2023-04-21 13:25:09 +00:00
{
"Event" : {
"analysis" : "2" ,
"date" : "2018-12-13" ,
"extends_uuid" : "" ,
"info" : "OSINT - New Bomb Threat Email Scam Campaign Demanding $20K in Bitcoin" ,
"publish_timestamp" : "1545339390" ,
"published" : true ,
"threat_level_id" : "3" ,
"timestamp" : "1545142940" ,
"uuid" : "5c18a87a-ba34-4abe-9a37-424d950d210f" ,
"Orgc" : {
"name" : "CIRCL" ,
"uuid" : "55f6ea5e-2c60-40e5-964f-47a8950d210f"
} ,
"Tag" : [
{
"colour" : "#ffffff" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "tlp:white" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#509f00" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "circl:incident-classification=\"scam\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#00b2d9" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "veris:action:social:variety=\"Scam\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#00234d" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "riskiq:threat-type=\"scam\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#006ded" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "riskiq:threat-name=\"scam-scareware\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
}
] ,
"Attribute" : [
{
"category" : "External analysis" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545119928" ,
"to_ids" : false ,
"type" : "link" ,
"uuid" : "5c18a88c-7c98-4438-bd45-48ff950d210f" ,
"value" : "https://www.bleepingcomputer.com/news/security/new-bomb-threat-email-scam-campaign-demanding-20k-in-bitcoin/" ,
"Tag" : [
{
"colour" : "#00223b" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "osint:source-type=\"blog-post\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
}
]
} ,
{
"category" : "External analysis" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545119927" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5c18a8aa-3e6c-45a0-a441-4e41950d210f" ,
"value" : "A new twist in the scam extortion emails is a new email campaign originating from Russia that contains a bomb threat stating they will detonate a bomb if the recipient does not send a $20,000 USD bitcoin payment.\r\n\r\nThere are reports of these emails being received throughout the U.S.A and contain subject lines similar to \"My device is inside your building\", \"No need to be heroic\", or \"Rescue service will complicate the situation\".\r\n\r\nThese emails then proceed to state that a mercenary created an explosive device made of \"lead azide\", \"trinitrotoluene\" [sic], or some other material and has placed it in the recipient's building. It goes on to further state that if the recipient does not pay a $20,000 USD bitcoin payment, the device will be detonated by the end of the day." ,
"Tag" : [
{
"colour" : "#00223b" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "osint:source-type=\"blog-post\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
}
]
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545119992" ,
"to_ids" : false ,
"type" : "email-subject" ,
"uuid" : "5c18a8f8-9a40-4f44-8fa8-48e2950d210f" ,
"value" : "My device is inside your building"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545119992" ,
"to_ids" : false ,
"type" : "email-subject" ,
"uuid" : "5c18a8f8-bdc4-46c2-8326-4b06950d210f" ,
"value" : "No need to be heroic"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545119992" ,
"to_ids" : false ,
"type" : "email-subject" ,
"uuid" : "5c18a8f8-6e0c-4356-8d09-4555950d210f" ,
"value" : "Rescue service will complicate the situation"
} ,
{
"category" : "Payload delivery" ,
"comment" : "Bomb Threat Scam" ,
"data" : " / 9 j / 4 A A Q S k Z J R g A B A Q A A A Q A B A A D / 4 g l 0 S U N D X 1 B S T 0 Z J T E U A A Q E A A A l k A A A A A A I A A A B t b n R y U k d C I F h Z W i A H 1 A A M A B c A C Q A B A A l h Y 3 N w T V N G V A A A A A B T R U M g R l B E I A A A A A A A A A A A A A A A A Q A A 9 t U A A Q A A A A D T L F N F Q y A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A 1 j c H J 0 A A A B I A A A A D h k Z X N j A A A B W A A A A I B k b W 5 k A A A B 2 A A A A H p k b W R k A A A C V A A A A G J y W F l a A A A C u A A A A B R n W F l a A A A C z A A A A B R i W F l a A A A C 4 A A A A B R 3 d H B 0 A A A C 9 A A A A B R y V F J D A A A D C A A A A g x n V F J D A A A F F A A A A g x i V F J D A A A H I A A A A g x j Y W x 0 A A A J L A A A A B R 2 a W V 3 A A A J Q A A A A C R 0 Z X h 0 A A A A A E N v c H l y a W d o d C A o Y y k g M j A w M y B T Y W 1 z d W 5 n I E V s Z W N 0 c m 9 u a W N z I E N v L i w g T H R k A G R l c 2 M A A A A A A A A A J F N h b X N 1 b m c g L S B O Y X R 1 c m F s I E N v b G 9 y I F B y b y A x L j A g S U N N A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A Z G V z Y w A A A A A A A A A d U 2 F t c 3 V u Z y B F b G V j d H J v b m l j c y B D b y 4 s I E x 0 Z A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A G R l c 2 M A A A A A A A A A B S A g I C A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B Y W V o g A A A A A A A A f D Q A A E M M A A A B 0 1 h Z W i A A A A A A A A B V Q Q A A p C Y A A B h W W F l a I A A A A A A A A C V g A A A Y 0 Q A A u Q N Y W V o g A A A A A A A A 8 z 4 A A Q A A A A E W c G N 1 c n Y A A A A A A A A B A A A A A A A A A Q A D A A c A C w A R A B g A I A A p A D Q A Q Q B O A F 0 A b g C A A J Q A q Q D A A N g A 8 g E N A S o B S Q F p A Y s B r w H U A f s C J A J P A n s C q Q L Z A w o D P Q N y A 6 k D 4 g Q c B F k E l w T X B R k F X Q W i B e o G M w Z + B s s H G g d r B 74 I E w h q C M M J H Q l 6 C d k K O Q q c C w E L Z w v Q D D o M p w 0 W D Y Y N + Q 5 u D u U P X g / Z E F Y Q 1 R F W E d k S X h L m E 28 T + x S J F R k V q h Y / F t U X b R g I G K Q Z Q x n k G o c b L B v U H H 4 d K R 3 X H o c f O h / u I K U h X i I Z I t c j l i R Y J R w l 4 y a r J 3 Y o Q y k S K e Q q t y u O L G Y t Q C 4 d L v w v 3 j D B M a c y k D N 6 N G c 1 V j Z I N z w 4 M j k q O i U 7 I j w h P S M + J z 8 u Q D Z B Q U J P Q 19 E c U W F R p x H t U j R S e 9 L D 0 w y T V d O f 0 + p U N V S B F M 1 V G h V n l b X W B F Z T l q O W 9 B d F F 5 b X 6 R g 8 G I + Y 49 k 4 m Y 3 Z 49 o 6 W p G a 6 V t B 25 r b 9 J x O 3 K n d B V 1 h X b 4 e G 555 n t g f N 1 + X X / f g W O C 6 o R z h f + H j o k f i r K M S I 3 h j 3 y R G Z K 5 l F y W A Z e p m V O b A J y v n m G g F a H M o 4 a l Q q c B q M K q h a x M r h W v 4 L G u s 3 + 1 U r c o u Q C 627 y 4 v p j A e 8 J g x E j G M s g g y g / M A c 32 z + 7 R 6 N P l 1 e T X 5 t n q 2 / H d + + A I 4 h f k K O Y 96 F T q b e y J 7 q j w y v L u 9 R X 3 P v l q + 5 n 9 y v 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
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545120025" ,
"to_ids" : false ,
"type" : "attachment" ,
"uuid" : "5c18a919-3e00-4587-abb4-4ea2950d210f" ,
"value" : "bomb-threat-scam.jpg"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"data" : " i V B O R w 0 K G g o A A A A N S U h E U g A A A r k A A A G l C A I A A A B x w H m e A A A A B n R S T l M A A Q A A A A B T x i 4 h A A B 9 f U l E Q V R 42 u y 9 X Y w j 15 U m y H n i I x / 5 y B f L N H o X I P p h Q C w E D D G 908 t Z W + j c W m C L C 5 Q N V g M u 0 J B 3 m 1 p g h X T r R Q 8 r T Z a q I K V s S U 7 J k j q F q b a y y u 4 S N U r D t A 3 b l K w Z U 7 B V S k u Q T a F k m b J h m W 2 p 2 n T P C x 9 z 743 g f 3 w n e C 4 j G E l m f h 8 O h B Q r I u 6555577 x c 3 b s S X + t S n P v X f //XPm2X/JpWi0WgbZBs3yNBotGlLkSvQaDRyBRqNFsYVHnv2m+QKNBqNXIFGo4lc4SvVvyFXoNFo5Ao0Gk3kCnfxGQSNRiNXoNFoIVzhlVdeIVeg0WjkCjQaTeQKd999d7RL/PFn1x6+fGXGvvmzP5Ir0Gg0cgUa7ZRwhb+I+gzC4wovNDu337s9st9+zHUFGo1GrkCjnRau8MTfX4rOFa5+6+d/mv/9o3d/8OL+N3avmpWGR3dv3PrI/7Hz6o1nn7h8+crlrz5/49XOR+ODf3G4/+zXr1591Bx89alrhz/9WfPGC1977NHLV5946sbr731CrkCjkSvQaLST4gqPPvdiDFzhxZ9/Mv9799XnH/7qiz96t/Pe7c7bt39vfrnzmx88dfXRZxrttzudt3/6sv37+x/cmRz8rdfevf1e5xev3fj6w5cfN4e91en88lbzuceufO27t8kVaDRyBRqNtqnfYgrsV/hG8zfD6f/yUz94f3Lkx2/dePzhZ1/vTpOJx7711p8CB//+9ecuP37zXf+wf/llw5z1apdcgUYjV6DRaJvMFa796PYH7//Gtw8/+hPkCrcPn5pdIbjd/Nrlrx8GicWfbr149dFrt4abHrrf/8bDTzXfJ1eg0cgVaDTaBnMFtF9hea7w33/x4tUr13728dR1mu+RK9Bo5Ao0Gu20c4WPf37jUfMM4ncLn0GQK9Bo5Ao0Gu1McoV/vXM7bG8juQKNRq5Ao9HOOlfw35l8Eb0zSa5Ao5Er0Gi0U8sV+I1nGo1GrkCjkSuQK9BoNHIFGo1cgVyBRqORK9BoNHIFGo1GrkCj0Ry5wuef/wy5Ao1GI1eg0WgiV6i9kGcUaDQajUajiVyhUr2LUaDRaDQajSZyhS99+zOMAo1Go9FoNJErlL/CZxA0Go1Go9FO13sQNBqNRqPRkuMKX3ic6wo0Go1Go9FkrvDF69yvQKPRaDQajc8gaDQajUajnShX+OPtnzVf/cXv1qluH3/w5mvfO3zljd8ufYUP3zi89szuE9/79XKnf/RB+4ffuxnFgeSrvIlFJ+btR+/86OaNZ679+NccOGg0GrnCMgYVqH177/vfuPp085d/cr7mnd/ffrvz4Z1lXXrt4XP33HPPxSffDPzTJ28+c+/5cxceeKmz7BUiOrC0ffLRB51f/e6TBEvUupFU0fHYct5uVh1pNBpt9Vzhkw/ah9ee+uqjD1++cvmxrz934we//OcluUL3p9967puvv+/u3C8Pn3h4//WQtYqPvveAHbwBHnilFzKyd6592R507oHvfbRJXOEPTa+69/5j50QnM+wGuQKNRqOp7bev3D89Z116+p3AMR/85NrD9108f+6ec+cv3vfIzXf+MJz4bt185IFLF8xodO7Cpft3m+99coJc4eO3bjz+8GPP33z91tvvvvvWrdebh+33/rQkV1jaFnKFj7/3IOYK5x5ohnEFE+vDp5+8tjDE68YVXnngnnXgCtANcgUajUZT26+v33fu3id/8vY771h7zyyhzy/ftncvXXrgyZs//slrP77+0KVz91x4pO0d89Eb1x77x8MfvtFu+79feubtk+MKnZe/euVrh7cXzd+/f23/0d3Djs8VDLfY3//61atXLn/1G9e+O9m7MEcjPnr3By/awx69+tQLN3/6wfgRw0ed12/4p5tljFdvD8u6fMW3yzd+EfYw4vWH7Ch+7qEfBkb2e86f92lZ/crNt++AQf9XLz10/5cvXrBH2cPuv3IoHHb/eVvEfdfemWcYH7/xzP2XLpz3PLhw6YHHvtf5eOp085NPDOcI4IdvXH/kvvG/3Hy7h2biN3Yv2Co80p76pxHuu/k7PJnBKkslfnT4wLCSw/Q1Hj/YvOOtHzwIp0bsxsKiH/KLtjz48Fd3poq+sNv2D3vvmUs2Xve/8rvgRoHDx4Y82rTQtTfviDEPaU2nQAW9DXKFXx36ZXlFXbj3gSe/96tAWeF1dM8BGo12Ouydpy+Zpe252eQPP7xy8fyl3XZgJPn4xw+dv+fStffACGPvjeeO/+DwwUvj0fGZ10Yj6oc/3jVD1vlzw9HxiZcOn37QDkDnzGEPXn+ztwxXsCTg4adffvufXbjC1W+8+OrP3up03nr95lNXDdXo3AlwhTu3m09dfeLaq7947ze33371xd3LT9x891/s77/5wTNXH33qn15/q3P7l+/eeut2b1jWs823f/th19g//8ufl+MKdhw/7/914cpPPg4M+sPDzFHjw3bbc4d9+MbuJe/PR36MdsO9sXvRnH7x4sXhBYarSSMHpjy4OEyCj9948tLo34Zefvna2zquYBrZ4tJDTYkroCqLJf7uZn085ff8hzoXHrtlTnnzMVv2hUfe+ARyhTk3woq+5Rdtz7jg/duFB7/3oVf0/ecm4frwpft9Rz6c6yTvPHPv6Npmbjdu/2phzFFragMleRvgCsGyzt93/VdzZcl1XCoHaDTa6bD2I+fPP3jY+bD3yQxXePjCuYuAK5ih49z5B5u9uT3a7afvO3/+gcO5MfPPdzrt19tvvvPOm69ff/DiPecf/pH/tP1X/3ivGc6uv/7mm2/8yP7DPefvvXLTrk9878n6+UUrptJ+hTu/vXXz2ccfvvrEMzea/7Xz+zsKrjC9eOBRh2+99ac5rvDxz288evnGrT8OD+v91/0rVxvvDh95PPt61/EZhIYr+PW3gZ66vQtyBf/v99FhF+5/sG6XFBbshfy499sPP3jnuneB+o1fT07356oPDh/w1iUe/LHJjN/6E8iFh+0k9PEHN71/Ov+Q/afFXEH5DGK2yiEl+rs3zpm/P379kfP3jIr44Pq93iGv3XF+BoGKPlf/R+/W/3f+jfb93mrEr2/eN77UcBnj3hu/DjzVs7+ff+Cmf9f+8Z1PFsYctmZkbzFX8P/3o1s+oTn/yOtz1Eqq43I5QKPRToXd+dEjl4Z3GecvPfj066HvZJnp48L5+o2pIbc3egB/Edw0TpvhB+eGy8b+36MHFh9cr9vxavS848r5e/zbsKXeg/iXj27f+lHj2teuXtn9z6++94kDV/jz7cPdy99o/maOK9w+fOrK+LHC0L75sz96v3/tu7f/vDKu8Od3/LXfB394J4wrwMN8nH9Q3Aj54etP3n9xZuOEP8rPTi1/8HeyXHrG/NNPHvImhkfeGLZTc/gc4J0YucJsXUJK/NdfeQeas9588qJ/k3vugcNfeUsM5x780UdL7FcARc/h4hO3/nUyT993/f07/mH3Xv9grriR56+7x3y2NaN7G8IVvLkft45Qx+VygEajnSozr9bffPjSuXP3Bp8vDO+I3jt88MK5S7s/mV08+OTD98yyweET9184d+GhH/5uflOkebhgH9KatVezOjq6X5rhCncM2zAPQYb7Je0scPHJtyO+M3nnt68+d/XKU9//YPRc4NVuBK6w+0+3uv5jBc9+Zx8urJ4rvHfNnw+a4VwBHXbOkD9vKfoh+ADizo/8Qb++e7P5vcMn7jsncIXpuSRsnvD/9ijFPFdoOnGFmbqEcQUzWRqOcM+XH3nELDDc98y1B88bZvSI+e89k0yafQ9iEVeYK9qL4qUHn3n6mbFdHz5CG96433ftpUdsTb98PbA91j997LlLzGdbM7q3oVxhmgvOPYaAdVwuB2g02ulbY7CjAR7Y7YpCkCj869wCQ/2l386+6Gee1e6+8sY7v3rvnR/uXsJc4b//yJz4wOEfgssPAlf43x54bnFlPmg+feXyP/1itIfx5tt/WsAV3v/+N8xh4BnEN802iB90A69d2N8DzyDe++7XzcHvnzRXuP
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545129603" ,
"to_ids" : false ,
"type" : "attachment" ,
"uuid" : "5c18ce83-3404-4c2b-bb98-44fd950d210f" ,
"value" : "extortion phishing scam bomb threat 2.png"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"data" : " / 9 j / 4 A A Q S k Z J R g A B A g A A A Q A B A A D / 2 w B D A A U D B A Q E A w U E B A Q F B Q U G B w w I B w c H B w 8 L C w k M E Q 8 S E h E P E R E T F h w X E x Q a F R E R G C E Y G h 0 d H x 8 f E x c i J C I e J B w e H x 7 / 2 w B D A Q U F B Q c G B w 4 I C A 4 e F B E U H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 7 / w g A R C A J u B L A D A S I A A h E B A x E B / 8 Q A H A A B A A M B A Q E B A Q A A A A A A A A A A A A Q F B g M H A g E I / 8 Q A G g E B A Q E B A Q E B A A A A A A A A A A A A A A E C A w Y F B P / a A A w D A Q A C E A M Q A A A B 9 a E o A A A A D 7 + J S c X d X B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H B 3 H D j N F a s h W r I V q y F a s h W r I V q y F a s h W 9 J w i x 7 I V q y F X + T u c R U o R U o R U o R U o R U o R U o R U o R U o R U o R f v u P m P K E V K E V K E V K E V K E V K E V K E V K E V K E V K E X t 0 H L l K E V K E V K E V K E V K E V K E V K E V K E b P 6 n L G p C g Z 2 b G t E h S 4 I + p M a O d e v L 5 L 2 V F l H 6 K A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A 4 c + n O A U A A A A A A A A A A A A A A A A A A A A A A A A A A A B l t T l k 1 I U C P I C N 99 h X d 5 R I 35 K K l R S S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q S 0 Q d O Y A o A A A A A A A A A A A A A A A A A A A A A A A A A A A D L a n L J q S G s x x 7 I R f o k O f 4 d Q o 4 H c 5 n R E 4 W W Q l A A A A A I / N J i m u Q F A A H C O 6 q t d Q J T L a Z P s K R v g m I 3 E n q W U W C H X l 4 i 1 h e q K Z Z Y q e f L J V U 47 q O 7 T 9 Q 462 i o 7 l g Q i a 4 Q 0 s 3 O K s 5 U z k k K y z A U A A A A A A A A A A A A A A A A A A A A A A A A A A 5 c U l o v R e x E J b n D S w f P 0 A o D L a n L J q M 5 o 6 e W f G g f C f X P 9 / K n / X H 6 I E 6 N J J F d Y Q i / g z e W d Z q k h W n X n G v s z K 59 I H p P m H q X T n m Y u t 80570 F b b U O p o O P T M J o 7 G h 9 A K X L 7 L G T V h B k x b I d 5 G + r P 38 h W O b u M F 6 B 5 p n U / 7 z m 51 n O 8 / q q 1 N R S y u E S O 3 z b 51 C 1 / m v q H T G R + N D m s b h 9 f 2 s S y s I W t z r N S 4 m K 3 n a R Z 8 f W b n I 8 b n n u H + Q 77 e c v r 6 i 357 x f q v l / p X X l h + N h X Z 6 b H L V + g y k Z q 8 r 1 v s T e 1e8 X m p x s m W J B l / p Z 7 X z j 0 e w M 6 A A A A A A A A A A A A A A A A A A A A A A A A A A g U + n z V z 9 y p M b N + M / e V T V 1 m 7 e s 3 z 2 V H b 5 D O r S n m / d R L 6 F 9 W a j L a n L Z u p C g A V 0 77 I C g A A A A U n 1 c k B Q A A A A A A A A A F D f I p 7 g 1 A l U 1 y i r t D W Q m q X t a E B Q A Q F A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A Z b U 5 Z N S F A A A A A / e v K U n J 1 V y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R F / P 38 g F A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A Z b U 5 Z N S F A A A j 5 n X U R 2 + o x L + V E l g U A A A A A A A A A A A A A A A A A A A A A A A A A A A B F / P 38 g F A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A Z b U 5 Z N S 5 l 6 O Y 6 O Y 6 O Y 6 R e w 5 x 5 h O v e G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G J i G O v 5 z L 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 c x 0 y 2 l y 6 b J 1 V y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y d R y y m w y Z r I E / G Z X 3 X z q 6 r c f c e R r I T Q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A D J 6 z J m s p r l G c i a 4 V 9 g W A o A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A D J 6 z J m s A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A y e s y Z r C t i y Y X d a g r J b N G / C U r L I / S u L F 8 / Q Q + h I U 3 G L 9 U d t S x f P 1 K U d n E l X 2 F H 5 k D Y M p f J N Q Z a / Z C i a y l z Z Z O U N b F m L p J r l H W a z / w B J f B R X x Y M L u t Q 5 R Z Z 6 L + k l X / m V i w e t 3 J 7 l C l s l Z J J R F J S H k D d q y P F 2 V E 1 b q K T v F o i x o s 0 f M L r 0 C W d C G T E X D x 6E5 d b C u l r 2 Q e p J V 0 0 6 K v q k 9 B 7 S y E B U 9 z 6 A A j R J V v 7 Z Y v j 7 U y d l L d M z f X M h D m K R e B Y q + S d 1 B Z k x G k h G g R c M l p q 7 l L L d I 8 X W b I S l b V y a Z B + L b F E 4 F k y d 9E5 S 9 p b R n e m 83 z l E i w Q / t Z I G T 1 m T N Z 8 / V Z i 5 j d Y n b d c / n n f o t P i 0 d R q q 6 K b d w 7 L p m T g t 7 k u W + W z o r 3 r j D 3 H x 2 x q r + 4 m l l g 4 j b 1 + 8293 E l p i e 37059 K P 0 K o u e 3 L 6879 F y v P d f K s p j P n u t 5 X d t j g t 7 m p c 7 V 62 F L N s O 9 n 0 5 e O a L V U + O t C 0 3 W z K 9 t H V G s s K P 91 m 7 / P 2 t 5 b y + 6 x O 265 y u d 0 d V i x L K 163 O T 2 f K 4 x v G w 9 b S b z T T r 6 X q e X a e w s M a u 8 z p q K X K 2 U q V Z d V N n R p p q O 8 g 46 e b b X n 89 e d j g 9 h + x j 7 K 35 V W a u q u 5 b D G b P N R E r d P 92 W 30 L 51 x v J 2 N Z i f O t O n P l k P S 8 b n V j 8 / X K y g k z p 81 m e t v + J Z 29 d Y 7 z C + p b O k W V U 5 t b S 2 l t r F N s a S 71 f P d J 15 c 9 Y W x 0 n 7 r N T u M 9 o a w + Y 9 G r s W J 8 W P z V V 9 f V 9 V F u a S 7 S N k 7 + k l r 91 U W N T c h r 8 r j V j i 9 V W 9 e W z + f v 8 A c b 85 o 9 j I W g p N x + a m U n a a n y s r n p W J X 2 d J p 86 z 8 e Z H 6 Z V u n q Y j d d D 8 W X Y m m T 1 m T N Z z 6 Z z G r 3 t g f r r z 3 j O 6 L N r b L z v r L v 2 U g 1 u V D S x u I H P P 2 b N g p c u y e c W l b N R 5 c 9 E c u q G a o s 69 C e e z d 50 F r 5 z 6 M V t l h 5 U a 5 l J U u h e e V 9 e p s d s b A l o r T D W 8 a t h d 1 q I 355 l m + h W v n F 6 a p 5 z s d S 1 c v L c 69 S + 8 h C u d p 1 y 11 F o 839 C 0 7 C U g Z I t 7 / H 7 W K W 7 y O u s V d n 5 F L 68 w 0 r U 0 0 n z H d 5 t n w 74 J d 3 X w s G n r b D d d T a G Z z d M 8 u 1 G p q V F m c 30 O q o K S z 0 9 g b O a 1 b A b / A F k J Y n 5 j J c l 7 L w 91 n W k 7 Y H 6643 j B c J f R H z z z f i H 55 Z n o s L L r N q o a + X X R 5 F V N S p f l G 53 i + Y y j l 9 P Y D 7 T e M Z D z r f s F M 1 n Y q m 2 K u 0 89 m R t m D l r s W L s b N G w v 1 L u G N t L L 559 p 1 u j E x t s 7 E y 1 e q f X z 9 I C g A A A M 3 p K L W b 2 F N c 94 W P 6E1 n L 6 g M D w 9 F S + Z X 2 v V 59 x 9 H R l s z 6e1 M f D 3 j G v H t l r 2 s + f 13 q K W B P N T z W s 9 d Y 3 j o u 7 b x g t 6 R l p O g H l d 7 t 0 Z r O + j r r J T r 8 w D X l t 5 t k Y / Y F j z v 0 R L j p 2 j J 456 b b N O X n P p b O v O 897 K T C y t g s x 2 i n 8 Z a m 8 i y t T M 4 T 2 F m 5 S 2 t V m E 3 P 0 l / P K P W B 59 D 9 N a m N v 7 N K z + g S 0 F H u y e X S f S F j N a V L 569 C V k W u J k a f 0 Z L 5 D r 9 e K H r c t T l 1 I w s j Z C i s p b O s L n / W m 8 + d T t u l 49 h M B K 2 p c f U + j I z O U 9 R W K 2 y T W B 5 + h L P L 672 C k T F S N h b W e Z 9 v S W N 5 e P s G s Y j b l u D / N 6 z f J d H t x i q 70 Z Z 5 f G 9 Z S 5 W k 9 F X P j v o
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545129611" ,
"to_ids" : false ,
"type" : "attachment" ,
"uuid" : "5c18ce8b-e86c-4247-a0ae-409c950d210f" ,
"value" : "Extortion Phishing Scam Acid.jpg"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"data" : " i V B O R w 0 K G g o A A A A N S U h E U g A A A o A A A A F 6 C A I A A A A G T n 6 W A A A A C X B I W X M A A A B I A A A A S A B G y W s + A A A A a n R F W H R S Y X c g c H J v Z m l s Z S B 0 e X B l I E F Q U D E A C k F Q U D E K I C A g I C A g M z Q K N D k 0 O T J h M D A w O D A w M D A w M D A x M D A z M T A x M D I w M D A 3 M D A w M D A w M W E w M D A w M D A w M D A w M D A w M D Q 3 N m Y 2 Z j Y 3 N m M 2 N T A w M D A K U e Z 2 P Q A A A A l 2 c E F n A A A C g A A A A X o A S O 9 D s w A A g A B J R E F U e N r s n X V 4 V M c W w M 9 c W Z f I x h M S E o I T C B D c H e r u 7 q 7 U F a r U v a 9 G h d J S t L g W C y 4 h A n F 32 a z b l Z n 3 x y Y h Q E i C V + b 33 t e P 3 J 0 7 f s + Z O X N m B i U n D 8 Q Y i 5 L E I K R Q 8 A z D A I V C o V A o l H O A L G N B F A g h C l 6 B K m v q P W 63 K A o 6 r T b A o F c q l I A u d A Y p F A q F Q v n X Q Q h 4 f V 6 b 3e5 w u p R K F W d 3 O L x u d 6 g p W K N S e d w e l 8 N J L n Q W K R Q K h U L 594 E Q Y l h G r 9 U i Q L U N 9 Z z g 9 e p 1 W p W C 93 q 9 C C F A i E 6 A K R Q K h U I 5 F 2 A Z e y W v R q 3 S a b W M I A p a t V o Q R K p 5 K R Q K h U I 51 y C E B J 9 g 0 G o 5 S Z I 4 l p U k i R B q e 6 Z Q K B Q K 5 X z A M i y H Z Y w x / v d p X w T o X + B N 1 n 67 U K N F Z / j 39 W 0 K 5 e / P + Z F O 7 X z d f y v x 2 G Y + M c Y c I e T f J 6 E Q Q r I s e 71 e Q R C a S n c O i o g Y R P C 5 i L c p c q V C q V K p G I Z p s 4 E I I R 6 P R x A E j P E / r I C t S o r Q O U i i + b t j W E a l U i k V y n N Y B A q F c g I I I U m S P F 6 P K I h N j 87 W V 46 a 4 u d 4 T q P W s C x 7 M v 3 l 9 X q 9 P i + W 8 V n O Q H M B C Z A O 4 k Q A A P 58 c h x 3 Y j 4 J I R w h B G P c J M T / F S C E f D 6 f I A g B g Q F G o 5 H l 2 D Y C E U D o j K b I C K G q q q r I y M g z G r 4 Q I I S 0 k Q 0 C k i R Z L B a 7 z a 5 S q X i e b 52 K v 3 N 7 v V 69 Q R 8 Z F c l x X J s F O U M b A E K o u r o 6 P D z 89 K P o C M E n u N y u o K C g M 63 D N r 8 D A j 7 B V 19 X b 7 f b d T r d u S s F h U J p D U L I 4 / F I k h Q c E m z Q G x D T t h h C B E H 7 p 0 5 g I K h t y U B k Y n P Y z H V m h V K h V C p P F C A u l 0 u l U s V 0 i T n Z x t o z m R 8 j Q D a 7 j e d 5 t V p 9 s j B N W c L g d D t r q m r 8 g U / M J / f v m / 7 K s i y K Y l h 4 m D H A e F L r + r G V f 1 x j d K Z O / F M 3 h F D n K 7 C N w C f z O k e g U C o i I i O U S m W j u Z F h m N Y H p G C M B U E I C g 4 y h Z j O 3 f I B Q s g / T D m H 8 S M A A k 3 / P f 2 I T j L Q Q K B W q + O 6 x p W V l v l 8 P q W S z o M p l P O B J E m S J H W J 66 J U K t u b 2 n W o A Z m T z i E Q h 4 K D g 7 U a b U V Z B c u y L H v M L M v n 86 n U q i 6 x X c 6 V e G w W W e 2 I x y b B z o L R a N R q t c W F x a I o c h x 3 f B E 7 m k X / 85 A k S a P V a D Q a W Z Y 7 U / u E E E m S x G Z k W e 5 M K v 56 O 6 X a O y V P N 0 K I L M s 6 v U 6 h V B y X J V m W O Z 4 z G A y d L K C f U x 3 x k W Z O N f J O J k R I c + W d s w 7 o r 8 O Q 0 B B B E M 5 V G h Q K p T U I f D 5 f Y F A g x 3 H t G 1 Z R R 7 S f D s a Y V / C G Q I M g C M e p a U E Q Q k N D T 0 k 8 n g 6 d i x t j z D B M c E i w z + c 7 s V A c I Y Q A 6 a w i Q Q h a R + F / t R O v H f 9 W J 5 J D g F r P b Q j p b C Z l L A M C x K D O e D A h h B o b G 10 u V 0 t g l U o V G B j I 8 z y 0 v 8 J P k D 9 H H Y y A W v 1 Z W V k Z F h Z 23 F S s / U z 6 J 76 Y 4 N Z l x w Q D A M M y p 9 S 9 n E 6 n T q c 7 p V c 6 o 4 D 9 y + 2 C I K h U K v + f T q d T r V Z 3 R g 0 T Q j D B p + q F c K q T c p 7 n J V n 69 w 0 0 K Z S / I w R k W f Z P S d v 3 k D K b z b I s n 0 x Q I I S C g 4 M 7 / N J Z l p X k 4 y c 2 k i x x f C e M u w i B 37 L Y 5 C d E g B B A C A A B 6 W B N l r S i M 7 X C c Z x / A n a c I O I I I Q S T j h 1 h E A K M s d 0 G D g e S J A B C G A 60 G i Y w E F j u 5 G o Y A W A i O s B r J 6 I I h C C W A a U G V M E I c e 2 r Y a f k s A s 2 U R Q I I Q z D K B X q I G U Q j 5 Q E O q o a T B j E M A z T z v j L v 0 r h b 36 z 2 R w a G u r X u L I s W 61 W m 82 m V q s x x u 2 v H b Y v 0 51 O Z + v W U q v V D M M g h F o r e w D g e b 7 N N Q w / f g V 8 X A M R T P x G 6 c 6 s 3 C O E M M Y V F R V p a W l X X n m l J E k d v t L y Y o d K C y E k C E J + f r 7 L 5 R o 6 d C j G u L G x c f v 27 V O m T G l z w e O 4 d 0 9 v i b q x s T E 4 O L j z X g s s y 3 a q h 1 M o l D P G L 3 D 8 s q 4 d C c C y 7 N d f f z 1 o 0 K A 2 P 2 S W Z b d t 2 / b 222 + 3 L 68 Q Q g x i / N O T 1 m k R T F i W 7 c C W i R C 2 W n F d D S A G W A a p N U x Q M K P R y H Y 7 c T r Y 8 A h o V 8 I Q I C d b n 24 z n y z L + u 3 h x 9 V J Z 9 e A i S D g 0 m J 2 V y q 7 f z d q q A A i E V 0 o T h o k j R n P d O + B 1 J q 2 d T C R s K O M r U 9 V O j Y i c S s h G L F d Z P V k j 2 k 6E9 Q H c b o 2 d T A h p N p T e d C y K 82 z u U 7 e K 0 G d C h K j + S G j 9 D P 6 B g 7 U c b r 2 F Q O B T o 1 N v F 5 v f X 29 w W A I C A j w e r 1 e r 9 f / 3 L 9 u U V 1 d r d F o 2 p k y t j 8 C Q g h V V F S 0 d i 9 q m V L 7 F b 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
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545138920" ,
"to_ids" : false ,
"type" : "attachment" ,
"uuid" : "5c18f2e8-8644-4878-9af8-c489950d210f" ,
"value" : "spam-acid-threat.png"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"data" : " / 9 j / 4 A A Q S k Z J R g A B A Q A A S A B I A A D / 4 g I 0 S U N D X 1 B S T 0 Z J T E U A A Q E A A A I k Y X B w b A Q A A A B t b n R y U k d C I F h Z W i A H 4 Q A H A A c A D Q A W A C B h Y 3 N w Q V B Q T A A A A A B B U F B M A A A A A A A A A A A A A A A A A A A A A A A A 9 t Y A A Q A A A A D T L W F w c G z K G p W C J X 8 Q T T i Z E 9 X R 6 h W C A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A p k Z X N j A A A A / A A A A G V j c H J 0 A A A B Z A A A A C N 3 d H B 0 A A A B i A A A A B R y W F l a A A A B n A A A A B R n W F l a A A A B s A A A A B R i W F l a A A A B x A A A A B R y V F J D A A A B 2 A A A A C B j a G F k A A A B + A A A A C x i V F J D A A A B 2 A A A A C B n V F J D A A A B 2 A A A A C B k Z X N j A A A A A A A A A A t E a X N w b G F 5 I F A z A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A H R l e H Q A A A A A Q 29 w e X J p Z 2 h 0 I E F w c G x l I E l u Y y 4 s I D I w M T c A A F h Z W i A A A A A A A A D z U Q A B A A A A A R b M W F l a I A A A A A A A A I P f A A A 9 v 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
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545140489" ,
"to_ids" : false ,
"type" : "attachment" ,
"uuid" : "5c18f909-5bf0-4d3a-9a12-f5ba950d210f" ,
"value" : "DuUTMj2V4AEycv_.jpg:large.jpeg"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"data" : " i V B O R w 0 K G g o A A A A N S U h E U g A A A q U A A A I h C A Y A A A B 3 + c P 8 A A A A C X B I W X M A A A s T A A A L E w E A m p w Y A A E A A E l E Q V R 4 n O y d d 1 z V 1 f v A 3 / d e N o I M U c A B C j g R 3 H v v v b e W m W a l D T U r 23 t 9 W z Y 0 W 5 q l v x y 5 V 7 n 3 w I E o A q I o Q 2 S J s u H O 8 / v j e j / d K 4 h U G p X n / X o V 3 s 84 e z y f 5 z z n O a q Q h o 0 F E o l E I p F I J B J J J a K u 7 A R I J B K J R C K R S C R S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p S K J V I J B K J R C K R V D p 2 d z O w + N h z d z M 4 i U Q i k U g k E s k / n P q N m t y V c K S m V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 U i h V C K R S C Q S i U R S 6 d h V d g I k E o l E I p F I 7 g e K S 7 Q U F h a j 1 e k w G k 0 g B G q N G n t 7e5 y d H H F 3 c 63 s J F Y q U i i 9 B 2 R l Z Q H g 4 + N T y S m R S C Q S i U R S m W R f z y H p S j q p q Z k U F h d j M B g x m k w I k 0 A A K p U K t V q F n U a D g 70 d N X y 8 C Q z w o 4 a P N w 4 O 9 p W d / L + V + 0 Y o T U h I w N n Z G X 9 / f 65 e v Y p e r 6 d 27 d o I I U h K S k K j 0 V C 7 d m 3 U a l u L h s u X L 4 N K R e 1 a t b C z u 3 N x F R c X 0 717 N 4 q L t Z w 6 d R J H R 0 c e e + w x q l a t y m e f f X Z P 8 i a E U P I k h L j Z w N U 4 O j p S t W p V n J y c 7 k m 8 f 4 V 169 a x c e N G H n 74 Y T p 37 s z R o 0 d Z 9 N U i J k 6 a S O / e v c n J y S E 7 O x t f X 180 G g 1 X r 16 l a t W q e H t 7 V 3 b S J R K J R C I p F y E E K a k Z R M d e 5 F p 2 L i a T C b V G j U o F K l R o 1 C q 4 R d 4 w G U 0 U G 7 V c S k 7 l Y u I V 3 N x c C a 5 b k w b B g T g 7 O V Z S T v 5 e / n U 2 p U V a K C g 2 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
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545140944" ,
"to_ids" : false ,
"type" : "attachment" ,
"uuid" : "5c18fad0-8340-490f-aa8c-c488950d210f" ,
"value" : "534244-bomb-threat-email-example.png"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"data" : " i V B O R w 0 K G g o A A A A N S U h E U g A A B D g A A A N H C A I A A A B c o X p C A A A A A X N S R 0 I A r s 4 c 6 Q A A I A B J R E F U e J z s v W d g H c d 57 / 3 M z J b T c X D Q G 9 E I g C R I A u y d I k X R k k i J k i x Z k m v c U + 0 k N + 9 N f W 8 S 59 q + S Z z E K Y 6 d O L J 94 y L Z l m R Z x S q U R I m 9 d 4 I k A I I g Q P S O g 1 N 3 Z + a 5 H x b l o J C i C o u l + X 2 g o D 0 7 O 8 / M 7 g H m v 0 8 Z U l l Z C Q q F Q q F Q K B Q K h U J x K 0 F v t g E K h U K h U C g U C o V C M R U l V B Q K h U K h U C g U C s U t h x I q C o V C o V A o F A q F 4 p Z D C R W F Q q F Q K B Q K h U J x y 6 G E i k K h U C g U C o V C o b j l U E J F o V A o F A q F Q q F Q 3 H J o N 9 u A C X A y U k p E d I 6 P n + D 8 Q A h J / Y E Q Q g i h l J I U b s Y I F A q F Q q F Q K B Q K x X v D z R Q q 0 x U I Y 4 x S m v q v I z 9 g T I 2 M n z + u Y e Q Y Q g j n X y G E 8 + k U P a N Q K B Q K h U K h U C h + X b j J H p V U p U E I S U t L y 8 n J y c r K C o V C o V A o P T 0 9 E A i 4 X C 7 D M H R d N 0 2 T U i q l T C a T t m 1 b l p V M J s P h 8 O D g 4 M D A w M D A Q G 9 v b 0 9 P T 29 v r 5 S S j q F U i k K h U C g U C o V C 8 W v H T R A q j t + D c 0 4 I 8 X q 9 h Y W F 2 d n Z m Z m Z m Z m Z w W D Q 7 / d 7 P B 632 + 12 u 10 u l 8 v l Y i k Q Q h D R c Z t I K T n n y W Q y H o 8 n E o l 4 P B 6 L x U Z G R o a G h v r 7 + / v 6 + n p 6 e t r a 2 k Z G R h B R 0 z S n u d I t C o V C o V A o F A r F r c + N E y r j a S e a p g U C A a / X 6 / h P y s v L i 4 q K 8 v P z c 3 N z D c M A A O c 0 59 / x K C 9 H n I x f j R D C G N M 0 z e 12 p 6 e n O z k q l F I A s G 27 u 7 u 7 o 6 O j r a 3 t w o U L X V 1 d w 8 P D k U g k G o 3 a t j 2 e z X L D B v 4 u Q A A p b C m l x M k G U 8 Y A E A U S p l F K 6 L s c D S K A F A K l B K q z 8 d k Z 7 x s A g T B C m U Y n x d G h F F J K p B o l h A I C C i 4 Q C W U a I w A E E F E K W 8 h U u y l l k 82 V n C M A U k Y k R y k l E A A A w i i j m n M m S p T C F o i I h F A g V N M o H T c D J U r J B R L G K K N 0 z D C U g k t n D q c 1 m b C f S y G F E 0 U I l F K m s S t K W U S J g n O k h F K d 0 R k M o 1 R j M / T i N E Y U n E u g j D J G A Q h x j k r B h U Q C l O m T u 0 Y p U X I u g U x q o l A o F A q F Q v F B g V R W V t 6 Y n s a z S r K y s q q r q x c u X F h V V Z W b m z v J m v d i L T a e 8 e J c s K e n p 76 + / t S p U 3 V 1 d d 3 d 3e9 h R 9 c f B A C U K e M Z h x A C g I i E k P d g N M 6 t m X Y 9 R A k I Y 70 T I D C l M 0 Q E R H D a w O j 9 R S C O c i K j n 6 e a T w i Z a i 6 i B C D j 15 v h z K m X m X w R R B y f i g n L 8 Y p X m 9 T 19 A t f c T b H T i Z A g F 6 L Y V M b O / + Q s Z y r y W Z O 63 p S C x h v o l A o F A q F Q v F B 4 b o L F U T k n N u 27 f f 7 q 6 u r a 2 p q y s r K 0 t P T 0 9 L S v F 6 v a Z p T P C d j i + V 32 F d q 5 r 3 j P L E s K x K J j I y M D A w M X L p 0 6 e T J k 3 V 1 d U N D Q 5 q m 6 b p + C y s W m 9 t B T V 90 / 59 u W 7 u 8 K C c c i U U s q b k M L z N o / + H H d n Q j S X u g Z u Q n 3 z 9 x 8 u K p u F s j 72 w h i 9 K O J x P 2 c O D 2 O + 5 b + O E 1 Y s / X n z 7 V M d i h g y a t W f f + / x t v W 39 X U Y T o 2 s j J 546 //ovvHLbiFnp0gogiPpS1fEvFik0l+//1cF3D4UgBK9r8u79dmt3f8Oa3Xj7HcCBRVDB75ce+sq06zZ1uSzs5MrD7sed2HX+unns1QgmR3CLASx74gzLoC538efP6f1hVO3t9QdySMrz/hzt2vPHDk8LASDxjcc6ie//mkerCrIDsa4gd/9n//kXDidZIugetSHjYrC1btubLnws2/Wj7wTfPXvSYyEe00k0Vax75nU2ZOUG37G2IHH/q/zxbf7wlku7RxobNAWx9wSfXb9j4qVV+TdO11r0N+3/1ledbhqO2z2RTponHh7z5c2dv+5OPpB/tPP3mt165RDEWyVhetGTrVx6Zlxvyy56zI8d+/tdPN57tiIW8kx2V0kpqRd5Zq3/392rZmTcPPvnCwagnIQXwoO5asPX/27Y2p4/vf/5rv7rYN5z0GgwApBXRipYXrXnkC+uNxOFf7Xzh1X1hV1IQTZUTVygUCoVC8YHhOoZ+ObkoAJCdnZ2Xl1dSUjJ37ty5c+fm5OQQQjjnQgjLspyT35MKXallwaQcDTiilKanp2dlZZWWlhYXF2dlZRUWFjY3N3d0dPT09EgpNU27JXNXHB9FMh7u7+/MdGHG3PXFWm/rQOP5y1a0f9jjqSxb/KHV/Tt+3HwsEomiwYBQXdM0QyMAQtiC25KYBqOUEQQQdoJLoNQwxiQNAgC3jEBuWc2yJdmBmtu3FC6a1335n55rtC3pDqG/vDJfK3B39PZxgYX55YuXeQYPXtpxrisWlYxSapmzS+Yu2LS+rGd/sHD+7YGyNaUZ8+7ZlpE8HD8nZAMlSIUU8ZGB/kHLsDGAnlnz71jdHRk5UVc3xDQBQlIv8c5asWpOsT3cebFxfk48QDu7uqjA3JIla5bTyIlL+y92Z6ZVLVtz3+oqd/tIL4/QnNKND65p/K/I4NAAKZp319a8nNqaBeUb7qTslYPnLRs9LtvKL5u7YNWdlZnh5shIEryZRes3157sH+geHEKNABAiURoABdXrahctzfP2XOrCQFZORfn6DbUHnqhLRMIW48hMnTFKABFAJEhuVsHKu+6/+z6a2Dt8REgi4tlFt61Ye+/KSqOtv4cntYLS2x9cW/9fdmywJ6nRFN2IwmKhnPTqzfMWleXpzeyo+/BZEEIQaRBSULHsto0Lw+BreeKllpjFpUEJgEhooZzKBXduu3OD3Rc5efE1TsMgr/KwKBQKhUKhULzvuC5CxfGNUEo1TUtLS1u+fPm6devmzp1LKUXEZDI5Hu1y/eRBqmixbdvJTgkEAqtXr161alVDQ8Pu3bsPHDgwODg47tK5xbSKxvQowP4Xvvn6z0eKggW3/+lzH03b8/jBb/7nz/t8gyNLbs8qWxiOxMFrBnMK3H6dAtoJy0rGOaA0TK/hd1EZi9lccKQAbl/IYESIeNySIEfHijxpphUsWf/ZP7wLhkLZ/Y2D0YRACRzMEORsSLv00+MHjz91KC0xsvThr37ivocfufPZPfHh8PEIuCjDoi1luRm19mtfu6in3ffwQ5/YsmGkOWlGjw7FbUIAmOnuGe761fd+/5fCjifccz1VH/m3b80tmNe+QJw6AMwSFniL9fIPL/U2WQPyydjyjcf+9qWft71+Mlsnq7/4g8+sWrtl64v7vzdUu6R2wcNLe1750h89tSsytOiRj//tX65f/DJpbXq8o6j2od+5tyS9il7ujPYPJ2xBEYByXjOnKntJ6aGntnzt5Tqub73/41/7QvWs1+MN554fBI0AAS4xDWDpmhUsI/HMtz7z7deiOfP/6Le3PrDxjoKnEiPmiYQv1+DRBOdOfo1ALX9pztzbFqf3G/3D4bgNhCXZ0vXLqrfVtL/we3/w831WYtUnPvY3f7Jpya/0/oYfnEZDcwLlEAAEJ2k56cU1hRf3NKUTq2RpmVHfCgIBEMBKhPt6Ic2dX7067bVwf/gCogGE68XZofzFBVY0Ge2LJi1JcCw8TqFQKBQKheIDwnURKk49rvT09KVLl27cuLGgoCAQCMBYlvz16PEaGfe0lJaWZmZmrlixYufOnQcPHhwYGHBk1U207QpQpum6YRg6Y4RQyphuGIahMUrRBsoGyz96z9KMv143R1jW0P7vv/7Ks/+6LxkLV228746tn5zV+4//Z+eJS0fDuSZbtO1P75nja73wT//yYiftsZjJAIAY3mhvw0uP/+Hhn0bmrv/kog0PuZASSg1q9dKWJ15tH5E84DY1mmgPhwfau7IpACWAUhKCebW1puhof/nJTpBnnv/nM28+9V2o/ug/LfF7jbElNQWQFITFrSQXuqBmeCAeC7cRIoCAsF1pgbwli+Pnvt1Vd6C5xdPfmUjaAZ8HwGrt6490m0AY4ctr8n2J4kP7vtoKzRhPS7YeO9a5XM/IKggmG8+8/PXf3GHPrqip+ejfV0hjPDCKMsY0gyC3bW4TIYluMsYoQZi03qeazjQbpGVZliWQUE1naMdK71pQVfu12Y
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545142421" ,
"to_ids" : false ,
"type" : "attachment" ,
"uuid" : "5c190095-6374-406e-8b84-f5e0950d210f" ,
"value" : "4b6d700c-bab1-4289-9c76-d262eac3c63e-sextortion1.png"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545142851" ,
"to_ids" : false ,
"type" : "email-subject" ,
"uuid" : "5c190243-c8b8-4dd7-bb25-4f4f950d210f" ,
"value" : "Use your time wisely 14/12/2018 02:44:26"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545142851" ,
"to_ids" : false ,
"type" : "email-subject" ,
"uuid" : "5c190243-f024-4199-8338-4da3950d210f" ,
"value" : "Think about how they can help you"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545142851" ,
"to_ids" : false ,
"type" : "email-subject" ,
"uuid" : "5c190243-08b8-4e85-bd79-4e57950d210f" ,
"value" : "I offer you a transaction 14.12.2018 02:45:03"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545142851" ,
"to_ids" : false ,
"type" : "email-subject" ,
"uuid" : "5c190243-214c-4f28-8861-47ee950d210f" ,
"value" : "Think twice"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545142851" ,
"to_ids" : false ,
"type" : "email-subject" ,
"uuid" : "5c190243-31ac-45ae-9d6f-4668950d210f" ,
"value" : "Your building is under my control"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1545142851" ,
"to_ids" : false ,
"type" : "email-subject" ,
"uuid" : "5c190243-4fb8-4b7e-b60f-4d56950d210f" ,
"value" : "You're my victim"
}
] ,
"Object" : [
{
"comment" : "" ,
"deleted" : false ,
"description" : "An address used in a cryptocurrency" ,
"meta-category" : "financial" ,
"name" : "coin-address" ,
"template_uuid" : "d0e6997e-78da-4815-a6a1-cfc1c1cb8a46" ,
"template_version" : "4" ,
"timestamp" : "1545120379" ,
"uuid" : "5c18aa7b-225c-44a1-b6e3-4862950d210f" ,
"Attribute" : [
{
"category" : "Financial fraud" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "address" ,
"timestamp" : "1545120380" ,
"to_ids" : true ,
"type" : "btc" ,
"uuid" : "5c18aa7c-9e48-411b-94ff-48cb950d210f" ,
"value" : "1P3cNFy3SdfZ8PvMSdgLRcb2TtaLvxfqat"
} ,
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : true ,
"object_relation" : "symbol" ,
"timestamp" : "1545120381" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5c18aa7d-a104-48ae-bcad-4c49950d210f" ,
"value" : "BTC"
}
]
} ,
{
"comment" : "" ,
"deleted" : false ,
"description" : "Email object describing an email with meta-information" ,
"meta-category" : "network" ,
"name" : "email" ,
"template_uuid" : "a0c666e0-fc65-4be8-b48f-3423d788b552" ,
"template_version" : "12" ,
"timestamp" : "1545120466" ,
"uuid" : "5c18aad2-1e6c-4c2b-bfea-4239950d210f" ,
"Attribute" : [
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : true ,
"object_relation" : "email-body" ,
"timestamp" : "1545120466" ,
"to_ids" : false ,
"type" : "email-body" ,
"uuid" : "5c18aad2-6e30-4c79-9ef5-4652950d210f" ,
"value" : "I write you to inform you that my man has hidden the bomb (tronitrotoluene) in the building where your company is located. My mercenary built a bomb according to my instructions. It is compact and it is hidden very carefully, it is impossible to destroy the structure of the building by my bomb, but in the case of its detonation there will be many wounded people.\r\nMy mercenary is controlling the situation around the building. If he sees any strange activity or cops he will blow up the device.\r\nI can call off my mercenary if you make a transfer. You pay me 20'000 usd in Bitcoin and explosive will not detonate, but do not try to fool me -I assure you that I have to call off my recruited person solely after 3 confirmations in blockchain. \r\n\r\nMy payment details (Bitcoin address): 1P3cNFy3SdfZ8PvMSdgLRcb2TtaLvxfqat\r\n\r\nYou must pay me by the end of the working day. If the workday is over and people start leaving the building explosive will explode.\r\nNothing personal this is just a business, if I do not receive the bitcoins and the explosive device detonates, next time other commercial enterprises will send me more money, because it is not an isolated case.\r\nTo stay anonimous I will not enter this email account. I check my Bitcoin address every forty min and after seeing the money I will order my person to get away.\r\n\r\nIf an explosion occurred and the authorities read this letter!\r\nWe are not terrorists and dont take any responsibility for acts of terrorism in other buildings."
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "subject" ,
"timestamp" : "1545120466" ,
"to_ids" : false ,
"type" : "email-subject" ,
"uuid" : "5c18aad2-58a4-4cf8-80c5-4be4950d210f" ,
"value" : "No need to be heroic"
}
]
} ,
{
"comment" : "" ,
"deleted" : false ,
"description" : "An address used in a cryptocurrency" ,
"meta-category" : "financial" ,
"name" : "coin-address" ,
"template_uuid" : "d0e6997e-78da-4815-a6a1-cfc1c1cb8a46" ,
"template_version" : "4" ,
"timestamp" : "1545127971" ,
"uuid" : "5c18c823-b358-4a20-a8de-4567950d210f" ,
"Attribute" : [
{
"category" : "Financial fraud" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "address" ,
"timestamp" : "1545127971" ,
"to_ids" : true ,
"type" : "btc" ,
"uuid" : "5c18c823-93d4-4a46-b015-4567950d210f" ,
"value" : "1GHKDgQX7hqTM7mMmiiUvgihGMHtvNJqTv"
} ,
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : true ,
"object_relation" : "symbol" ,
"timestamp" : "1545127972" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5c18c824-4bcc-4d7a-9052-4567950d210f" ,
"value" : "BTC"
}
]
} ,
{
"comment" : "" ,
"deleted" : false ,
"description" : "An address used in a cryptocurrency" ,
"meta-category" : "financial" ,
"name" : "coin-address" ,
"template_uuid" : "d0e6997e-78da-4815-a6a1-cfc1c1cb8a46" ,
"template_version" : "4" ,
"timestamp" : "1545142880" ,
"uuid" : "5c190260-7c60-4eaa-a550-4d3c950d210f" ,
"Attribute" : [
{
"category" : "Financial fraud" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "address" ,
"timestamp" : "1545142880" ,
"to_ids" : true ,
"type" : "btc" ,
"uuid" : "5c190260-c900-447c-bb89-43fe950d210f" ,
"value" : "1GTd6DPqcxCwX263BMsvk7FcjCQxsXhJUs"
} ,
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : true ,
"object_relation" : "symbol" ,
"timestamp" : "1545142881" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5c190261-bc0c-4bd7-89fd-4210950d210f" ,
"value" : "BTC"
}
]
} ,
{
"comment" : "" ,
"deleted" : false ,
"description" : "An address used in a cryptocurrency" ,
"meta-category" : "financial" ,
"name" : "coin-address" ,
"template_uuid" : "d0e6997e-78da-4815-a6a1-cfc1c1cb8a46" ,
"template_version" : "4" ,
"timestamp" : "1545142900" ,
"uuid" : "5c190274-e76c-434e-bf67-421d950d210f" ,
"Attribute" : [
{
"category" : "Financial fraud" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "address" ,
"timestamp" : "1545142900" ,
"to_ids" : true ,
"type" : "btc" ,
"uuid" : "5c190274-4524-48e9-bb7d-4f56950d210f" ,
"value" : "1NQzdqokrdnBXoXmH9KpGADYcrQ4JGSaCF"
} ,
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : true ,
"object_relation" : "symbol" ,
"timestamp" : "1545142900" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5c190274-308c-4f22-8207-4022950d210f" ,
"value" : "BTC"
}
]
} ,
{
"comment" : "" ,
"deleted" : false ,
"description" : "An address used in a cryptocurrency" ,
"meta-category" : "financial" ,
"name" : "coin-address" ,
"template_uuid" : "d0e6997e-78da-4815-a6a1-cfc1c1cb8a46" ,
"template_version" : "4" ,
"timestamp" : "1545142924" ,
"uuid" : "5c19028c-87f0-4a55-aa4d-c49a950d210f" ,
"Attribute" : [
{
"category" : "Financial fraud" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "address" ,
"timestamp" : "1545142924" ,
"to_ids" : true ,
"type" : "btc" ,
"uuid" : "5c19028c-bf80-4dd0-a471-c49a950d210f" ,
"value" : "1LeReNiUgHNXvvR8TpgQG1b5nzqoKeUxDY"
} ,
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : true ,
"object_relation" : "symbol" ,
"timestamp" : "1545142924" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5c19028c-b310-4f60-ade6-c49a950d210f" ,
"value" : "BTC"
}
]
} ,
{
"comment" : "" ,
"deleted" : false ,
"description" : "An address used in a cryptocurrency" ,
"meta-category" : "financial" ,
"name" : "coin-address" ,
"template_uuid" : "d0e6997e-78da-4815-a6a1-cfc1c1cb8a46" ,
"template_version" : "4" ,
"timestamp" : "1545142940" ,
"uuid" : "5c19029c-be7c-45ff-a342-48c4950d210f" ,
"Attribute" : [
{
"category" : "Financial fraud" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "address" ,
"timestamp" : "1545142940" ,
"to_ids" : true ,
"type" : "btc" ,
"uuid" : "5c19029c-431c-46fc-9e88-4c0d950d210f" ,
"value" : "1L5SWCu4ZTLiyPyTAvfSVjhKrYNSnYgBKk"
} ,
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : true ,
"object_relation" : "symbol" ,
"timestamp" : "1545142940" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5c19029c-3394-4991-85f5-41f0950d210f" ,
"value" : "BTC"
}
]
}
]
}
}
