adulau/misp-circl-feed
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Packages Wiki Activity Actions
misp-circl-feed/feeds/circl/misp/5b9663f7-91d0-4bcb-ad23-4637950d210f.json

4532 lines
153 KiB
JSON
Raw Normal View History

chg: [feed] added
2023-04-21 13:25:09 +00:00
{
"Event": {
"analysis": "2",
"date": "2018-08-23",
"extends_uuid": "",
"info": "OSINT - Operation AppleJeus: Lazarus hits cryptocurrency exchange with fake installer and macOS malware",
"publish_timestamp": "1540716823",
"published": true,
"threat_level_id": "3",
"timestamp": "1540716814",
"uuid": "5b9663f7-91d0-4bcb-ad23-4637950d210f",
"Orgc": {
"name": "CIRCL",
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
},
"Tag": [
{
"colour": "#13eb00",
chg: [export] updated
2023-05-19 09:05:37 +00:00
"local": "0",
"name": "misp-galaxy:threat-actor=\"Lazarus Group\"",
"relationship_type": ""
chg: [feed] added
2023-04-21 13:25:09 +00:00
},
{
"colour": "#0088cc",
chg: [export] updated
2023-05-19 09:05:37 +00:00
"local": "0",
"name": "misp-galaxy:rat=\"FALLCHILL\"",
"relationship_type": ""
chg: [feed] added
2023-04-21 13:25:09 +00:00
},
{
"colour": "#0088cc",
chg: [export] updated
2023-05-19 09:05:37 +00:00
"local": "0",
"name": "misp-galaxy:mitre-enterprise-attack-attack-pattern=\"Data from Local System - T1005\"",
"relationship_type": ""
chg: [feed] added
2023-04-21 13:25:09 +00:00
},
{
"colour": "#ffffff",
chg: [export] updated
2023-05-19 09:05:37 +00:00
"local": "0",
"name": "tlp:white",
"relationship_type": ""
chg: [feed] added
2023-04-21 13:25:09 +00:00
},
{
"colour": "#3b7500",
chg: [export] updated
2023-05-19 09:05:37 +00:00
"local": "0",
"name": "circl:incident-classification=\"malware\"",
"relationship_type": ""
chg: [feed] added
2023-04-21 13:25:09 +00:00
},
{
"colour": "#00223b",
chg: [export] updated
2023-05-19 09:05:37 +00:00
"local": "0",
"name": "osint:source-type=\"blog-post\"",
"relationship_type": ""
chg: [feed] added
2023-04-21 13:25:09 +00:00
}
],
"Attribute": [
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1536582856",
"to_ids": false,
"type": "link",
"uuid": "5b96649e-2314-474a-96bd-858d950d210f",
"value": "https://securelist.com/operation-applejeus/87553/",
"Tag": [
{
"colour": "#00223b",
chg: [export] updated
2023-05-19 09:05:37 +00:00
"local": "0",
"name": "osint:source-type=\"blog-post\"",
"relationship_type": ""
chg: [feed] added
2023-04-21 13:25:09 +00:00
}
]
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1536582847",
"to_ids": false,
"type": "text",
"uuid": "5b9664b3-9980-4b37-9f56-99a4950d210f",
"value": "Lazarus has been a major threat actor in the APT arena for several years. Alongside goals like cyberespionage and cybersabotage, the attacker has been targeting banks and other financial companies around the globe. Over the last few months, Lazarus has successfully compromised several banks and infiltrated a number of global cryptocurrency exchanges and fintech companies.\r\n\r\nKaspersky Lab has been assisting with incident response efforts. While investigating a cryptocurrency exchange attacked by Lazarus, we made an unexpected discovery. The victim had been infected with the help of a trojanized cryptocurrency trading application, which had been recommended to the company over email. It turned out that an unsuspecting employee of the company had willingly downloaded a third-party application from a legitimate looking website and their computer had been infected with malware known as Fallchill, an old tool that Lazarus has recently switched back to. There have been multiple reports on the reappearance of Fallchill, including one from US-CERT.\r\n\r\nTo ensure that the OS platform was not an obstacle to infecting targets, it seems the attackers went the extra mile and developed malware for other platforms, including for macOS. A version for Linux is apparently coming soon, according to the website. It\u00e2\u20ac\u2122s probably the first time we see this APT group using malware for macOS.\r\n\r\nThe fact that the Lazarus group has expanded its list of targeted operating systems should be a wake-up call for users of non-Windows platforms.",
"Tag": [
{
"colour": "#00223b",
chg: [export] updated
2023-05-19 09:05:37 +00:00
"local": "0",
"name": "osint:source-type=\"blog-post\"",
"relationship_type": ""
chg: [feed] added
2023-04-21 13:25:09 +00:00
}
]
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1536583767",
"to_ids": true,
"type": "url",
"uuid": "5b966857-de5c-4ddb-9b8c-99a4950d210f",
"value": "www.celasllc.com/checkupdate.php"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1536584794",
"to_ids": true,
"type": "filename",
"uuid": "5b966c5a-4768-461c-a422-a34b950d210f",
"value": "H:\\DEV\\TManager\\DLoader\\20180702\\dloader\\WorkingDir\\Output\\00000009\\Release\\dloader.pdb"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1536584795",
"to_ids": true,
"type": "filename",
"uuid": "5b966c5b-1e0c-4abf-beeb-a34b950d210f",
"value": "H:\\DEV\\TManager\\DLoader\\20180702\\dloader\\WorkingDir\\Output\\00000006\\Release\\dloader.pdb"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1536586072",
"to_ids": true,
"type": "url",
"uuid": "5b967158-7fb0-4856-9123-a477950d210f",
"value": "https://www.celasllc.com/checkupdate.php"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1536736254",
"to_ids": true,
"type": "ip-dst",
"uuid": "5b98bbfe-1f24-4ff0-9b33-4067950d210f",
"value": "196.38.48.121"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1536736255",
"to_ids": true,
"type": "ip-dst",
"uuid": "5b98bbff-91d8-46da-854c-4a26950d210f",
"value": "185.142.236.226"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1536736697",
"to_ids": true,
"type": "ip-dst",
"uuid": "5b98bdb9-6514-4d8b-983a-4bd9950d210f",
"value": "185.142.236.213"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1536736698",
"to_ids": true,
"type": "ip-dst",
"uuid": "5b98bdba-799c-4fb2-bdca-438e950d210f",
"value": "80.82.64.91"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1536736700",
"to_ids": true,
"type": "ip-dst",
"uuid": "5b98bdbc-b660-4a38-9d7c-4b92950d210f",
"value": "185.142.239.173"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1536745745",
"to_ids": true,
"type": "filename",
"uuid": "5b98e111-e9c0-488c-8ff4-498b950d210f",
"value": "H:\\DEV\\TManager\\all_BOSS_troy\\T_4.2\\T_4.2\\Server_\\x64\\Release\\ServerDll.pdb"
}
],
"Object": [
{
"comment": "MSI installer",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562365",
"uuid": "5b966633-230c-4174-a51a-9912950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "filename",
"timestamp": "1536583219",
"to_ids": true,
"type": "filename",
"uuid": "5b966633-6644-451a-83e3-9912950d210f",
"value": "celastradepro_win_installer_1.00.00.msi"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536583222",
"to_ids": true,
"type": "md5",
"uuid": "5b966636-9fc4-4bb8-bc8c-9912950d210f",
"value": "9e740241ca2acdc79f30ad2c3f50990a"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536583226",
"to_ids": false,
"type": "text",
"uuid": "5b96663a-ec9c-4dfb-95cf-9912950d210f",
"value": "Malicious"
}
]
},
{
"comment": "PE32 executable (GUI) Intel 80386, for MS Windows",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562365",
"uuid": "5b96679f-07a4-49fe-8dab-4495950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "filename",
"timestamp": "1536745956",
"to_ids": true,
"type": "filename",
"uuid": "5b9667a0-1f88-4d8f-85e8-4904950d210f",
"value": "Updater.exe"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536745956",
"to_ids": true,
"type": "md5",
"uuid": "5b9667a3-4970-4055-ac6b-42f4950d210f",
"value": "b054a7382adf6b774b15f52d971f3799"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536745956",
"to_ids": false,
"type": "text",
"uuid": "5b9667a7-bb74-4e1e-b869-4ba6950d210f",
"value": "Malicious"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "path",
"timestamp": "1536745958",
"to_ids": false,
"type": "text",
"uuid": "5b98e1e6-ff9c-4cf4-bb01-4655950d210f",
"value": "%Program Files%\\CelasTradePro\\"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562365",
"uuid": "5b966b29-cc24-4d8d-a919-99a4950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536745900",
"to_ids": true,
"type": "md5",
"uuid": "5b966b29-3e34-4ae8-a674-99a4950d210f",
"value": "4126e1f34cf282c354e17587bb6e8da3"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536745900",
"to_ids": false,
"type": "text",
"uuid": "5b966b2a-06c4-4c66-992d-99a4950d210f",
"value": "Malicious"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "filename",
"timestamp": "1536745900",
"to_ids": true,
"type": "filename",
"uuid": "5b98e1ac-bcf4-44c0-917b-4ba1950d210f",
"value": "celastradepro_win_installer_1.00.00.msi"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562365",
"uuid": "5b966b9e-1e20-4d8e-9e02-a422950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536745993",
"to_ids": true,
"type": "md5",
"uuid": "5b966b9e-0324-4422-a6b9-a422950d210f",
"value": "ffae703a1e327380d85880b9037a0aeb"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536745993",
"to_ids": false,
"type": "text",
"uuid": "5b966ba0-1bdc-4e90-9785-a422950d210f",
"value": "Malicious"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "filename",
"timestamp": "1536745993",
"to_ids": true,
"type": "filename",
"uuid": "5b98e209-c518-4f5d-886d-4756950d210f",
"value": "Updater.exe"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562365",
"uuid": "5b966ca1-2098-4ccd-818b-49c6950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536745921",
"to_ids": true,
"type": "md5",
"uuid": "5b966ca1-ecf4-492b-b8e2-45ee950d210f",
"value": "0bdb652bbe15942e866083f29fb6dd62"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536745921",
"to_ids": false,
"type": "text",
"uuid": "5b966ca2-e9d8-432d-91cc-49bd950d210f",
"value": "Malicious"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "filename",
"timestamp": "1536745921",
"to_ids": true,
"type": "filename",
"uuid": "5b98e1c1-5240-4b2a-8163-4f88950d210f",
"value": "CelasTradePro-Installer.msi"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562365",
"uuid": "5b966cb0-69f8-4435-b4f5-a477950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536746296",
"to_ids": true,
"type": "md5",
"uuid": "5b966cb1-2e34-48ac-b838-a477950d210f",
"value": "bbbcf6da5a4c352e8846bf91c3358d5c"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536746296",
"to_ids": false,
"type": "text",
"uuid": "5b966cb2-1474-4c8a-947e-a477950d210f",
"value": "Malicious"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "filename",
"timestamp": "1536746296",
"to_ids": true,
"type": "filename",
"uuid": "5b98e338-23b0-4569-84d1-4062950d210f",
"value": "Updater.exe"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562365",
"uuid": "5b9670b8-4d88-4e12-aff3-46a7950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "filename",
"timestamp": "1536585912",
"to_ids": true,
"type": "filename",
"uuid": "5b9670b8-c868-4e95-91c6-47e2950d210f",
"value": "celastradepro_mac_installer_1.00.00.dmg"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536585915",
"to_ids": true,
"type": "md5",
"uuid": "5b9670bb-5970-4363-8472-461e950d210f",
"value": "48ded52752de9f9b73c6bf9ae81cb429"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536585919",
"to_ids": false,
"type": "text",
"uuid": "5b9670bf-b080-4a33-b902-4c65950d210f",
"value": "Malicious"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "size-in-bytes",
"timestamp": "1536585919",
"to_ids": false,
"type": "size-in-bytes",
"uuid": "5b9670bf-df20-485c-a0fb-4644950d210f",
"value": "15020544"
}
]
},
{
"comment": "PE32+ executable (GUI) x86-64, for MS Windows",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1536746559",
"uuid": "5b9674b5-4f80-49aa-ba91-8587950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "filename",
"timestamp": "1536746559",
"to_ids": true,
"type": "filename",
"uuid": "5b9674b5-1920-492d-b524-8587950d210f",
"value": "msn.exe"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536746559",
"to_ids": true,
"type": "md5",
"uuid": "5b9674b5-0964-455d-9fc5-8587950d210f",
"value": "0a15a33844c9df11f12a4889ae7b7e4b"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536746559",
"to_ids": false,
"type": "text",
"uuid": "5b9674b6-8e0c-4b45-80a5-8587950d210f",
"value": "Malicious"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "size-in-bytes",
"timestamp": "1536746559",
"to_ids": false,
"type": "size-in-bytes",
"uuid": "5b9674b6-ab78-4fca-b6e4-8587950d210f",
"value": "104898560"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "path",
"timestamp": "1536746560",
"to_ids": false,
"type": "text",
"uuid": "5b98e440-c76c-424c-a5d8-4177950d210f",
"value": "C:\\Recovery\\"
}
]
},
{
"comment": "",
"deleted": false,
"description": "Registry key object describing a Windows registry key with value and last-modified timestamp",
"meta-category": "file",
"name": "registry-key",
"template_uuid": "8b3228ad-6d82-4fe6-b2ae-05426308f1d5",
"template_version": "4",
"timestamp": "1536589702",
"uuid": "5b967f86-6cfc-4a34-8522-47f3950d210f",
"Attribute": [
{
"category": "Persistence mechanism",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "key",
"timestamp": "1536589702",
"to_ids": true,
"type": "regkey",
"uuid": "5b967f86-5558-47c1-893c-40d6950d210f",
"value": "\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Svchost\\netsvcs"
},
{
"category": "Persistence mechanism",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "name",
"timestamp": "1536589703",
"to_ids": false,
"type": "text",
"uuid": "5b967f87-80bc-4d52-8bbf-42fd950d210f",
"value": "netsvcs"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "root-keys",
"timestamp": "1536589703",
"to_ids": false,
"type": "text",
"uuid": "5b967f87-93a4-4a79-9b59-47f4950d210f",
"value": "HKLM"
},
{
"category": "Persistence mechanism",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "data-type",
"timestamp": "1536589703",
"to_ids": false,
"type": "text",
"uuid": "5b967f87-47f4-4d81-b0c6-45b6950d210f",
"value": "REG_NONE"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1536746585",
"uuid": "5b9680de-a334-4851-a9be-858c950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "filename",
"timestamp": "1536746585",
"to_ids": true,
"type": "filename",
"uuid": "5b9680de-ec5c-4a3d-a84d-858c950d210f",
"value": "uploadmgrsvc.dll"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536746585",
"to_ids": true,
"type": "md5",
"uuid": "5b9680de-dd8c-4ad8-9312-858c950d210f",
"value": "e1ed584a672cab33af29114576ad6cce"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536746585",
"to_ids": false,
"type": "text",
"uuid": "5b9680df-b180-4439-a4bb-858c950d210f",
"value": "Malicious"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "size-in-bytes",
"timestamp": "1536746585",
"to_ids": false,
"type": "size-in-bytes",
"uuid": "5b9680df-6ed4-424b-aacd-858c950d210f",
"value": "104878356"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "path",
"timestamp": "1536746586",
"to_ids": false,
"type": "text",
"uuid": "5b98e45a-6f68-4c14-af99-44fe950d210f",
"value": "%WINDIR%\\system32\\"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1536747358",
"uuid": "5b968143-db18-4e15-a2f0-44a9950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "filename",
"timestamp": "1536747358",
"to_ids": true,
"type": "filename",
"uuid": "5b968143-e490-4591-9f26-4bdc950d210f",
"value": "uploadmgr.dat"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536747358",
"to_ids": true,
"type": "md5",
"uuid": "5b968143-4db8-483e-b16d-4c54950d210f",
"value": "d8484469587756ce0d10a09027044808"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536747358",
"to_ids": false,
"type": "text",
"uuid": "5b968144-84e0-4d54-a6f5-4282950d210f",
"value": "Malicious"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "size-in-bytes",
"timestamp": "1536747358",
"to_ids": false,
"type": "size-in-bytes",
"uuid": "5b968144-adb4-4b7b-838f-4c69950d210f",
"value": "143872"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "fullpath",
"timestamp": "1536747359",
"to_ids": false,
"type": "text",
"uuid": "5b98e75f-cae8-4706-954d-4392950d210f",
"value": "%WINDIR%\\system32\\uploadmgr.dat"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "path",
"timestamp": "1536747359",
"to_ids": false,
"type": "text",
"uuid": "5b98e75f-30e8-491a-899a-4b96950d210f",
"value": "%WINDIR%\\system32\\"
}
]
},
{
"comment": "PE32+ executable (DLL) (GUI) x86-64, for MS Windows",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562365",
"uuid": "5b98b7fd-ba60-4f26-90a2-4b32950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536735229",
"to_ids": true,
"type": "md5",
"uuid": "5b98b7fd-5860-4bc2-ab35-4a3b950d210f",
"value": "d7089e6bc8bd137a7241a7ad297f975d"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536735229",
"to_ids": false,
"type": "text",
"uuid": "5b98b7fd-601c-4976-957c-402d950d210f",
"value": "Malicious"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "size-in-bytes",
"timestamp": "1536735229",
"to_ids": false,
"type": "size-in-bytes",
"uuid": "5b98b7fd-cb04-4fd6-b20e-47f3950d210f",
"value": "143872"
}
]
},
{
"comment": "",
"deleted": false,
"description": "Registry key object describing a Windows registry key with value and last-modified timestamp",
"meta-category": "file",
"name": "registry-key",
"template_uuid": "8b3228ad-6d82-4fe6-b2ae-05426308f1d5",
"template_version": "4",
"timestamp": "1536735813",
"uuid": "5b98ba45-5eb0-416b-8101-42ef950d210f",
"Attribute": [
{
"category": "Persistence mechanism",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "key",
"timestamp": "1536735813",
"to_ids": true,
"type": "regkey",
"uuid": "5b98ba45-6da0-4d90-9ee9-4d98950d210f",
"value": "\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\TaskConfigs\\Description"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "root-keys",
"timestamp": "1536735814",
"to_ids": false,
"type": "text",
"uuid": "5b98ba46-12b0-4a4d-b0b8-498e950d210f",
"value": "HKLM"
},
{
"category": "Persistence mechanism",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "data-type",
"timestamp": "1536735814",
"to_ids": false,
"type": "text",
"uuid": "5b98ba46-de28-4d3c-be81-49ad950d210f",
"value": "REG_NONE"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562365",
"uuid": "5b98c28b-24d0-4b15-a1e5-4d5d950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536737931",
"to_ids": true,
"type": "md5",
"uuid": "5b98c28b-2314-4d5d-add8-4bcb950d210f",
"value": "81c3a3c5a0129477b59397173fdc0b01"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536737935",
"to_ids": false,
"type": "text",
"uuid": "5b98c28f-c4bc-4d1b-ba96-450a950d210f",
"value": "Malicious"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562365",
"uuid": "5b98c2a4-55cc-4ecc-83fc-48fa950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536737956",
"to_ids": true,
"type": "md5",
"uuid": "5b98c2a4-cacc-435f-a6bf-4a54950d210f",
"value": "6cb34af551b3fb63df6c9b86900cf044"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536737957",
"to_ids": false,
"type": "text",
"uuid": "5b98c2a5-9480-41c7-a2d0-4cf7950d210f",
"value": "Malicious"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562367",
"uuid": "5b98c3dc-c378-4522-800d-4872950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536738268",
"to_ids": true,
"type": "md5",
"uuid": "5b98c3dc-c140-4dcf-952c-48fa950d210f",
"value": "21694c8db6234df74102e8b5994b7627"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536738272",
"to_ids": false,
"type": "text",
"uuid": "5b98c3e0-c41c-4636-b6c0-4ef0950d210f",
"value": "Malicious"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562371",
"uuid": "5b98c3ef-b65c-4ef4-8b76-4448950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536738287",
"to_ids": true,
"type": "md5",
"uuid": "5b98c3ef-a0f8-4e5e-bc02-42bf950d210f",
"value": "5ad7d35f0617595f26d565a3b7ebc6d0"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536738289",
"to_ids": false,
"type": "text",
"uuid": "5b98c3f1-b7b8-4aa9-9290-4b0b950d210f",
"value": "Malicious"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562375",
"uuid": "5b98c401-2e34-4bd7-9406-4d2f950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536738306",
"to_ids": true,
"type": "md5",
"uuid": "5b98c402-1f88-4df7-ac0b-49bc950d210f",
"value": "c501ea6c56ba9133c3c26a7d5ed4ce49"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536738314",
"to_ids": false,
"type": "text",
"uuid": "5b98c40a-7a80-400b-97cc-406e950d210f",
"value": "Malicious"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562375",
"uuid": "5b98c418-7888-4270-b483-4535950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536738328",
"to_ids": true,
"type": "md5",
"uuid": "5b98c418-795c-47fb-a08c-4a8f950d210f",
"value": "cafda7b3e9a4f86d4bd005075040a712"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536738331",
"to_ids": false,
"type": "text",
"uuid": "5b98c41b-fe18-4df9-a073-4a48950d210f",
"value": "Malicious"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562375",
"uuid": "5b98d098-3ea8-4ff4-85d5-4211950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536741528",
"to_ids": true,
"type": "md5",
"uuid": "5b98d098-1360-49da-9423-4ab9950d210f",
"value": "cea1a63656fb199dd5ab90528188e87c"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536741529",
"to_ids": false,
"type": "text",
"uuid": "5b98d099-a004-449b-8e83-4b10950d210f",
"value": "Malicious"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562375",
"uuid": "5b98d0a6-74ac-4a2d-98de-409c950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536741542",
"to_ids": true,
"type": "md5",
"uuid": "5b98d0a6-8a30-4699-8eee-4999950d210f",
"value": "6b061267c7ddeb160368128a933d38be"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536741542",
"to_ids": false,
"type": "text",
"uuid": "5b98d0a6-d5b4-4972-9535-41ef950d210f",
"value": "Malicious"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562375",
"uuid": "5b98d0b5-b6dc-4660-bafe-4aa5950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536741558",
"to_ids": true,
"type": "md5",
"uuid": "5b98d0b6-b8a0-4c1a-b25e-4add950d210f",
"value": "56f5088f488e50999ee6cced1f5dd6aa"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536741558",
"to_ids": false,
"type": "text",
"uuid": "5b98d0b6-da60-4d85-98a3-437a950d210f",
"value": "Malicious"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562375",
"uuid": "5b98d0c5-f770-4581-a60b-4ecc950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536741573",
"to_ids": true,
"type": "md5",
"uuid": "5b98d0c5-eddc-407c-9109-4139950d210f",
"value": "cd6796f324ecb7cf34bc9bc38ce4e649"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536741574",
"to_ids": false,
"type": "text",
"uuid": "5b98d0c6-5b94-457e-839a-40a0950d210f",
"value": "Malicious"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562375",
"uuid": "5b98dff1-19c4-4d4f-91f2-43c5950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536745457",
"to_ids": true,
"type": "md5",
"uuid": "5b98dff1-7c7c-4294-8372-42b6950d210f",
"value": "94dfcabd8ba5ca94828cd5a88d6ed488"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536745458",
"to_ids": false,
"type": "text",
"uuid": "5b98dff2-5a58-4e5a-a828-4f5e950d210f",
"value": "Malicious"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562375",
"uuid": "5b98e001-5c08-4f9d-8437-4ef4950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536745473",
"to_ids": true,
"type": "md5",
"uuid": "5b98e001-4da0-4068-ac02-4e18950d210f",
"value": "14b6d24873f19332701177208f85e776"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536745473",
"to_ids": false,
"type": "text",
"uuid": "5b98e001-2ed8-4220-919f-40ac950d210f",
"value": "Malicious"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "14",
"timestamp": "1540562375",
"uuid": "5b98e014-abb8-4992-b683-45a6950d210f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1536745492",
"to_ids": true,
"type": "md5",
"uuid": "5b98e014-5bf8-4928-be72-4729950d210f",
"value": "abec84286df80704b823e698199d89f7"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "state",
"timestamp": "1536745493",
"to_ids": false,
"type": "text",
"uuid": "5b98e015-c9d0-498d-8a1b-44b5950d210f",
"value": "Malicious"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540560932",
"uuid": "17d52801-1094-4116-b67c-dfb490155e28",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540560938",
"to_ids": true,
"type": "md5",
"uuid": "b3ba7e9f-e8be-45d6-a54a-1abbfdd3c2c2",
"value": "81c3a3c5a0129477b59397173fdc0b01"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540560944",
"to_ids": true,
"type": "sha1",
"uuid": "8ef2cbcf-54f6-479a-a976-47c8ca04f914",
"value": "5feee99bd64af03698a2cdd3d0d445838bb0fc96"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540560944",
"to_ids": true,
"type": "sha256",
"uuid": "24980f7e-7efc-41fc-b978-24f074f6ed51",
"value": "8ae766795cda6336fd5cad9e89199ea2a1939a35e03eb0e54c503b1029d870c4"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540560945",
"uuid": "13cba369-4873-4943-8ded-6654aaed90c2",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540560945",
"to_ids": false,
"type": "datetime",
"uuid": "752d80cb-67e2-4fa1-823d-91b32168a2b9",
"value": "2018-09-04T11:17:30"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540560945",
"to_ids": false,
"type": "link",
"uuid": "1d357c9e-0297-43ae-8b19-a9f42fe246b3",
"value": "https://www.virustotal.com/file/8ae766795cda6336fd5cad9e89199ea2a1939a35e03eb0e54c503b1029d870c4/analysis/1536059850/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540560946",
"to_ids": false,
"type": "text",
"uuid": "2be7e87c-fe5f-4ba0-b75c-d012566c7176",
"value": "49/66"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540560946",
"uuid": "11e52a0b-8d2f-4a6f-bd20-3b4684fd8128",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540560946",
"to_ids": true,
"type": "md5",
"uuid": "41f51d0c-6d3b-41e8-a6b9-69c2ad7103f6",
"value": "21694c8db6234df74102e8b5994b7627"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540560946",
"to_ids": true,
"type": "sha1",
"uuid": "67e9ff01-c485-41ed-a250-6609021bf96a",
"value": "4d92b56cac6a02e70adbd16a9d1121c918f0c257"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540560947",
"to_ids": true,
"type": "sha256",
"uuid": "c40a871c-8718-434f-be9e-ce98b0dd24d9",
"value": "1b8d3e69fc214cb7a08bef3c00124717f4b4d7fd6be65f2829e9fd337fc7c03c"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540560950",
"uuid": "d2e92430-9479-40d6-be24-4582dd48ee4d",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540560950",
"to_ids": false,
"type": "datetime",
"uuid": "a0f4121e-298f-4348-8181-edb579baf2d5",
"value": "2018-09-03T14:59:04"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540560951",
"to_ids": false,
"type": "link",
"uuid": "084105c0-bc7f-4ef8-ad81-e230549ea1c3",
"value": "https://www.virustotal.com/file/1b8d3e69fc214cb7a08bef3c00124717f4b4d7fd6be65f2829e9fd337fc7c03c/analysis/1535986744/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540560955",
"to_ids": false,
"type": "text",
"uuid": "6f09c496-a236-4232-89b2-9ef988d2af40",
"value": "46/65"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540560955",
"uuid": "82c7687e-77c9-40d4-8376-65d990499d0f",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540560956",
"to_ids": true,
"type": "md5",
"uuid": "76844282-9d23-4c5b-87b2-9e9970e69b08",
"value": "6cb34af551b3fb63df6c9b86900cf044"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540560960",
"to_ids": true,
"type": "sha1",
"uuid": "520e93da-0a7d-4227-a73f-19d87694638f",
"value": "a09658ce5642f9bedf2e737d8da81d7ffc232c14"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540560960",
"to_ids": true,
"type": "sha256",
"uuid": "4f808660-909c-42c0-a8e2-2ff968191ca8",
"value": "ef400d73c6920ac811af401259e376458b498eb0084631386136747dfc3dcfa8"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540560966",
"uuid": "21573cf4-87c4-4e76-b2cf-4157da90ec01",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540560969",
"to_ids": false,
"type": "datetime",
"uuid": "f4336359-8225-4866-ab24-39432f3997d0",
"value": "2018-08-26T04:00:32"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540560970",
"to_ids": false,
"type": "link",
"uuid": "e684dd3b-fb0c-44fd-8d6f-5f4535fb8592",
"value": "https://www.virustotal.com/file/ef400d73c6920ac811af401259e376458b498eb0084631386136747dfc3dcfa8/analysis/1535256032/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540560970",
"to_ids": false,
"type": "text",
"uuid": "8c17f298-4244-4502-8736-4835f77bd594",
"value": "42/66"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540560970",
"uuid": "223d5132-bb63-4f57-b876-78c72c13bd26",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540560970",
"to_ids": true,
"type": "md5",
"uuid": "f8adaaf1-8e4c-4f20-9ef3-42714b997a17",
"value": "d7089e6bc8bd137a7241a7ad297f975d"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540560971",
"to_ids": true,
"type": "sha1",
"uuid": "ae38e969-09c3-4189-90b1-4cc1c3dbc9ac",
"value": "15062b26d9dd1cf7b0cdf167f4b37cb632ddbd41"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540560971",
"to_ids": true,
"type": "sha256",
"uuid": "2068b14b-14e7-4fda-bc0f-9a08d6c6944b",
"value": "08012e68f4f84bba8b74690c379cb0b1431cdcadc9ed076ff068de289e0f6774"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540560972",
"uuid": "575e6f18-7fb4-434c-be2a-ab4fdd9988d0",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540560972",
"to_ids": false,
"type": "datetime",
"uuid": "ab44a74f-496b-4521-8dd3-b5fbab358e91",
"value": "2018-10-16T11:13:35"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540560972",
"to_ids": false,
"type": "link",
"uuid": "a727d8bf-99ff-46e7-a383-a640eff7f507",
"value": "https://www.virustotal.com/file/08012e68f4f84bba8b74690c379cb0b1431cdcadc9ed076ff068de289e0f6774/analysis/1539688415/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540560973",
"to_ids": false,
"type": "text",
"uuid": "72be75bc-a4e8-44d0-947c-19a9591956e6",
"value": "49/67"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540560973",
"uuid": "01eca65b-dc2d-4189-8013-8f0ab30ace16",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540560973",
"to_ids": true,
"type": "md5",
"uuid": "3cb06119-f31c-4c2d-8300-30f18f134362",
"value": "6b061267c7ddeb160368128a933d38be"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540560973",
"to_ids": true,
"type": "sha1",
"uuid": "12b179e8-2528-4e2f-a708-4406adc5ad4b",
"value": "e90cd55d544a097306b61af8af7f73c524e00ad2"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540560974",
"to_ids": true,
"type": "sha256",
"uuid": "73679eb9-64ae-44de-8e75-a7f4a5f258db",
"value": "ca70aa2f89bee0c22ebc18bd5569e542f09d3c4a060b094ec6abeeeb4768a143"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540560974",
"uuid": "a3e7ff3e-4df2-4768-b183-d2c502ae4530",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540560974",
"to_ids": false,
"type": "datetime",
"uuid": "3e97bd2d-9dee-4125-96c4-7890d7e0727a",
"value": "2018-10-19T00:13:43"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540560975",
"to_ids": false,
"type": "link",
"uuid": "c187d08a-f5bb-4002-902b-0f2398242834",
"value": "https://www.virustotal.com/file/ca70aa2f89bee0c22ebc18bd5569e542f09d3c4a060b094ec6abeeeb4768a143/analysis/1539908023/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540560975",
"to_ids": false,
"type": "text",
"uuid": "8e1ed7bf-51d1-46a2-b926-b49f752750dc",
"value": "47/67"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540560975",
"uuid": "ee7fba01-3865-424d-a733-a98273164182",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540560976",
"to_ids": true,
"type": "md5",
"uuid": "7713b32a-f560-49c5-a99e-96229752a13c",
"value": "4126e1f34cf282c354e17587bb6e8da3"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540560976",
"to_ids": true,
"type": "sha1",
"uuid": "923ada1d-0105-492c-acdb-9305764f6003",
"value": "258537df5611d9cbf3f8f3f6ea703f35e0e47dfa"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540560977",
"to_ids": true,
"type": "sha256",
"uuid": "0e3ece2b-ce90-4743-bf68-2a7fb37a109c",
"value": "6829b51523f69bd0ea6ebc6157e989d269661567f3e62d92ae26d71e6abf6652"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540560977",
"uuid": "a1712e26-1ee5-43e7-9d94-9df09b5bfd10",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540560977",
"to_ids": false,
"type": "datetime",
"uuid": "20064d90-ba50-48ee-9971-4bf65970e567",
"value": "2018-09-06T06:43:05"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540560978",
"to_ids": false,
"type": "link",
"uuid": "a7a61b84-2bbe-4353-9412-49328ba6a605",
"value": "https://www.virustotal.com/file/6829b51523f69bd0ea6ebc6157e989d269661567f3e62d92ae26d71e6abf6652/analysis/1536216185/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540560978",
"to_ids": false,
"type": "text",
"uuid": "20cf9fe2-0ff7-414e-bf76-f31544edce38",
"value": "32/57"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540560978",
"uuid": "f0696971-99bc-4ec5-aaba-f572bb17c799",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540560978",
"to_ids": true,
"type": "md5",
"uuid": "73c1a210-0b31-4b8e-b6d6-20d3250b1fcd",
"value": "48ded52752de9f9b73c6bf9ae81cb429"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540560979",
"to_ids": true,
"type": "sha1",
"uuid": "bfc10981-29b3-4d75-a74d-72f969844c53",
"value": "1e8a2f1f751e5a9931bca5710b4f304798d665dc"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540560979",
"to_ids": true,
"type": "sha256",
"uuid": "46988fe5-1d3f-4ca1-9d02-e9f170444c5a",
"value": "d404c0a634cef0d32029286fde8efccb6dfe1809066bbec7ac32d42c5ce3bc04"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540560980",
"uuid": "e4b1b3cd-b5b1-475f-9221-1474cccf1a35",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540560980",
"to_ids": false,
"type": "datetime",
"uuid": "b54f8705-6f12-4fd2-9321-82a366fcff09",
"value": "2018-10-08T18:26:16"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540560980",
"to_ids": false,
"type": "link",
"uuid": "08868482-ce1b-409f-a45f-55c92b6afe77",
"value": "https://www.virustotal.com/file/d404c0a634cef0d32029286fde8efccb6dfe1809066bbec7ac32d42c5ce3bc04/analysis/1539023176/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540560981",
"to_ids": false,
"type": "text",
"uuid": "28cee124-4582-4776-a40e-55c9019c9ae2",
"value": "20/57"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540560981",
"uuid": "90b8ac49-be68-43a2-bd33-1f7d31416fd1",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540560981",
"to_ids": true,
"type": "md5",
"uuid": "46b2b1a1-ee0f-4350-ade6-9cea1acf756e",
"value": "94dfcabd8ba5ca94828cd5a88d6ed488"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540560981",
"to_ids": true,
"type": "sha1",
"uuid": "90ca27f7-c8ca-419a-8c98-e1f72a0f0a79",
"value": "999513f13fb9cea5d6321631a10a8fbf741a107a"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540560982",
"to_ids": true,
"type": "sha256",
"uuid": "a00e8b19-0c5d-40c3-9c09-f8f9c938708d",
"value": "efa6c2894896343e55337231989d46c665f84930ce99fa5a259f398e62d211f4"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540560986",
"uuid": "6acc54c0-0a33-4e71-9f4a-6df54ce4acf7",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540560991",
"to_ids": false,
"type": "datetime",
"uuid": "97fd63ab-ac19-471e-9e9a-58fee7fb6bbe",
"value": "2018-09-06T07:43:27"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540560994",
"to_ids": false,
"type": "link",
"uuid": "1db2d103-d671-40d8-86e4-256e7eef4a25",
"value": "https://www.virustotal.com/file/efa6c2894896343e55337231989d46c665f84930ce99fa5a259f398e62d211f4/analysis/1536219807/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540560995",
"to_ids": false,
"type": "text",
"uuid": "8f03f425-662e-46a5-95f1-6fd5d9f428be",
"value": "49/67"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540560995",
"uuid": "35c13dd8-251d-4a34-be6d-1fb24666df9d",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540560995",
"to_ids": true,
"type": "md5",
"uuid": "352cb59c-cac8-4f0f-b999-c4f34b221d8a",
"value": "abec84286df80704b823e698199d89f7"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540560995",
"to_ids": true,
"type": "sha1",
"uuid": "79d652a5-7994-4a85-85f9-92180bea303a",
"value": "f1203cf53b0ea0edaac0db04c88f6714274d284e"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540560996",
"to_ids": true,
"type": "sha256",
"uuid": "9f263dac-2403-451b-a613-96b0e6e01772",
"value": "e4226e9f6faaafaafca5f572770eeffa1512c496aa9ed63977729a01513d27a9"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540560996",
"uuid": "ddb5f005-3e5e-40d7-930a-6d8e22f52e8c",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540560996",
"to_ids": false,
"type": "datetime",
"uuid": "af4c19b9-5463-4e7d-9500-add188cdb784",
"value": "2018-09-06T09:44:02"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540561000",
"to_ids": false,
"type": "link",
"uuid": "6fb8e323-24f6-467d-971c-8b9ce5e131fe",
"value": "https://www.virustotal.com/file/e4226e9f6faaafaafca5f572770eeffa1512c496aa9ed63977729a01513d27a9/analysis/1536227042/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540561003",
"to_ids": false,
"type": "text",
"uuid": "f76c77d5-7899-4549-be03-5305d421b3dd",
"value": "37/66"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540561003",
"uuid": "ee3c16a6-e83e-41f5-8bb9-1b673c6f4631",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540561003",
"to_ids": true,
"type": "md5",
"uuid": "61096b01-ea4c-48c3-8e06-efef710db58a",
"value": "bbbcf6da5a4c352e8846bf91c3358d5c"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540561003",
"to_ids": true,
"type": "sha1",
"uuid": "5f817d0c-6e64-48a6-a71f-7a40326a32f1",
"value": "313aca049a83c362066cd130d6263af1bcd43565"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540561004",
"to_ids": true,
"type": "sha256",
"uuid": "e1fbb0a7-2bdd-4555-bbe9-e608c60e1ef2",
"value": "e2199fc4e4b31f7e4c61f6d9038577633ed6ad787718ed7c39b36f316f38befd"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540561004",
"uuid": "eba43f45-c2b4-4db8-9c0e-1db78ac1723b",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540561005",
"to_ids": false,
"type": "datetime",
"uuid": "e671e7a4-08b2-46bd-8fcf-e4a714d4b85f",
"value": "2018-08-27T12:36:49"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540561005",
"to_ids": false,
"type": "link",
"uuid": "c7b043b4-b952-4f76-ad03-5d4c2d185601",
"value": "https://www.virustotal.com/file/e2199fc4e4b31f7e4c61f6d9038577633ed6ad787718ed7c39b36f316f38befd/analysis/1535373409/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540561010",
"to_ids": false,
"type": "text",
"uuid": "e8da068d-c424-416b-9205-6e6ebdb2049f",
"value": "37/68"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540561010",
"uuid": "3a6d0b08-b37c-4a3b-b5e5-bc468b9e3f29",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540561010",
"to_ids": true,
"type": "md5",
"uuid": "d5e0426e-ed74-4be8-8b29-cb4d162d8c86",
"value": "5ad7d35f0617595f26d565a3b7ebc6d0"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540561010",
"to_ids": true,
"type": "sha1",
"uuid": "a9e064a5-35eb-487e-b1bb-e6ee228588c5",
"value": "cadb4e5fcc1338938808de8877e738243394ba96"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540561011",
"to_ids": true,
"type": "sha256",
"uuid": "81f43014-615e-45aa-9039-d13fcc0f07b1",
"value": "d3ef262bae0beb5d35841d131b3f89a9b71a941a86dab1913bda72b935744d2e"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540561011",
"uuid": "8d116c31-9689-40a3-bde1-a71d4eb05147",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540561011",
"to_ids": false,
"type": "datetime",
"uuid": "96484e92-5cb7-4eb1-8e41-cfcdd2431dab",
"value": "2018-08-23T18:34:15"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540561012",
"to_ids": false,
"type": "link",
"uuid": "1ac193d1-590f-4700-a929-791acf815f56",
"value": "https://www.virustotal.com/file/d3ef262bae0beb5d35841d131b3f89a9b71a941a86dab1913bda72b935744d2e/analysis/1535049255/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540561012",
"to_ids": false,
"type": "text",
"uuid": "f87dcded-5fff-45ab-b4f5-904ef082223d",
"value": "31/65"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540561012",
"uuid": "a4a77d79-a1cb-4813-9814-32aa83625427",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540561012",
"to_ids": true,
"type": "md5",
"uuid": "094730ab-4b6f-459a-9150-b1c84e75f2e1",
"value": "ffae703a1e327380d85880b9037a0aeb"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540561017",
"to_ids": true,
"type": "sha1",
"uuid": "3f17db9a-e0ce-4180-8dae-12976d31055d",
"value": "d48a81613b3c0186d563744e79d28c05df49c480"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540561021",
"to_ids": true,
"type": "sha256",
"uuid": "11304507-aa09-4ab0-84fc-9632b0468d2f",
"value": "d555dcb6da4a6b87e256ef75c0150780b8a343c4a1e09935b0647f01d974d94d"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540561024",
"uuid": "7b382898-bd12-421e-9a5c-80a51d64e9ba",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540561027",
"to_ids": false,
"type": "datetime",
"uuid": "730b0105-441f-401a-9f43-2c50f5f163aa",
"value": "2018-09-06T12:44:42"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540561032",
"to_ids": false,
"type": "link",
"uuid": "265fe10f-0597-445e-aba4-fe7cd20e8ed0",
"value": "https://www.virustotal.com/file/d555dcb6da4a6b87e256ef75c0150780b8a343c4a1e09935b0647f01d974d94d/analysis/1536237882/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540561032",
"to_ids": false,
"type": "text",
"uuid": "891aadde-5215-45ea-9efc-0d7f8de872f8",
"value": "47/66"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540561032",
"uuid": "72f8726d-7521-4b8a-bf1d-65decf2f9ca0",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540561033",
"to_ids": true,
"type": "md5",
"uuid": "c7f78aad-9005-47f5-a9f5-3cffed1b65c6",
"value": "cafda7b3e9a4f86d4bd005075040a712"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540561033",
"to_ids": true,
"type": "sha1",
"uuid": "ff78cee6-c683-4dbc-bc44-6977dd302623",
"value": "2707b7d9becb01d81b1b8e2a8858447ddbe6769c"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540561034",
"to_ids": true,
"type": "sha256",
"uuid": "bae2e356-b8e6-4499-a8e7-0f32d94ab320",
"value": "7c61fc881b84a60c84876f9d6ff74003349345694f3b7f0b08059687b5e6b846"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540561034",
"uuid": "838d564e-8276-45f3-9e49-c0abd287ea4d",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540561034",
"to_ids": false,
"type": "datetime",
"uuid": "484c625a-631c-4f2d-b8ce-0ccf162d5914",
"value": "2018-08-23T18:57:46"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540561035",
"to_ids": false,
"type": "link",
"uuid": "50889588-65e3-49fb-a392-9a1382044353",
"value": "https://www.virustotal.com/file/7c61fc881b84a60c84876f9d6ff74003349345694f3b7f0b08059687b5e6b846/analysis/1535050666/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540561035",
"to_ids": false,
"type": "text",
"uuid": "65f9731e-51e2-4965-8e03-dc4a9b9be0bf",
"value": "42/65"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540561035",
"uuid": "0eae6d47-696e-4503-af17-c9883dcc57a5",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540561035",
"to_ids": true,
"type": "md5",
"uuid": "6b8b57d8-3a59-4e6f-9d5b-cee4fa508d11",
"value": "cd6796f324ecb7cf34bc9bc38ce4e649"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540561041",
"to_ids": true,
"type": "sha1",
"uuid": "9d550e80-c846-4a92-8e97-3a4361ee5e32",
"value": "1abd0583b4ef0de8bbb29073aca8e1340c055ef3"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540561045",
"to_ids": true,
"type": "sha256",
"uuid": "c8b8a6fc-a151-4ee3-adac-a0a54a8ff42b",
"value": "0b6056e7ce278fb31bf644ef41e9532009e5dfbc33849b29f59c77ec993a8f46"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540561045",
"uuid": "ea64b90b-6673-4998-9f90-f6fbc3041c6c",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540561045",
"to_ids": false,
"type": "datetime",
"uuid": "52bd2cbe-562b-4ce0-bd06-456e66858d39",
"value": "2018-09-07T05:25:48"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540561046",
"to_ids": false,
"type": "link",
"uuid": "a03e21f8-6a20-488e-a8a4-d8189b8d8832",
"value": "https://www.virustotal.com/file/0b6056e7ce278fb31bf644ef41e9532009e5dfbc33849b29f59c77ec993a8f46/analysis/1536297948/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540561047",
"to_ids": false,
"type": "text",
"uuid": "3e097a55-b461-465c-aba1-f5b5d68597fc",
"value": "40/65"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540561047",
"uuid": "ec05b2e1-413c-4bde-9999-e0efbf661643",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540561047",
"to_ids": true,
"type": "md5",
"uuid": "de72b582-5b43-4d1e-bcb8-fd1f462b652c",
"value": "0bdb652bbe15942e866083f29fb6dd62"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540561048",
"to_ids": true,
"type": "sha1",
"uuid": "2f9f5e6d-24b9-483d-8df8-5442fe7a6353",
"value": "5ff9cbaec255fffdf119b24e007af777d71534ab"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540561048",
"to_ids": true,
"type": "sha256",
"uuid": "bfd20bdd-5f51-470d-a659-c172ab872806",
"value": "4f9a8e4f807b52f941213b0d55990a317b6466484847f51effc73a2180cf8eaf"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540561048",
"uuid": "f0ac4378-f39e-49b7-93e3-8c5f41578733",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540561054",
"to_ids": false,
"type": "datetime",
"uuid": "75dc98c9-24d0-4e52-810a-6e1436b4ac4a",
"value": "2018-10-12T04:31:19"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540561054",
"to_ids": false,
"type": "link",
"uuid": "ffc1f07c-16c2-4ce9-8738-d504bfceec94",
"value": "https://www.virustotal.com/file/4f9a8e4f807b52f941213b0d55990a317b6466484847f51effc73a2180cf8eaf/analysis/1539318679/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540561055",
"to_ids": false,
"type": "text",
"uuid": "a9a389c3-8a25-4753-b3df-9775e6d095a3",
"value": "32/58"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540561055",
"uuid": "41b36758-3651-4382-aba5-33202b135de2",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540561055",
"to_ids": true,
"type": "md5",
"uuid": "0ac6ff18-10f1-4b48-93ab-d0ba59226f04",
"value": "14b6d24873f19332701177208f85e776"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540561055",
"to_ids": true,
"type": "sha1",
"uuid": "b479617b-d1b1-408f-9bf4-ecfa249d27c8",
"value": "8596dc6dee6089318ab1d97f1dacd1f2cf36d1ab"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540561056",
"to_ids": true,
"type": "sha256",
"uuid": "1d5d1405-e7bd-4ceb-90eb-28cc6c8b0d99",
"value": "7f000893320d77e012686e20e1212e297408d5684335f7f24e40889401e24dff"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540561057",
"uuid": "aa249112-7421-48ef-aced-34a5e1cdff34",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540561057",
"to_ids": false,
"type": "datetime",
"uuid": "f659c736-91ab-4c93-bfef-ee7ddfd719c5",
"value": "2018-09-03T00:38:46"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540561057",
"to_ids": false,
"type": "link",
"uuid": "88ba177e-554e-4555-bb98-2ba2fca148ca",
"value": "https://www.virustotal.com/file/7f000893320d77e012686e20e1212e297408d5684335f7f24e40889401e24dff/analysis/1535935126/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540561058",
"to_ids": false,
"type": "text",
"uuid": "e7af5ac1-8187-466d-8cfb-2ba9a12b4954",
"value": "36/67"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540561058",
"uuid": "0ad45ff4-96d7-40c5-8287-2b9405931e06",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540561062",
"to_ids": true,
"type": "md5",
"uuid": "b8553cdc-f389-49b5-b667-fdb74d16eac3",
"value": "9e740241ca2acdc79f30ad2c3f50990a"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540561066",
"to_ids": true,
"type": "sha1",
"uuid": "c10e8eed-949a-458e-83f3-581e4cef4b46",
"value": "0c5e4cec03d2eea2b1dd5356fe05de64a0278cd6"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540561070",
"to_ids": true,
"type": "sha256",
"uuid": "a366a26f-d0d1-429a-9785-62a8252e98bf",
"value": "6ee19085ad5c17f989616d17ef68041910b3d0cbcf7e08cc7d7c1a1cb09e6b69"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540561070",
"uuid": "8bcf6c80-a4fc-42b4-a551-d67747c5fcf3",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540561070",
"to_ids": false,
"type": "datetime",
"uuid": "46482731-0918-4b1a-9c1c-db75dc8c306f",
"value": "2018-10-15T11:52:20"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540561075",
"to_ids": false,
"type": "link",
"uuid": "fd314919-d3a5-46af-af39-dab3f0fe70ed",
"value": "https://www.virustotal.com/file/6ee19085ad5c17f989616d17ef68041910b3d0cbcf7e08cc7d7c1a1cb09e6b69/analysis/1539604340/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540561079",
"to_ids": false,
"type": "text",
"uuid": "749fc609-017a-4228-b80c-0b20ded0dad3",
"value": "34/58"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540561084",
"uuid": "73eeed1a-3e38-4d43-9e43-3fd2a140882a",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540561085",
"to_ids": true,
"type": "md5",
"uuid": "5314758e-22b9-41ec-bb31-3acc6a5f6bcd",
"value": "56f5088f488e50999ee6cced1f5dd6aa"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540561085",
"to_ids": true,
"type": "sha1",
"uuid": "a7943933-7477-4392-98bf-bed5c97c6911",
"value": "597a06bd3b9987859d13658ff2d72689523cbd5b"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540561086",
"to_ids": true,
"type": "sha256",
"uuid": "f256ee3d-6e1b-4581-bfa8-b4fbbfd2e830",
"value": "fe29ed0336d7b3259ab8c391e0d0f40d2876f6fc83f5e57af888578636fccb7f"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540561086",
"uuid": "2ba1e0da-4d99-42ff-998e-183353fd98b3",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540561086",
"to_ids": false,
"type": "datetime",
"uuid": "c5d3a24e-ca0b-4b9b-85aa-56a6f5c95aca",
"value": "2018-08-23T18:33:20"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540561087",
"to_ids": false,
"type": "link",
"uuid": "19c77b42-491b-4a3a-a4a5-25762a5d304c",
"value": "https://www.virustotal.com/file/fe29ed0336d7b3259ab8c391e0d0f40d2876f6fc83f5e57af888578636fccb7f/analysis/1535049200/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540561087",
"to_ids": false,
"type": "text",
"uuid": "103a2582-3092-452a-af9f-ac0205415123",
"value": "48/66"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540561087",
"uuid": "560fd814-5524-484c-a8a5-a243cad76780",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540561087",
"to_ids": true,
"type": "md5",
"uuid": "2ce90e8b-40f1-49ab-b41b-07f606f3fb39",
"value": "cea1a63656fb199dd5ab90528188e87c"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540561088",
"to_ids": true,
"type": "sha1",
"uuid": "498d7750-25b0-405d-90f6-122fc86d1118",
"value": "ebd7186ff1968fab758b089ad726b02c6761e7b6"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540561088",
"to_ids": true,
"type": "sha256",
"uuid": "1865415f-7278-4788-97cf-64943f333b9a",
"value": "0c06e129902925c7ebd70e93d4d09707add781d8bd89cd557cda023045f3853e"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540561089",
"uuid": "62ab9f1b-fda8-43f3-9501-48006d175686",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540561089",
"to_ids": false,
"type": "datetime",
"uuid": "bfc026cb-6d84-412d-b743-1abd68f32e65",
"value": "2018-09-03T07:06:54"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540561089",
"to_ids": false,
"type": "link",
"uuid": "03d5740d-88f8-4784-a1e3-f03c6e6242a2",
"value": "https://www.virustotal.com/file/0c06e129902925c7ebd70e93d4d09707add781d8bd89cd557cda023045f3853e/analysis/1535958414/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540561090",
"to_ids": false,
"type": "text",
"uuid": "6cc946dc-89e5-47b7-b2ef-d94f27633a7a",
"value": "42/65"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540561090",
"uuid": "6dbac290-a64e-449e-99d3-f6fde4774b0a",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540561090",
"to_ids": true,
"type": "md5",
"uuid": "02bff3fe-e9c3-45c1-b186-eb57f051d504",
"value": "b054a7382adf6b774b15f52d971f3799"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540561091",
"to_ids": true,
"type": "sha1",
"uuid": "26732fe7-a2da-424c-bae7-567fdffd1a08",
"value": "b4d43cd2d81d17dec523915c0fc61b4b29e62c58"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540561091",
"to_ids": true,
"type": "sha256",
"uuid": "2f747473-be56-4a88-a6d8-8e2d6678fd58",
"value": "bdff852398f174e9eef1db1c2d3fefdda25fe0ea90a40a2e06e51b5c0ebd69eb"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540561092",
"uuid": "e33cba87-573e-4649-bb3e-28409afafd5e",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540561092",
"to_ids": false,
"type": "datetime",
"uuid": "260f7944-6d0d-4fdf-ae6a-9e3435767b08",
"value": "2018-10-22T20:12:42"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540561092",
"to_ids": false,
"type": "link",
"uuid": "42b72a7b-e17e-4a16-abef-a3b6afc8db85",
"value": "https://www.virustotal.com/file/bdff852398f174e9eef1db1c2d3fefdda25fe0ea90a40a2e06e51b5c0ebd69eb/analysis/1540239162/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540561093",
"to_ids": false,
"type": "text",
"uuid": "2b775835-e29f-437b-95e5-b2486368c296",
"value": "48/67"
}
]
},
{
"comment": "",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "11",
"timestamp": "1540561093",
"uuid": "f9fd2ead-4e36-4938-93bd-e45d32ada0d7",
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1540561093",
"to_ids": true,
"type": "md5",
"uuid": "0f0102f9-5087-4312-ae5a-99917e9aeca8",
"value": "c501ea6c56ba9133c3c26a7d5ed4ce49"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1540561093",
"to_ids": true,
"type": "sha1",
"uuid": "4db3db0f-9113-4f7d-840e-d2a7043f0bf5",
"value": "aa08f8e721dfd875de6139a1ad795620f1b2340a"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1540561094",
"to_ids": true,
"type": "sha256",
"uuid": "ad94bdfd-fa07-476c-9d0b-520ab66c20f4",
"value": "c0e22e80ea020ca8f71f58a8b53855293abdf8d4e0b34a69068004abaac60f42"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540561097",
"uuid": "9727dbb6-a8b8-41df-883a-0792bf695df6",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540561103",
"to_ids": false,
"type": "datetime",
"uuid": "9db75639-fc1d-48dd-9b91-8dd9fc2a145d",
"value": "2018-08-27T19:17:37"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540561106",
"to_ids": false,
"type": "link",
"uuid": "46f0fe44-40b8-4ffd-92d7-f756a36d6cec",
"value": "https://www.virustotal.com/file/c0e22e80ea020ca8f71f58a8b53855293abdf8d4e0b34a69068004abaac60f42/analysis/1535397457/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540561112",
"to_ids": false,
"type": "text",
"uuid": "200d0042-8f64-4bac-a7d3-e1b1f1ae7e32",
"value": "49/67"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562376",
"uuid": "5df1a9a1-e8d3-4b8f-af17-a212d7d13c6c",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562376",
"to_ids": false,
"type": "datetime",
"uuid": "5141e67a-72d0-4315-9b06-41ba50849c16",
"value": "2018-10-16T11:13:35"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562376",
"to_ids": false,
"type": "link",
"uuid": "d484d143-7934-48bf-ac5c-4efb441105e7",
"value": "https://www.virustotal.com/file/08012e68f4f84bba8b74690c379cb0b1431cdcadc9ed076ff068de289e0f6774/analysis/1539688415/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562377",
"to_ids": false,
"type": "text",
"uuid": "03597df1-738d-4c14-ae7b-fad4dc07bba5",
"value": "49/67"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562377",
"uuid": "8e7e9a50-4555-4d2e-ad70-c875e120f280",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562377",
"to_ids": false,
"type": "datetime",
"uuid": "bc9c2a80-7b0d-416e-b574-525da3edbb43",
"value": "2018-08-23T18:34:15"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562377",
"to_ids": false,
"type": "link",
"uuid": "961dd50a-cc83-4547-a43b-c34d1f395296",
"value": "https://www.virustotal.com/file/d3ef262bae0beb5d35841d131b3f89a9b71a941a86dab1913bda72b935744d2e/analysis/1535049255/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562378",
"to_ids": false,
"type": "text",
"uuid": "63c4f25b-e9de-4894-94ba-43d1071e0964",
"value": "31/65"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562378",
"uuid": "37f4c1cb-984c-427a-bad7-74753a1c5b68",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562378",
"to_ids": false,
"type": "datetime",
"uuid": "e1ee0ffa-c305-44df-bda8-4b0cb58a5b05",
"value": "2018-09-06T12:44:42"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562378",
"to_ids": false,
"type": "link",
"uuid": "a876d388-e8fe-4166-bf01-e7b921f44019",
"value": "https://www.virustotal.com/file/d555dcb6da4a6b87e256ef75c0150780b8a343c4a1e09935b0647f01d974d94d/analysis/1536237882/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562379",
"to_ids": false,
"type": "text",
"uuid": "87f408e2-5a3e-4072-bb37-43f1e0965e51",
"value": "47/66"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562379",
"uuid": "91867296-98cb-4195-927e-ec2f07837c44",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562379",
"to_ids": false,
"type": "datetime",
"uuid": "356b1653-1953-47ed-bfd1-7d1587242211",
"value": "2018-08-23T18:57:46"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562379",
"to_ids": false,
"type": "link",
"uuid": "3f0e2911-8cd5-437d-a829-a58fe4c8655f",
"value": "https://www.virustotal.com/file/7c61fc881b84a60c84876f9d6ff74003349345694f3b7f0b08059687b5e6b846/analysis/1535050666/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562380",
"to_ids": false,
"type": "text",
"uuid": "0805d49f-fcc1-4eba-88b3-6ed4810ab7e0",
"value": "42/65"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562380",
"uuid": "da01dcf1-22db-48e5-88d7-67bdb76d5a65",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562380",
"to_ids": false,
"type": "datetime",
"uuid": "3c25766b-5ae0-4343-ab86-def0d2823883",
"value": "2018-10-12T04:31:19"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562380",
"to_ids": false,
"type": "link",
"uuid": "37bdf76f-cdce-452b-9c8c-8aa774643ae0",
"value": "https://www.virustotal.com/file/4f9a8e4f807b52f941213b0d55990a317b6466484847f51effc73a2180cf8eaf/analysis/1539318679/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562381",
"to_ids": false,
"type": "text",
"uuid": "487a36c6-3a8e-483f-bffe-22b4f0aee4f5",
"value": "32/58"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562381",
"uuid": "523c58ae-4fb4-4289-8541-835a177c3825",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562381",
"to_ids": false,
"type": "datetime",
"uuid": "d05b7e73-519b-407b-88f2-47ba34e64b54",
"value": "2018-10-15T11:52:20"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562381",
"to_ids": false,
"type": "link",
"uuid": "e67261ee-f3dc-41de-9edb-82e222fed967",
"value": "https://www.virustotal.com/file/6ee19085ad5c17f989616d17ef68041910b3d0cbcf7e08cc7d7c1a1cb09e6b69/analysis/1539604340/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562382",
"to_ids": false,
"type": "text",
"uuid": "78b13890-27a8-48af-80a4-1749cc3dd126",
"value": "34/58"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562382",
"uuid": "f4627b38-7e54-444f-8e64-d4c1414ff41a",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562382",
"to_ids": false,
"type": "datetime",
"uuid": "f515d965-5863-4f55-8da5-453f71eac3ed",
"value": "2018-08-23T18:33:20"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562382",
"to_ids": false,
"type": "link",
"uuid": "6ea0ea6f-f09d-4d31-b1b8-88b84a33c37e",
"value": "https://www.virustotal.com/file/fe29ed0336d7b3259ab8c391e0d0f40d2876f6fc83f5e57af888578636fccb7f/analysis/1535049200/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562383",
"to_ids": false,
"type": "text",
"uuid": "e5ff31de-e43f-43a5-8a42-b1c260f91cde",
"value": "48/66"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562383",
"uuid": "d7a3431d-c624-464c-8849-e5530e5cb087",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562383",
"to_ids": false,
"type": "datetime",
"uuid": "3feb0cba-9aef-4f65-9445-540e4112a89e",
"value": "2018-10-22T20:12:42"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562383",
"to_ids": false,
"type": "link",
"uuid": "04991519-8a7c-41de-9bae-1c379c88fb1e",
"value": "https://www.virustotal.com/file/bdff852398f174e9eef1db1c2d3fefdda25fe0ea90a40a2e06e51b5c0ebd69eb/analysis/1540239162/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562384",
"to_ids": false,
"type": "text",
"uuid": "9cb98854-6e3d-48c8-a434-623899ec71b3",
"value": "48/67"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562384",
"uuid": "5a415b19-6671-44dc-86d4-8006edbd73f2",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562384",
"to_ids": false,
"type": "datetime",
"uuid": "841e8a38-8fb4-4b24-a990-383e109213f8",
"value": "2018-09-03T14:59:04"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562388",
"to_ids": false,
"type": "link",
"uuid": "7cd3a56c-2ef6-4007-9df9-e27aac45e848",
"value": "https://www.virustotal.com/file/1b8d3e69fc214cb7a08bef3c00124717f4b4d7fd6be65f2829e9fd337fc7c03c/analysis/1535986744/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562393",
"to_ids": false,
"type": "text",
"uuid": "9299dd9e-dacb-45ea-ba44-58ca209de635",
"value": "46/65"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562395",
"uuid": "0a95b23d-be04-48fc-8696-45f1e5c20802",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562398",
"to_ids": false,
"type": "datetime",
"uuid": "a0a4b85c-e53f-4d66-bfff-bfc3547a478f",
"value": "2018-09-04T11:17:30"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562399",
"to_ids": false,
"type": "link",
"uuid": "02cfecbd-f423-4c57-990f-6d38357feaaa",
"value": "https://www.virustotal.com/file/8ae766795cda6336fd5cad9e89199ea2a1939a35e03eb0e54c503b1029d870c4/analysis/1536059850/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562399",
"to_ids": false,
"type": "text",
"uuid": "5dba2b1e-b18a-4ac9-bfe2-9f1f776dda42",
"value": "49/66"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562399",
"uuid": "57cce45d-bd28-466d-aed2-aae7e6e5d7f9",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562399",
"to_ids": false,
"type": "datetime",
"uuid": "9b807e08-8a83-43b5-957c-752d770b9b7f",
"value": "2018-08-26T04:00:32"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562400",
"to_ids": false,
"type": "link",
"uuid": "fb9f348f-0b4b-4c5c-ae40-efc74b5fe125",
"value": "https://www.virustotal.com/file/ef400d73c6920ac811af401259e376458b498eb0084631386136747dfc3dcfa8/analysis/1535256032/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562400",
"to_ids": false,
"type": "text",
"uuid": "24dcd85e-74e8-4c74-9315-25617d7f2635",
"value": "42/66"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562400",
"uuid": "6c4f65aa-d78c-4cb5-bf8e-a9eb28bc2979",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562400",
"to_ids": false,
"type": "datetime",
"uuid": "2d05adb6-ea7b-4d29-8bc1-82619561b21e",
"value": "2018-10-19T00:13:43"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562401",
"to_ids": false,
"type": "link",
"uuid": "753f7fee-cb1d-4344-8439-a3826bb2ff29",
"value": "https://www.virustotal.com/file/ca70aa2f89bee0c22ebc18bd5569e542f09d3c4a060b094ec6abeeeb4768a143/analysis/1539908023/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562401",
"to_ids": false,
"type": "text",
"uuid": "d0ec6794-7487-47a7-bc6a-f118c67993b3",
"value": "47/67"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562401",
"uuid": "1a9bebf7-05fe-42e0-8b64-56a506005c3d",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562401",
"to_ids": false,
"type": "datetime",
"uuid": "00628478-3649-4e9a-95fd-f5b29dc59d3b",
"value": "2018-09-06T06:43:05"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562402",
"to_ids": false,
"type": "link",
"uuid": "75437047-df51-4349-9853-53cabbff632d",
"value": "https://www.virustotal.com/file/6829b51523f69bd0ea6ebc6157e989d269661567f3e62d92ae26d71e6abf6652/analysis/1536216185/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562402",
"to_ids": false,
"type": "text",
"uuid": "d2cbcc4b-1d59-481d-bc3d-3b12357a6085",
"value": "32/57"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562402",
"uuid": "3a1b28e1-1814-493b-b6dd-dc1122647ad4",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562402",
"to_ids": false,
"type": "datetime",
"uuid": "f3237f5b-5c47-48ba-99cd-4b92bdc83caa",
"value": "2018-10-08T18:26:16"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562403",
"to_ids": false,
"type": "link",
"uuid": "4dafb52c-3a66-46a2-a1dc-e5fc90764d9f",
"value": "https://www.virustotal.com/file/d404c0a634cef0d32029286fde8efccb6dfe1809066bbec7ac32d42c5ce3bc04/analysis/1539023176/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562406",
"to_ids": false,
"type": "text",
"uuid": "4937617f-7442-4f86-8214-c9d06f19fdc5",
"value": "20/57"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562411",
"uuid": "be039ea8-ee2e-41d4-b0b0-f5bec7b30ba0",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562417",
"to_ids": false,
"type": "datetime",
"uuid": "513cd9a6-05e3-4364-8335-c95165cf1e07",
"value": "2018-09-06T07:43:27"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562421",
"to_ids": false,
"type": "link",
"uuid": "4bc2d006-a578-4a55-890d-027b9dc33834",
"value": "https://www.virustotal.com/file/efa6c2894896343e55337231989d46c665f84930ce99fa5a259f398e62d211f4/analysis/1536219807/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562425",
"to_ids": false,
"type": "text",
"uuid": "2c64817a-3cd7-4745-966a-bb8b4d58fe7d",
"value": "49/67"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562425",
"uuid": "6f6d7954-c7b2-48e1-bc03-9397978a8249",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562426",
"to_ids": false,
"type": "datetime",
"uuid": "d8e69658-da48-4573-8dcd-694e8a1433be",
"value": "2018-09-06T09:44:02"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562426",
"to_ids": false,
"type": "link",
"uuid": "448893c3-8315-4fe5-884e-8bc2b4e1a731",
"value": "https://www.virustotal.com/file/e4226e9f6faaafaafca5f572770eeffa1512c496aa9ed63977729a01513d27a9/analysis/1536227042/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562427",
"to_ids": false,
"type": "text",
"uuid": "10acfb4e-2c57-4ebd-a2b5-1cbf9a6fd898",
"value": "37/66"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562427",
"uuid": "8f12f6da-6b48-4f90-93f1-482eeda63605",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562427",
"to_ids": false,
"type": "datetime",
"uuid": "562944f2-4214-4f69-8ddd-addbd9257656",
"value": "2018-08-27T12:36:49"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562428",
"to_ids": false,
"type": "link",
"uuid": "1bb6b1c0-8488-4604-9fbe-d0c927a94d98",
"value": "https://www.virustotal.com/file/e2199fc4e4b31f7e4c61f6d9038577633ed6ad787718ed7c39b36f316f38befd/analysis/1535373409/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562428",
"to_ids": false,
"type": "text",
"uuid": "f3385c7e-991e-4d74-bdbb-82980ef9ef33",
"value": "37/68"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562428",
"uuid": "7701a378-4acd-4cc2-b8af-9477b79fb4ed",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562428",
"to_ids": false,
"type": "datetime",
"uuid": "89c68f73-e82b-43d3-84af-24428d22bc2d",
"value": "2018-09-07T05:25:48"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562429",
"to_ids": false,
"type": "link",
"uuid": "865a9c5a-febb-41dc-bcaa-2932c4139ef0",
"value": "https://www.virustotal.com/file/0b6056e7ce278fb31bf644ef41e9532009e5dfbc33849b29f59c77ec993a8f46/analysis/1536297948/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562430",
"to_ids": false,
"type": "text",
"uuid": "76b38090-24fe-409c-87b3-fdfd95e520dd",
"value": "40/65"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562430",
"uuid": "c211aec8-756e-4d1e-8e32-05644b06bfb9",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562430",
"to_ids": false,
"type": "datetime",
"uuid": "f9fa4b7f-ac2e-4320-a9fb-ba91bacd3acf",
"value": "2018-09-03T00:38:46"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562434",
"to_ids": false,
"type": "link",
"uuid": "651e2b4a-d444-4441-9961-1569e6a8903a",
"value": "https://www.virustotal.com/file/7f000893320d77e012686e20e1212e297408d5684335f7f24e40889401e24dff/analysis/1535935126/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562441",
"to_ids": false,
"type": "text",
"uuid": "c11e4010-6214-468e-be59-50c87161b082",
"value": "36/67"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562444",
"uuid": "a6d9f960-39af-4cc8-ae32-3d92846eb8b0",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562452",
"to_ids": false,
"type": "datetime",
"uuid": "da92d44d-e295-4afc-82a7-4ac729da0ddc",
"value": "2018-09-03T07:06:54"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562452",
"to_ids": false,
"type": "link",
"uuid": "93bbaa39-30be-414a-810f-30c3f6e2b06d",
"value": "https://www.virustotal.com/file/0c06e129902925c7ebd70e93d4d09707add781d8bd89cd557cda023045f3853e/analysis/1535958414/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562453",
"to_ids": false,
"type": "text",
"uuid": "4065ca64-c647-4ed3-adbb-996096d4d9b2",
"value": "42/65"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "2",
"timestamp": "1540562453",
"uuid": "d6cf1798-bd22-499b-a0b7-0e9457214789",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "last-submission",
"timestamp": "1540562453",
"to_ids": false,
"type": "datetime",
"uuid": "cf9054c8-fd32-4056-844e-a77a77cb1709",
"value": "2018-08-27T19:17:37"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "permalink",
"timestamp": "1540562454",
"to_ids": false,
"type": "link",
"uuid": "21525f34-0d63-4ea8-ac35-6b0e26f6f215",
"value": "https://www.virustotal.com/file/c0e22e80ea020ca8f71f58a8b53855293abdf8d4e0b34a69068004abaac60f42/analysis/1535397457/"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "detection-ratio",
"timestamp": "1540562454",
"to_ids": false,
"type": "text",
"uuid": "1c87d370-03d1-43a7-a94d-a899f47a5bcb",
"value": "49/67"
}
]
}
]
}
}
Reference in a new issue Copy permalink