbcd83201be2ceae']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:23Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec7-f110-4ac8-ab05-4aa0950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:23.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:23.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'abbac3dda22f825197dd65b8c1076c5ab8d7ecaa2ce2821b242f63154eafce3a']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:23Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec7-2720-4bc3-ad6e-4613950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:23.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:23.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'fb106fdbb8ab0ee1272271aa880c254f8da59e42']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:23Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec7-64c0-42a8-a411-4aa4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:23.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:23.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '27fdc0db940764a1218b7a3698571bf2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:23Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec7-22c0-4a56-a345-41db950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:23.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:23.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'e2f8c5f8c3ab687b91dd28081fec71e0bb9f70066237768e7020fd992c80f2d5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:23Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec8-7fa0-4e55-808b-42a6950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:24.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:24.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'fb9fddb2b74e62d2e949520de23d6a2a2a16e576']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:24Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec8-0df8-4068-90e3-417f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:24.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:24.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f12ed5b550d6856ccb501f9ad65f956b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:24Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec8-734c-46f6-9004-4542950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:24.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:24.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'a72dc5010dc21c3bc9075c74fc7b87f0f89cfbeb1b1c4cdab06db4262d84969d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:24Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec8-07e4-4890-a3f5-42d7950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:24.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:24.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'fd9516d2c5493009009eedc0e98e345956516d1d']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:24Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec8-0128-4a19-8e35-415c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:24.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:24.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '983ea03599f2371d3aa4b561fbdb9d35']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:24Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec8-2f8c-4249-a194-451f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:24.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:24.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '1b72081c4422785d8c6c016b10bdd7545e5fc6f1ff73277b0366e9b40e624616']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:24Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec8-cd20-4d25-b584-4034950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:24.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:24.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'ff3d21c97e9ca71157f12221ccf0788a9775ec92']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:24Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec9-5b1c-4635-91d3-4f82950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:25.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:25.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2cdd85286c5531557f3f20a7cafa7291']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:25Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb3ec9-94d4-4d43-97b5-4703950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:24:25.000Z",
|
||
|
|
"modified": "2015-07-31T09:24:25.000Z",
|
||
|
|
"description": "Verified bad with VirusTotal",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '8f6988e717e0334b33b7f4697c8ebbb5038c218994c8da7dc295986fe43b2b8b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:24:25Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4016-84d8-4936-ba45-490f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:29:58.000Z",
|
||
|
|
"modified": "2015-07-31T09:29:58.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '22e1893d9da4fe32aa5abe60f14dad6e52c45095']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:29:58Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4017-9f80-4607-8d21-4d60950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:29:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:29:59.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = '3c8fa6759db3772f109b6e9860fcdc93']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:29:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4017-c9b4-4513-b3b7-4d93950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:29:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:29:59.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '9581e36c5a55faae049a89fcfa584cde4fa7294b156e31de3e1a33035f4df3a4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:29:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4017-dd64-4bd5-b876-44db950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:29:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:29:59.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '3320916ed703343c70ba0166595936eb588a12b8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:29:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4017-9c90-4008-ae9d-4857950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:29:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:29:59.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'f27de7b44ae44588445238ef441c9d99']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:29:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4017-ead8-4614-8982-47ec950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:29:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:29:59.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '14844c483d486348f598f31956aa13e50f3fa85320287d91815be3a611c8f1a1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:29:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4017-cb9c-4e28-ac52-4dce950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:29:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:29:59.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5acb3aa1f44924b0b1d3e9cac3098ad709aa397b']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:29:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4017-c04c-4dad-9527-4d68950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:29:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:29:59.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = '14b03ada92dd81d6ce57f43889810087']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:29:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4018-1b6c-422d-8435-4049950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:29:59.000Z",
|
||
|
|
"modified": "2015-07-31T09:29:59.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3190e725cc9eb7c116242da2d3f5dba46853b20f46e681df262e201cc22117e7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:29:59Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4018-de80-49aa-800d-4ea4950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:00.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5cb07296bda8758a6ad52abf8cbea611ffbfd390']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4018-a0f0-44dc-8c4c-4a77950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:00.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'ba6fd88683895e4e4a4aa32014ee93f6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4018-ed3c-4374-aaa6-4f26950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:00.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3e1ed9e5fc7ecaa8a01b6fd160cab39d251390a21fb7f6bb98e070efe1506617']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4018-40e4-4385-8bdf-4929950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:00.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '5db463fdb694978f876a9f94c9578e8182799ce1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4018-e748-42d9-96bc-4d6f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:00.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = '82b07d1f6a53b4073ac2e66638051ff7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4018-ae98-4a9f-9ee7-430d950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:00.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'f009f01467722aa8ba3d7543b9dae37fb8f2de2e0d6ff46755d9684b47775e41']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4018-b918-4567-ae33-491c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:00.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:00.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '664c8dfb65f86a691df9641d9d1ab67c5b39cda4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:00Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4019-67dc-4f6a-8c3d-442f950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:01.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'af06c4e1e064a6490d488506960e8bf8']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4019-e630-464b-8abd-47ef950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:01.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '5048af2f388cfa1bd9ee077953f5ef1499a81ee57a8876a051ea96bd08ceb69c']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4019-741c-4236-8b44-42d1950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:01.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '685c4287e74a9704d422ee577b7acb0748119f56']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4019-e74c-4469-9c9f-4b8a950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:01.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = '8aaaadb7d6a179226e462a9c8004e80e']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4019-885c-486a-b8fe-4923950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:01.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '1a855cef1bb454e7313dba60885e16fa8cb3dced1e38b8ad59ad5429c4e12493']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4019-d204-40ef-9af3-4816950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:01.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '896fe06a9b746dbd9f581267fbf8209a9d071c77']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb4019-88fc-4781-8f45-4c93950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:01.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:01.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = '3ae733df029c56fa2e3fc9c07458d8c2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:01Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401a-e16c-473c-82bf-41fb950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:02.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '72269cb148f90e8dd2eefc947eb59af88e8f7bb9fbca2dc0d0d572f7a727a6e1']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401a-1ac0-4139-8217-4d66950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:02.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8b4dbcc306c0df0b96505747e13e9c15747aac38']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401a-8fb4-4ad8-b878-4314950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:02.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = '708dd9be439c744b43ce18303b8426d9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401a-8720-4237-a30c-4741950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:02.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'd8d668e9d0c8e228b5d329b03cafd5e4b144cd955bacd7052d9c4a3b6ca67753']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401a-f6c0-4e45-a3eb-43ca950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:02.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '8e401062e69b1b0907dc6e30a1ef6e6b9fc03dd0']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401a-f5fc-4b7f-8a94-4616950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:02.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = '2b71bc9e931f39bebf8b27ad8a6c1341']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401a-3a80-4574-afeb-462c950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:02.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:02.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '21451a9ffe2d82092e0b9f64601867ef9710e0de6cc2ec40de80571c6e6f8ba6']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:02Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401b-397c-4f6c-80f0-4a79950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:03.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '96d230111d22f00762507dfde87cef89818741a5']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401b-1e8c-4b11-b155-4eec950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:03.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'e020e15263f94716347b3755415e3db2']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401b-c6c8-4817-a332-4758950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:03.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '1b8fc7508f0e1ccfb2fabb513054dfe517e29f42383d865e68f1b70fc96cc239']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401b-60b4-41f8-b3e6-4cd5950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:03.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = '99e4e7ed8dd2d54f6b68b7c0f03bb361ede438ac']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401b-4bbc-4909-8413-4e86950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:03.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'c1230aa332b3642ae0c6f64abf7823a9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401b-033c-48e6-ab30-4a55950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:03.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = '3c031a468d230b44c1fe6bbc59d5445f78ce329885bc9f66687852fa7e61f7ed']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401b-0e30-4162-a083-43b1950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:03.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:03.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'd0bf7118bdea8868e794171e176c7e1b45da7cfd']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:03Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401c-1240-4adb-a8db-4c22950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:04.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = 'eedb2f28eec31de121432f3f9c3c5ba7']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:04Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401c-82e8-4e8d-bc5e-4539950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:04.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'da400b87fba59ba933e1a77ce4ca27e6b42e27a3fd5551fbe8bf39853ed30bf4']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:04Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401c-e454-44c4-bc73-45b8950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:04.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA1 = 'f67d3e3c5892f9f8ecfa4e75fd46942937f43cc9']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:04Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha1\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401c-3eb8-48ca-bb83-4aec950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:04.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.MD5 = '375e36fa33888f4d48a8d40809165277']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:04Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"md5\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--55bb401c-4308-44ff-b9e6-4b44950d210b",
|
||
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
||
|
|
"created": "2015-07-31T09:30:04.000Z",
|
||
|
|
"modified": "2015-07-31T09:30:04.000Z",
|
||
|
|
"description": "Analysis suggests file is bad",
|
||
|
|
"pattern": "[file:hashes.SHA256 = 'c3baa6e1a9ca0c79c35a53cfb5cc4bb76e45ed623841bd359d7241a8d82c5a54']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2015-07-31T09:30:04Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"sha256\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "marking-definition",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
|
||
|
|
"created": "2017-01-20T00:00:00.000Z",
|
||
|
|
"definition_type": "tlp",
|
||
|
|
"name": "TLP:WHITE",
|
||
|
|
"definition": {
|
||
|
|
"tlp": "white"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|