1 line
8.2 KiB
JSON
1 line
8.2 KiB
JSON
|
{"Event": {"info": "M2M - GlobeImposter \"..doc\" 2017-12-05 : \"Scan Data\" -\n \"Scan_54321.7z\"", "Tag": [{"colour": "#ffffff", "exportable": true, "name": "tlp:white"}], "publish_timestamp": "0", "timestamp": "1512633541", "analysis": "1", "Attribute": [{"comment": "", "category": "Artifacts dropped", "uuid": "5a281c68-88e8-410c-97af-4227950d210f", "timestamp": "1512633535", "to_ids": true, "value": "ac7705680bb5c56b15a252031740a680", "disable_correlation": false, "object_relation": null, "type": "md5"}, {"comment": "", "category": "Network activity", "uuid": "5a281c69-8c44-46e9-b95a-4c47950d210f", "timestamp": "1512633535", "to_ids": true, "value": "http://atlantarecyclingcenters.com/Yiedbw2", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "5a281c69-df74-4a75-b684-bbcb950d210f", "timestamp": "1512633535", "to_ids": true, "value": "atlantarecyclingcenters.com", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "atlantarecyclingcenters.com", "category": "Network activity", "uuid": "5a281c69-a800-48dc-811a-eca8950d210f", "timestamp": "1512633535", "to_ids": false, "value": "98.124.251.75", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "5a281c6a-6fc4-42ab-8b15-4262950d210f", "timestamp": "1512633535", "to_ids": true, "value": "http://indepenmedia.nl/Yiedbw2", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "5a281c6a-ce68-4a23-a6fc-eca7950d210f", "timestamp": "1512633535", "to_ids": true, "value": "indepenmedia.nl", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "indepenmedia.nl", "category": "Network activity", "uuid": "5a281c6a-0e84-44e7-9fc5-a8d0950d210f", "timestamp": "1512633535", "to_ids": false, "value": "85.17.156.101", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "5a281c6b-8e0c-4385-8a87-4200950d210f", "timestamp": "1512633535", "to_ids": true, "value": "http://miamirecyclecenters.com/Yiedbw2", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "5a281c6b-c5d4-4e0f-b76d-4227950d210f", "timestamp": "1512633535", "to_ids": true, "value": "miamirecyclecenters.com", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "", "category": "Network activity", "uuid": "5a281c6b-22e4-4975-bc34-a95b950d210f", "timestamp": "1512633535", "to_ids": true, "value": "http://pamplonarecados.com/Yiedbw2", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "5a281c6b-856c-495c-b15d-bbcb950d210f", "timestamp": "1512633535", "to_ids": true, "value": "pamplonarecados.com", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "pamplonarecados.com", "category": "Network activity", "uuid": "5a281c6c-f68c-4ea8-be83-eca8950d210f", "timestamp": "1512633535", "to_ids": false, "value": "5.2.88.79", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "5a281c6c-af24-4e84-b0b9-4b78950d210f", "timestamp": "1512633535", "to_ids": true, "value": "http://test136.siteholder.ru/Yiedbw2", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "5a281c6c-33c4-4fd8-8001-4579950d210f", "timestamp": "1512633535", "to_ids": true, "value": "test136.siteholder.ru", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "test136.siteholder.ru", "category": "Network activity", "uuid": "5a281c6d-101c-4cb4-9600-4ace950d210f", "timestamp": "1512633535", "to_ids": false, "value": "212.220.124.238", "disable_correlation": false, "object_relation": null, "type": "ip-dst"},
|