1 line
1.4 MiB
JSON
1 line
1.4 MiB
JSON
|
{"Event": {"info": "Malspam 2017-09-04 'Invoice'", "Tag": [{"colour": "#ffffff", "exportable": true, "name": "tlp:white"}, {"colour": "#366c00", "exportable": true, "name": "circl:incident-classification=\"malware\""}, {"colour": "#0088cc", "exportable": true, "name": "misp-galaxy:ransomware=\"Locky\""}], "publish_timestamp": "1504523486", "timestamp": "1504523499", "analysis": "0", "Attribute": [{"comment": "initial download location", "category": "Network activity", "uuid": "59ad30e5-07e4-4160-a990-4fdd950d210f", "timestamp": "1504522469", "to_ids": true, "value": "http://hellonwheelsthemovie.com/JIKJHgft", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "59ad30e5-cfb0-4ad4-ae23-42c0950d210f", "timestamp": "1504522469", "to_ids": true, "value": "hellonwheelsthemovie.com", "disable_correlation": false, "object_relation": null, "type": "domain"}, {"comment": "hellonwheelsthemovie.com", "category": "Network activity", "uuid": "59ad30e5-e1e4-49f5-8ab9-4447950d210f", "timestamp": "1504522469", "to_ids": true, "value": "66.36.165.149", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "initial download location", "category": "Network activity", "uuid": "59ad30e5-c198-4370-b128-47bd950d210f", "timestamp": "1504522469", "to_ids": true, "value": "http://naturofind.org/p66/JIKJHgft", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "59ad30e5-4fcc-4fe6-a81f-4215950d210f", "timestamp": "1504522469", "to_ids": true, "value": "naturofind.org", "disable_correlation": false, "object_relation": null, "type": "domain"}, {"comment": "naturofind.org", "category": "Network activity", "uuid": "59ad30e5-c49c-40ab-bcb8-4796950d210f", "timestamp": "1504522469", "to_ids": true, "value": "93.78.190.45", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "naturofind.org", "category": "Network activity", "uuid": "59ad30e5-4480-4b84-87ff-4752950d210f", "timestamp": "1504522469", "to_ids": true, "value": "31.133.66.15", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "naturofind.org", "category": "Network activity", "uuid": "59ad30e5-cd60-4b91-b8b5-43a4950d210f", "timestamp": "1504522469", "to_ids": true, "value": "37.25.118.221", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "naturofind.org", "category": "Network activity", "uuid": "59ad30e5-2e04-4aca-a1ed-41f0950d210f", "timestamp": "1504522469", "to_ids": true, "value": "79.114.140.55", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "naturofind.org", "category": "Network activity", "uuid": "59ad30e5-7f6c-432c-b48e-45ae950d210f", "timestamp": "1504522469", "to_ids": true, "value": "81.27.56.240", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "naturofind.org", "category": "Network activity", "uuid": "59ad30e5-a834-4ece-ab12-45e1950d210f", "timestamp": "1504522469", "to_ids": true, "value": "31.135.107.60", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "naturofind.org", "category": "Network activity", "uuid": "59ad30e5-e9fc-4f94-8c39-4e6a950d210f", "timestamp": "1504522469", "to_ids": true, "value": "37.54.77.82", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "naturofind.org", "category": "Network activity", "uuid": "59ad30e5-426c-4367-b3e5-4a95950d210f", "timestamp": "1504522469", "to_ids": true, "value": "212.92.225.115", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "naturofind.org", "category": "Network activity", "uuid": "59ad30e5-f7d4-4577-9c46-45d5950d210f", "timestamp": "1504522469", "to_ids": true, "value": "77.122.247.39", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "naturofind.org", "category": "Network activity", "uuid": "59ad30e5-542c-4bb9-a9e9-44b5
|