2023-06-24 09:36:52 +00:00
|
|
|
{
|
2023-12-14 14:30:15 +00:00
|
|
|
"Event": {
|
|
|
|
"analysis": "2",
|
|
|
|
"date": "2023-06-16",
|
|
|
|
"extends_uuid": "",
|
|
|
|
"info": "FormBook campaign",
|
|
|
|
"publish_timestamp": "1686914712",
|
|
|
|
"published": true,
|
|
|
|
"threat_level_id": "3",
|
|
|
|
"timestamp": "1686914589",
|
|
|
|
"uuid": "f45fe125-7f3f-4335-bf74-5ab61eb5b645",
|
|
|
|
"Orgc": {
|
|
|
|
"name": "CIRCL",
|
|
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
|
|
},
|
|
|
|
"Tag": [
|
|
|
|
{
|
|
|
|
"colour": "#004646",
|
|
|
|
"local": "0",
|
|
|
|
"name": "type:OSINT",
|
|
|
|
"relationship_type": ""
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"colour": "#0071c3",
|
|
|
|
"local": "0",
|
|
|
|
"name": "osint:lifetime=\"perpetual\"",
|
|
|
|
"relationship_type": ""
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"colour": "#0087e8",
|
|
|
|
"local": "0",
|
|
|
|
"name": "osint:certainty=\"50\"",
|
|
|
|
"relationship_type": ""
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"colour": "#ffffff",
|
|
|
|
"local": "0",
|
|
|
|
"name": "tlp:white",
|
|
|
|
"relationship_type": ""
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"colour": "#ffffff",
|
|
|
|
"local": "0",
|
|
|
|
"name": "tlp:clear",
|
|
|
|
"relationship_type": ""
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"colour": "#0088cc",
|
|
|
|
"local": "0",
|
|
|
|
"name": "misp-galaxy:tool=\"FormBook\"",
|
|
|
|
"relationship_type": ""
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"colour": "#0088cc",
|
|
|
|
"local": "0",
|
|
|
|
"name": "misp-galaxy:mitre-attack-pattern=\"Spearphishing Attachment - T1566.001\"",
|
|
|
|
"relationship_type": ""
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"colour": "#0088cc",
|
|
|
|
"local": "0",
|
|
|
|
"name": "misp-galaxy:mitre-attack-pattern=\"Spearphishing Attachment - T1193\"",
|
|
|
|
"relationship_type": ""
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"Attribute": [
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "On port 80",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914092",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "ip-dst|port",
|
|
|
|
"uuid": "02b09854-2a3f-426c-b7a5-5620849033e6",
|
|
|
|
"value": "34.102.136.180|80"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "On port 80",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914092",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "ip-dst|port",
|
|
|
|
"uuid": "1a2c0a8a-b2cc-40fc-98bb-3e90254a3bfa",
|
|
|
|
"value": "162.241.252.197|80"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "On port 80",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914092",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "ip-dst|port",
|
|
|
|
"uuid": "693aa2e8-eb97-44f6-a603-6158c6283dd7",
|
|
|
|
"value": "3.64.163.50|80"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "On port 80",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914092",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "ip-dst|port",
|
|
|
|
"uuid": "afae8f13-f5f1-44c5-8253-950fcbf9cfc2",
|
|
|
|
"value": "38.54.177.114|80"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "On port 80",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914092",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "ip-dst|port",
|
|
|
|
"uuid": "3112891a-4119-480f-bd04-b1f6c7b015b9",
|
|
|
|
"value": "185.107.56.209|80"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "On port 80",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914092",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "ip-dst|port",
|
|
|
|
"uuid": "7f23bcd7-bbc9-4e16-b92f-96cf2a9f513e",
|
|
|
|
"value": "34.117.168.233|80"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "On port 80",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914092",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "ip-dst|port",
|
|
|
|
"uuid": "dcccd41c-6262-4451-82e6-d90b34bfe183",
|
|
|
|
"value": "54.144.38.219|80"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "On port 80",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914092",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "ip-dst|port",
|
|
|
|
"uuid": "395a1236-e6ff-4cc1-b0dc-c2b1e35e97f9",
|
|
|
|
"value": "208.91.197.27|80"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "On port 80",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914092",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "ip-dst|port",
|
|
|
|
"uuid": "7346cb03-48cb-465e-8066-0d609bf9714f",
|
|
|
|
"value": "207.60.53.40|80"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "On port 80",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914092",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "ip-dst|port",
|
|
|
|
"uuid": "011482a8-b57f-4a4c-b8e2-df3ddba19a4e",
|
|
|
|
"value": "66.235.200.146|80"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "On port 80",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914092",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "ip-dst|port",
|
|
|
|
"uuid": "6562e492-46e1-4367-9fbb-2aefb6b2cc23",
|
|
|
|
"value": "188.114.97.13|80"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "78f6d250-c68d-42df-8083-b55e4d20779e",
|
|
|
|
"value": "http://www.doordelivery.life/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "51a5630a-365b-4494-8e51-1e00e3c6706e",
|
|
|
|
"value": "http://www.busybody.app/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "648d7f1f-a44c-4a9a-bf02-9d285f60d2e8",
|
|
|
|
"value": "http://www.damcostafreda12.cat/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "efa8a550-bc25-4d93-abcd-1c00eaa4acdd",
|
|
|
|
"value": "http://www.blueridgebedracks.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "21422498-ddbc-4cd6-9b9f-3b370a5079d1",
|
|
|
|
"value": "http://www.hilltopspice.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "67c79470-7122-4017-9e42-b41ecced3352",
|
|
|
|
"value": "http://www.addonysfitwear.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "b726e10c-9ae7-417f-9bed-dc4f70d151f4",
|
|
|
|
"value": "http://www.bestridelabs.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "e7f7bcee-b394-4229-84ea-22a667fb81ba",
|
|
|
|
"value": "http://www.huashi366.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "41f5032c-d595-4b90-8535-fdf1915b7d56",
|
|
|
|
"value": "http://www.1wihug.top/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "081da370-2661-4c3a-9352-2d9aa4b5cc41",
|
|
|
|
"value": "http://www.66563.se/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "4715eec5-a62e-4fca-82c1-f32204837f90",
|
|
|
|
"value": "http://www.96mvipmy.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "a412119e-cd2d-4977-b54d-52dffc4134ba",
|
|
|
|
"value": "http://www.lab1207.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "c66b50c5-843c-4c89-971b-d60fec5bc813",
|
|
|
|
"value": "http://www.80b80.app/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "7077e1a0-d7bb-4353-adc7-4dda88cde6a1",
|
|
|
|
"value": "http://www.graphicstudio53.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "be8f48f3-d673-47a8-9f68-a62cfe70cc6b",
|
|
|
|
"value": "http://www.xn--etherealsoires-mkb.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "339e2c4f-3ce6-4ed2-85ba-fac404c1cbb2",
|
|
|
|
"value": "http://www.bestrosetoy.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "bb9f9718-bb93-423b-9e6c-9f38c6a6291f",
|
|
|
|
"value": "http://www.discounthub.xyz/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "73de086e-dbd8-4536-9f03-1fc85dfb5115",
|
|
|
|
"value": "http://www.addmusthaveoppprofit.online/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "61249e18-95a3-42b0-a6b9-15a49e8cd99b",
|
|
|
|
"value": "http://www.abovegame.biz/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "6027c304-0bdf-4683-bacb-8926fe7211e3",
|
|
|
|
"value": "http://www.getv3apparel.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "6c0cb55b-a22f-4b3e-a0c3-23e5fcfd0296",
|
|
|
|
"value": "http://www.designroom.app/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "7148dba1-455c-44bd-a2ee-1a2b14b5e972",
|
|
|
|
"value": "http://www.apatriotspeaks.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "9db4f5da-9b2c-4ba1-accc-6f2221373c18",
|
|
|
|
"value": "http://www.ayq6cn.shop/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "9db45041-94a0-48ae-88df-d1bbb4a4f6e3",
|
|
|
|
"value": "http://www.androidrehber.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "4e73bca3-112a-4a4f-8611-c4bc63ff6169",
|
|
|
|
"value": "http://www.iratewonderhandstore.africa/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "4c923cec-57f6-4791-a7ff-71d82ea32629",
|
|
|
|
"value": "http://www.chateaufinewines.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "4fb3a653-02a2-47a0-8088-cb53d7e051c1",
|
|
|
|
"value": "http://www.fantiplumbing.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "5d1e2ed6-837f-4aa8-8586-1f391cda8565",
|
|
|
|
"value": "http://www.furadventure.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "fdf0dee9-abbe-4552-878b-7f33c632c562",
|
|
|
|
"value": "http://www.jogo.africa/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "adee708d-eede-4579-a7b8-72179ab5a711",
|
|
|
|
"value": "http://www.dashfashion.store/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "5eb2d54a-7167-4f7c-b714-2550d09097e6",
|
|
|
|
"value": "http://www.family-doctor-54927.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "7f647d45-cdea-4a4e-aa6e-2c3000e52a7a",
|
|
|
|
"value": "http://www.66y143.xyz/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "af133f91-2d4a-44b3-a3d6-5307fd780e43",
|
|
|
|
"value": "http://www.bokenco.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "735ffdf0-a38f-41aa-8b7e-6d43600bcde4",
|
|
|
|
"value": "http://www.lermansalesmarketing.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914587",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "9af63832-7564-4731-ae35-7643753bf0eb",
|
|
|
|
"value": "http://www.mybunnylawn.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "bac1ae29-3891-478c-a567-4207b05f7b53",
|
|
|
|
"value": "http://www.innerlovefest.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "e96a51d4-537e-4e5e-8826-585d7294a09b",
|
|
|
|
"value": "http://www.jiayi-x.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "a5ce1844-f7f0-41c6-af48-3d2c5af25b22",
|
|
|
|
"value": "http://www.azart-player.ru/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "194032b2-a68e-4baf-b8ef-a6c4c796fa51",
|
|
|
|
"value": "http://www.motorsolutionswithmakro.co.uk/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "b4244948-643e-4a88-a3ba-a1cfdbb84d3d",
|
|
|
|
"value": "http://www.demonstrate-suppress.net/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "af470685-7930-4b87-908d-4b25b7420e34",
|
|
|
|
"value": "http://www.jaafil.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "44c079aa-dc0a-4ddb-87ab-fc86e08167a6",
|
|
|
|
"value": "http://www.coinnspoo.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "837b1a46-388f-42cb-8294-675e5d830343",
|
|
|
|
"value": "http://www.micdavevtuportal.africa/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "44677da4-28f1-4cac-8829-a9d2ad5ef34d",
|
|
|
|
"value": "http://www.austmactrading.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "9d399bc7-4da5-4625-b47c-aba26ce10de7",
|
|
|
|
"value": "http://www.bxsh.cloud/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "10ef7b23-c616-41ce-b152-f281ec7645eb",
|
|
|
|
"value": "http://www.ourfturehealth.org.uk/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "5c31d935-4a56-4803-a25b-89338998013d",
|
|
|
|
"value": "http://www.3dgamesource.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "3b5daf79-74ac-4083-a19d-d5eb9f1cfac9",
|
|
|
|
"value": "http://www.capturecreativeproductions.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "0a25c3fa-2baf-412c-b654-129f809a3a13",
|
|
|
|
"value": "http://www.vestby.net/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "4525126a-4c0b-415c-a78d-a1e6a32eb19b",
|
|
|
|
"value": "http://www.uyruio.xyz/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "2aee2897-12c4-416b-a2d9-757395547dad",
|
|
|
|
"value": "http://www.calandrainmanlaw.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "522b298a-c90d-417a-a956-e953a6f47903",
|
|
|
|
"value": "http://www.horsesnarrowboatsrabbits.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "c490978c-ad73-436a-ab15-00ff0e07d468",
|
|
|
|
"value": "http://www.moosemunch.boo/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "46a8f5e7-44f5-4b94-9667-2ad492e11bd7",
|
|
|
|
"value": "http://www.famousleaked.site/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "e621d78c-26d5-4407-b76f-3e4afdeb8380",
|
|
|
|
"value": "http://www.betonyventures.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "b4c4d6dd-1b0d-4ccf-9b16-5cee38a497e5",
|
|
|
|
"value": "http://www.68i81.top/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "4d0096fc-300f-4552-b249-6c4eabb86653",
|
|
|
|
"value": "http://www.katskateringllc.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "ea881faa-5a1c-4edf-9026-9a1f1eee570c",
|
|
|
|
"value": "http://www.wemakebelieve.africa/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "5053adfa-897b-408d-b34e-972d0831db6e",
|
|
|
|
"value": "http://www.hissy.shop/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "82fe9152-92bf-4897-a7cc-556755105adb",
|
|
|
|
"value": "http://www.eatit.click/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "521a794d-f4fc-44c0-91ae-a708d21ed819",
|
|
|
|
"value": "http://www.awesomeessential.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "dd2b177c-166b-42fd-925c-a705f8a40960",
|
|
|
|
"value": "http://www.hbcumicbrophone.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "cfa7cef2-fd73-47a3-9140-3d03b303cad2",
|
|
|
|
"value": "http://www.calliebarrows.online/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "9e6123b7-74b3-4c0d-a2e1-f6a19bf10c74",
|
|
|
|
"value": "http://www.brippa.store/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "url",
|
|
|
|
"uuid": "8f94cb78-8531-4623-89f6-2d093a013e1d",
|
|
|
|
"value": "http://www.chopsbyzarah.com/km37/"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "83f54521-961f-46ad-b00d-010f29f49fd5",
|
|
|
|
"value": "uyruio.xyz"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "e41069bc-5159-47a9-9dfd-d3d8bbd204e6",
|
|
|
|
"value": "busybody.app"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "9c6951e3-f5e7-43c9-805b-362ddc2830a3",
|
|
|
|
"value": "damcostafreda12.cat"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "4551b800-c100-4d22-a006-72567ad31a5c",
|
|
|
|
"value": "blueridgebedracks.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "0400aaf2-c9ea-4e75-b3a7-eaf9f35edd05",
|
|
|
|
"value": "hilltopspice.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "9e877399-b09c-43b2-9086-cd3b567c6aeb",
|
|
|
|
"value": "addonysfitwear.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "5debd74c-f828-47c4-afa0-01933f191513",
|
|
|
|
"value": "bestridelabs.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "0000d769-d9e8-47cf-b142-1bc39e5fad86",
|
|
|
|
"value": "huashi366.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "8dca6004-d1c9-4a45-9835-0d7e87554875",
|
|
|
|
"value": "1wihug.top"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "6aa7846c-8168-4d4d-941c-0a433e5ba464",
|
|
|
|
"value": "66563.se"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "37e2387d-73c4-4a5c-b89d-46b722e1d583",
|
|
|
|
"value": "96mvipmy.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "b77d9d25-35d0-4c4d-bfe7-355fccf81f13",
|
|
|
|
"value": "lab1207.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "59ae07be-6619-472f-b0a1-3d0fb9758953",
|
|
|
|
"value": "80b80.app"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "8b2e1055-0d2c-485b-892d-24653a17294d",
|
|
|
|
"value": "graphicstudio53.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "536dab9f-91ac-41ff-8b97-5b195cfc3e16",
|
|
|
|
"value": "xn--etherealsoires-mkb.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "5ad947f8-183a-4b38-bab9-851d0d7f3e2a",
|
|
|
|
"value": "bestrosetoy.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "39591a56-94e6-4c11-9f7f-f60ab59a96b0",
|
|
|
|
"value": "discounthub.xyz"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "4defcc11-f8dd-4d00-a70e-3db2115964ab",
|
|
|
|
"value": "addmusthaveoppprofit.online"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "c9658f37-c8e0-4eb0-b012-ccab9bf9a974",
|
|
|
|
"value": "abovegame.biz"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "bede2e4d-93a4-4ea9-9c11-51d0a0cb0221",
|
|
|
|
"value": "getv3apparel.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "8ba43512-c705-48b2-8976-fd372442c42a",
|
|
|
|
"value": "designroom.app"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "a196b7aa-a238-43d3-b3be-af9dd79ea5ed",
|
|
|
|
"value": "apatriotspeaks.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "eaaaf0e9-caec-47db-8e71-628629cfd333",
|
|
|
|
"value": "ayq6cn.shop"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "d3733fb9-d1db-45ab-8030-909ae1658489",
|
|
|
|
"value": "androidrehber.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "6d3b2881-86c9-4e31-833b-6c33b47a31dc",
|
|
|
|
"value": "iratewonderhandstore.africa"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "31206293-4fa3-441b-8104-f0c5708618d0",
|
|
|
|
"value": "chateaufinewines.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "72ac3f7f-8a25-4a05-a54d-6480e54019e9",
|
|
|
|
"value": "fantiplumbing.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "68ba6a59-b442-4ede-b900-c5d5810f4f6c",
|
|
|
|
"value": "furadventure.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "60d34f8e-dbda-4b40-a2e4-0889a88cf558",
|
|
|
|
"value": "jogo.africa"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "5c5c6978-9f34-4bfd-85e8-073b913d60e1",
|
|
|
|
"value": "dashfashion.store"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "05c109c1-cf89-42b0-a30e-97650817893a",
|
|
|
|
"value": "family-doctor-54927.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "7b8909d2-0d3c-4d26-80be-03b851f343c1",
|
|
|
|
"value": "66y143.xyz"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "21b6693b-1eef-483d-888c-9d40d594ecda",
|
|
|
|
"value": "bokenco.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "76526bd7-3718-4436-9590-d707024ee27e",
|
|
|
|
"value": "lermansalesmarketing.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "b9662f7a-0d63-40a5-a006-736784687fe9",
|
|
|
|
"value": "mybunnylawn.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "10b271aa-eb95-42df-b6f4-fa3d859e4eb6",
|
|
|
|
"value": "innerlovefest.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "f03b1125-8766-4df6-9404-f2beef343344",
|
|
|
|
"value": "jiayi-x.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "9714a154-0f93-4775-b54e-37bf870e7f97",
|
|
|
|
"value": "azart-player.ru"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "hostname",
|
|
|
|
"uuid": "0b8ccca0-fca2-4a09-b75b-2a6f315aef06",
|
|
|
|
"value": "motorsolutionswithmakro.co.uk"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "1cbc9b77-6bdd-41b8-a2b7-d2b4d23f0761",
|
|
|
|
"value": "demonstrate-suppress.net"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "a24e3072-80a7-4fcf-a4d6-3096c21ad75f",
|
|
|
|
"value": "jaafil.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "bdcfd91b-fce5-4185-bb1b-da583830d345",
|
|
|
|
"value": "coinnspoo.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "25351a63-1398-4969-a28f-058e74b0c0d2",
|
|
|
|
"value": "micdavevtuportal.africa"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "843185ed-3944-41cf-b011-dedfdc67fcc4",
|
|
|
|
"value": "austmactrading.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "6f6c2623-fae9-4c38-ad68-5f6231eb1934",
|
|
|
|
"value": "bxsh.cloud"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "hostname",
|
|
|
|
"uuid": "83009994-2ef8-4a40-b8b9-03039174c2f8",
|
|
|
|
"value": "ourfturehealth.org.uk"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "493e320c-8f06-42b7-b3f3-25a39f870091",
|
|
|
|
"value": "3dgamesource.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "923ca210-f4fb-4af8-b4a6-f82e7fc26153",
|
|
|
|
"value": "capturecreativeproductions.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "97ad0b4d-09f3-41e0-a8b7-e59dc12ad4a1",
|
|
|
|
"value": "vestby.net"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "b24b680f-04b0-493a-8e69-afe9a74ab827",
|
|
|
|
"value": "calandrainmanlaw.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "7484a7a7-8b1a-4c5c-bdc6-4dd72dd74722",
|
|
|
|
"value": "horsesnarrowboatsrabbits.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "1343f996-a25d-412a-916b-ef6f941c18e8",
|
|
|
|
"value": "moosemunch.boo"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "be148637-d377-4b17-88c1-a0b07ab4311e",
|
|
|
|
"value": "famousleaked.site"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "02656b3d-ec4d-4a65-aa2b-c893c4781973",
|
|
|
|
"value": "betonyventures.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "05ac93b4-4a6f-4296-9133-ec7282db5ae4",
|
|
|
|
"value": "68i81.top"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "d33b4412-cfd9-47e3-b886-c0348877e3aa",
|
|
|
|
"value": "katskateringllc.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "a83fa2f8-1538-4b4c-9ce3-d1815c4d656b",
|
|
|
|
"value": "wemakebelieve.africa"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "dd970936-09ec-48c8-80e3-2e4bc09cda1d",
|
|
|
|
"value": "hissy.shop"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "1e474f74-7223-4488-a5e1-8f51cbc50ecb",
|
|
|
|
"value": "eatit.click"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "49a455d4-1f71-4f91-b067-9376c2424d7c",
|
|
|
|
"value": "awesomeessential.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914588",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "c5ff3ea8-331d-4848-b6e7-2f98397a68d7",
|
|
|
|
"value": "hbcumicbrophone.com"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914589",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "8811541d-85aa-4c6d-ac41-421ea99fef95",
|
|
|
|
"value": "calliebarrows.online"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914589",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "e320c8c9-4a74-4d8f-952e-3147d65866e2",
|
|
|
|
"value": "brippa.store"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Network activity",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"timestamp": "1686914589",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "domain",
|
|
|
|
"uuid": "15ae976c-4fe2-4314-bc1e-be3337ce16f2",
|
|
|
|
"value": "chopsbyzarah.com"
|
|
|
|
}
|
|
|
|
],
|
|
|
|
"Object": [
|
|
|
|
{
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
"meta-category": "file",
|
|
|
|
"name": "file",
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
"template_version": "24",
|
|
|
|
"timestamp": "1686914151",
|
|
|
|
"uuid": "69beb6c9-8997-4e7e-87d8-2b2c33be16cd",
|
|
|
|
"Attribute": [
|
|
|
|
{
|
|
|
|
"category": "Payload delivery",
|
|
|
|
"comment": "",
|
|
|
|
"data": "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
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"object_relation": "malware-sample",
|
|
|
|
"timestamp": "1686914151",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "malware-sample",
|
|
|
|
"uuid": "7285fa77-ec38-45f2-99fc-95df3de38515",
|
|
|
|
"value": "SV00388388323788.arj|f515d29ebd892a5f8b19e571a75a6d34"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Payload delivery",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"object_relation": "filename",
|
|
|
|
"timestamp": "1686914151",
|
|
|
|
"to_ids": false,
|
|
|
|
"type": "filename",
|
|
|
|
"uuid": "42b6ea07-cb5b-4abb-a772-1996a857e9e8",
|
|
|
|
"value": "SV00388388323788.arj"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Payload delivery",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"object_relation": "md5",
|
|
|
|
"timestamp": "1686914151",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "md5",
|
|
|
|
"uuid": "8098d752-1225-4d9d-b05b-6449fd997177",
|
|
|
|
"value": "f515d29ebd892a5f8b19e571a75a6d34"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Payload delivery",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"object_relation": "sha1",
|
|
|
|
"timestamp": "1686914151",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "sha1",
|
|
|
|
"uuid": "84850997-631c-44ea-ac71-5f8bb4e6e1f0",
|
|
|
|
"value": "c514799ffdc38d48b7e90b8b6a324c354d1fd2a2"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Payload delivery",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"object_relation": "sha256",
|
|
|
|
"timestamp": "1686914151",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "sha256",
|
|
|
|
"uuid": "1e46142a-d077-4204-999d-1095a950c5e2",
|
|
|
|
"value": "5ba3876088c3578f7d369253d0c27454794282e420a106188fbee7e060a3cea1"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Other",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": true,
|
|
|
|
"object_relation": "size-in-bytes",
|
|
|
|
"timestamp": "1686914151",
|
|
|
|
"to_ids": false,
|
|
|
|
"type": "size-in-bytes",
|
|
|
|
"uuid": "39b0f554-e861-4073-9ce2-54a8c18d352f",
|
|
|
|
"value": "703515"
|
|
|
|
}
|
|
|
|
]
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
"meta-category": "file",
|
|
|
|
"name": "file",
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
"template_version": "20",
|
|
|
|
"timestamp": "1686914193",
|
|
|
|
"uuid": "3dbd0d4d-7a4c-4f82-82a8-7250bf129a34",
|
|
|
|
"Attribute": [
|
|
|
|
{
|
|
|
|
"category": "Payload delivery",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": true,
|
|
|
|
"object_relation": "filename",
|
|
|
|
"timestamp": "1686914193",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "filename",
|
|
|
|
"uuid": "d3b71dab-4483-4b84-a817-b4fd582ff401",
|
|
|
|
"value": "84470338a1b460b107ab8b8642c04bf12fe930e224b79dcb0dad5ac713fc7b85"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Other",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": true,
|
|
|
|
"object_relation": "size-in-bytes",
|
|
|
|
"timestamp": "1686914193",
|
|
|
|
"to_ids": false,
|
|
|
|
"type": "size-in-bytes",
|
|
|
|
"uuid": "6f23315d-5641-4c68-881d-a0361cd55d8d",
|
|
|
|
"value": "184832"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Other",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": true,
|
|
|
|
"object_relation": "entropy",
|
|
|
|
"timestamp": "1686914193",
|
|
|
|
"to_ids": false,
|
|
|
|
"type": "float",
|
|
|
|
"uuid": "a7df989d-89a2-4f4e-b73d-989ee8589c2d",
|
|
|
|
"value": "7.4132217734106"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Payload delivery",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"object_relation": "md5",
|
|
|
|
"timestamp": "1686914193",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "md5",
|
|
|
|
"uuid": "f586eba0-0b44-41c8-aef7-fb3a8322f9a4",
|
|
|
|
"value": "a9e30d6f94ac7d32de3e0d46bea63795"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Payload delivery",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"object_relation": "sha1",
|
|
|
|
"timestamp": "1686914193",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "sha1",
|
|
|
|
"uuid": "4d1520e8-f023-4d52-a972-88020dbc5397",
|
|
|
|
"value": "a90acad4b9cd1d762c758721b0913c3e130d0e3c"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Payload delivery",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"object_relation": "sha256",
|
|
|
|
"timestamp": "1686914193",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "sha256",
|
|
|
|
"uuid": "439985d8-ae4f-46c0-a8a6-6e672060ef3e",
|
|
|
|
"value": "84470338a1b460b107ab8b8642c04bf12fe930e224b79dcb0dad5ac713fc7b85"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Payload delivery",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"object_relation": "sha512",
|
|
|
|
"timestamp": "1686914193",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "sha512",
|
|
|
|
"uuid": "3d253e86-7f11-4812-b330-57c6ab7df2e7",
|
|
|
|
"value": "b68ba759b7f42362afd514aab8c2eeeb57e395a9e24b0faa3e2c1411bf6149f86722731d470390e3dce35e4183c9e283fd6b8c04792c1df46d4b0d0b50e0c2f8"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Payload delivery",
|
|
|
|
"comment": "",
|
|
|
|
"data": "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
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"object_relation": "malware-sample",
|
|
|
|
"timestamp": "1686914193",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "malware-sample",
|
|
|
|
"uuid": "90f082ee-a397-4565-b445-b29c00cfa02c",
|
|
|
|
"value": "84470338a1b460b107ab8b8642c04bf12fe930e224b79dcb0dad5ac713fc7b85|a9e30d6f94ac7d32de3e0d46bea63795"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Artifacts dropped",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": true,
|
|
|
|
"object_relation": "mimetype",
|
|
|
|
"timestamp": "1686914193",
|
|
|
|
"to_ids": false,
|
|
|
|
"type": "mime-type",
|
|
|
|
"uuid": "9ae19b1f-2715-4791-b132-50f3bd169f6e",
|
|
|
|
"value": "data"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Payload delivery",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"object_relation": "ssdeep",
|
|
|
|
"timestamp": "1686914193",
|
|
|
|
"to_ids": true,
|
|
|
|
"type": "ssdeep",
|
|
|
|
"uuid": "2b709d1c-4dfb-40f7-bde8-8e07fce07930",
|
|
|
|
"value": "3072:NHJRT+khPd3g8gUp3oudAgrDq4AKV9FUzmlYKGEYuCraA1vwLZ:jxVoOTXq45V92vKjYuhgvo"
|
|
|
|
}
|
|
|
|
]
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"description": "Malware configuration recovered or extracted from a malicious binary.",
|
|
|
|
"meta-category": "file",
|
|
|
|
"name": "malware-config",
|
|
|
|
"template_uuid": "8200b79b-1d8c-49a8-9a63-7710e613c059",
|
|
|
|
"template_version": "1",
|
|
|
|
"timestamp": "1686914286",
|
|
|
|
"uuid": "3fc92764-b5a3-48f1-8866-1547f8e63f7f",
|
|
|
|
"Attribute": [
|
|
|
|
{
|
|
|
|
"category": "Other",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": false,
|
|
|
|
"object_relation": "config",
|
|
|
|
"timestamp": "1686914286",
|
|
|
|
"to_ids": false,
|
|
|
|
"type": "text",
|
|
|
|
"uuid": "e8a61388-42d1-42ed-9197-e788fd624f1f",
|
|
|
|
"value": "{\r\n \"keys\": [\r\n \"7f1cf8a24c450f66b4d58bff70a4f51a739c6db4\",\r\n \"e02377d3a2c0370ad8cd43957487b0bfe3b3fd9e\",\r\n \"090f3f94d775d9a351558dca5130a9af3beb4f7b\",\r\n \"fb434171528eaf7d6fb502701a6fe4d9f0f47ecd\",\r\n \"925f0e6df989b15fcf430ee98f2e0fdc12c909c9\",\r\n \"413797622f6a40d9b170cd9a77480ccb5d6b61cc\",\r\n \"61f0ddfbe29c8e01c2672f5f2be3d46480f89655\"\r\n ],\r\n \"type\": \"formbook\",\r\n \"urls\": [\r\n {\r\n \"url\": \"http://www.doordelivery.life/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.busybody.app/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.damcostafreda12.cat/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.blueridgebedracks.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.hilltopspice.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.addonysfitwear.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.bestridelabs.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.huashi366.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.1wihug.top/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.66563.se/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.96mvipmy.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.lab1207.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.80b80.app/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.graphicstudio53.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.xn--etherealsoires-mkb.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.bestrosetoy.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.discounthub.xyz/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.addmusthaveoppprofit.online/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.abovegame.biz/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.getv3apparel.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.designroom.app/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.apatriotspeaks.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.ayq6cn.shop/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.androidrehber.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.iratewonderhandstore.africa/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.chateaufinewines.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.fantiplumbing.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.furadventure.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.jogo.africa/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.dashfashion.store/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.family-doctor-54927.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.66y143.xyz/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.bokenco.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.lermansalesmarketing.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.mybunnylawn.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.innerlovefest.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.jiayi-x.com/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.azart-player.ru/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.motorsolutionswithmakro.co.uk/km37/\"\r\n },\r\n {\r\n \"url\": \"http://www.demonstrate-suppress.net/km37/\"\r\n },\r\n {\r
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"category": "Other",
|
|
|
|
"comment": "",
|
|
|
|
"deleted": false,
|
|
|
|
"disable_correlation": true,
|
|
|
|
"object_relation": "format",
|
|
|
|
"timestamp": "1686914286",
|
|
|
|
"to_ids": false,
|
|
|
|
"type": "text",
|
|
|
|
"uuid": "26ec0c40-ad79-41e4-a510-3ab8dbc3a957",
|
|
|
|
"value": "JSON"
|
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
2023-06-24 09:36:52 +00:00
|
|
|
]
|
2023-12-14 14:30:15 +00:00
|
|
|
}
|
2023-06-24 09:36:52 +00:00
|
|
|
}
|