1 line
12 KiB
JSON
1 line
12 KiB
JSON
|
{"Event": {"info": "OSINT - Saudi Arabia's 'Game of Thobes'", "Tag": [{"colour": "#004646", "exportable": true, "name": "type:OSINT"}, {"colour": "#ffffff", "exportable": true, "name": "tlp:white"}], "publish_timestamp": "0", "timestamp": "1510922476", "Object": [{"comment": "", "template_uuid": "8ec8c911-ddbe-4f5b-895b-fbff70c42a60", "uuid": "5a09ab2f-39b8-490c-84fb-4daf950d210f", "sharing_group_id": "0", "timestamp": "1510583087", "description": "Microblog post like a Twitter tweet or a post on a Facebook wall.", "template_version": "3", "Attribute": [{"comment": "", "category": "Other", "uuid": "5a09ab2f-fb18-4691-ad33-4c74950d210f", "timestamp": "1510583087", "to_ids": false, "value": "\"Saudi Arabia's 'Game of Thobes'.doc\u05f3\" submitted from TR, CVE-2017-11826, \r\nC2: 45.76.106[.]149 , 45.76.36[.]243 , saudiedi.toh[.]info\r\n\r\nMore details in Raw Threat Intelligence:\r\n\r\n(link: https://docs.google.com/document/d/1_nEWAmec3bKBddv30UPXJMiN-F0Ojuhfsmvk6KpFq0Q/edit#heading=h.iixpbs2pcjjp) docs.google.com/document/d/1_n\u2026", "disable_correlation": false, "object_relation": "post", "type": "text"}, {"comment": "", "category": "Other", "uuid": "5a09ab2f-e0cc-4dbb-a6f9-47e2950d210f", "timestamp": "1510583087", "to_ids": false, "value": "Twitter", "disable_correlation": true, "object_relation": "type", "type": "text"}, {"comment": "", "category": "External analysis", "uuid": "5a09ab2f-db38-4066-9878-4865950d210f", "timestamp": "1510583087", "to_ids": true, "value": "https://mobile.twitter.com/ClearskySec/status/929998314002673666", "disable_correlation": false, "object_relation": "link", "type": "url"}, {"comment": "", "category": "Other", "uuid": "5a09ab2f-13c0-4417-9869-42c4950d210f", "timestamp": "1510583087", "to_ids": false, "value": "2017/11/13", "disable_correlation": false, "object_relation": "creation-date", "type": "datetime"}, {"comment": "", "category": "Other", "uuid": "5a09ab2f-9960-4d5f-a028-4b36950d210f", "timestamp": "1510583087", "to_ids": false, "value": "@ClearskySec", "disable_correlation": false, "object_relation": "username", "type": "text"}], "distribution": "5", "meta-category": "misc", "name": "microblog"}, {"comment": "", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "uuid": "5a09abf7-7304-4831-b206-46b8950d210f", "sharing_group_id": "0", "timestamp": "1510583287", "description": "File object describing a file with meta-information", "template_version": "4", "Attribute": [{"comment": "", "category": "Payload delivery", "uuid": "5a09abf7-76f0-4ca2-aa9c-4db4950d210f", "timestamp": "1510583287", "to_ids": true, "value": "aede654e77e92dbd77ca512e19f495b8", "disable_correlation": false, "object_relation": "md5", "type": "md5"}, {"comment": "", "category": "Payload delivery", "uuid": "5a09abf7-952c-4203-934c-423d950d210f", "timestamp": "1510583287", "to_ids": true, "value": "2017-11-13 \u201cSaudi Arabia's 'Game of Thobes'.doc", "disable_correlation": false, "object_relation": "filename", "type": "filename"}, {"comment": "", "category": "Payload delivery", "uuid": "5a09abf7-970c-4251-b73f-42d6950d210f", "timestamp": "1510583287", "to_ids": true, "value": "aed93c002574f25dabd1859f080203a2c8f332e92c80db9aa983316695d938d3", "disable_correlation": false, "object_relation": "sha256", "type": "sha256"}, {"comment": "", "category": "Payload delivery", "uuid": "5a09abf7-cfc0-499a-8a40-4f86950d210f", "timestamp": "1510583287", "to_ids": true, "value": "d9fac68b6c49c485675d9141f375799d10572999", "disable_correlation": false, "object_relation": "sha1", "type": "sha1"}], "distribution": "5", "meta-category": "file", "name": "file"}, {"comment": "", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "uuid": "5a09ad27-2430-434c-ad1b-47ea950d210f", "sharing_group_id": "0", "timestamp": "1510583591", "description": "File object describing a file with meta-information", "template_version": "4", "Attribute": [{"comment": "", "category": "Payload delivery", "uuid": "5a09ad28-2694-4e83-a1a5-498e950d210f", "timestamp": "1510583592", "to_ids": true, "value": "b76f4c8c22b84600ac3cff64dadfaf8b", "d
|