adulau/misp-circl-feed
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Packages Wiki Activity Actions
misp-circl-feed/feeds/circl/misp/ff6b1c02-8c44-4646-9d3f-9a831b5ba006.json

617 lines
632 KiB
JSON
Raw Normal View History

chg: [feed] added
2023-04-21 13:25:09 +00:00
{
chg: [gen] updated
2023-12-14 14:30:15 +00:00
"Event": {
"analysis": "0",
"date": "2022-05-11",
"extends_uuid": "",
"info": "Phishing La Banque Postale - Lookyloo Capture (http://one.doesntexist.com/p/b2ba4)",
"publish_timestamp": "1652441684",
"published": true,
"threat_level_id": "3",
"timestamp": "1652441662",
"uuid": "ff6b1c02-8c44-4646-9d3f-9a831b5ba006",
"Orgc": {
"name": "CIRCL",
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
},
"Tag": [
{
"colour": "#316200",
"local": "0",
"name": "circl:incident-classification=\"phishing\"",
"relationship_type": ""
},
{
"colour": "#ffffff",
"local": "0",
"name": "tlp:white",
"relationship_type": ""
},
{
"colour": "#004646",
"local": "0",
"name": "type:OSINT",
"relationship_type": ""
},
{
"colour": "#0071c3",
"local": "0",
"name": "osint:lifetime=\"perpetual\"",
"relationship_type": ""
}
],
"Attribute": [
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1652281375",
"to_ids": false,
"type": "link",
"uuid": "70dddd06-dead-43c6-bdf2-6da2fa0538af",
"value": "https://lookyloo.circl.lu/tree/184f1ad3-27b1-4402-834b-fc0b579313cb"
},
{
"category": "External analysis",
"comment": "",
"data": "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
"deleted": false,
"disable_correlation": true,
"timestamp": "1652281375",
"to_ids": false,
"type": "attachment",
"uuid": "f84d9326-0fc4-4010-b604-e0d13e6667d1",
"value": "screenshot_landing_page.png"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1652281375",
"to_ids": false,
"type": "link",
"uuid": "a2de8830-f5b6-4083-96f7-d3e346c2633a",
"value": "https://urlscan.io/result/ddce0ad0-1e2a-4c7d-ba74-12c0a33a72c8/"
}
],
"Object": [
{
"comment": "Submitted URL",
"deleted": false,
"description": "url object describes an url along with its normalized field (like extracted using faup parsing library) and its metadata.",
"meta-category": "network",
"name": "url",
"template_uuid": "60efb77b-40b5-4c46-871b-ed1ed999fce5",
"template_version": "9",
"timestamp": "1652281375",
"uuid": "98f7b0f5-84aa-47cf-a092-6ded5bd596c6",
"ObjectReference": [
{
"comment": "",
"object_uuid": "98f7b0f5-84aa-47cf-a092-6ded5bd596c6",
"referenced_uuid": "28bcffa1-e25b-43e9-9acd-d732c6456e93",
chg: [feed] added
2023-04-21 13:25:09 +00:00
"relationship_type": "redirects-to",
chg: [gen] updated
2023-12-14 14:30:15 +00:00
"timestamp": "1652281376",
"uuid": "146b2449-0bb4-4589-9491-4a39cf0e825e"
},
{
"comment": "Capture on lookyloo",
"object_uuid": "98f7b0f5-84aa-47cf-a092-6ded5bd596c6",
"referenced_uuid": "70dddd06-dead-43c6-bdf2-6da2fa0538af",
chg: [feed] added
2023-04-21 13:25:09 +00:00
"relationship_type": "captured-by",
chg: [gen] updated
2023-12-14 14:30:15 +00:00
"timestamp": "1652281376",
"uuid": "ea323768-c8d9-4324-a768-f20a286915f8"
},
{
"comment": "",
"object_uuid": "98f7b0f5-84aa-47cf-a092-6ded5bd596c6",
"referenced_uuid": "b939f553-12b7-43f9-ba4d-40944a3be7db",
chg: [feed] added
2023-04-21 13:25:09 +00:00
"relationship_type": "analysed-with",
chg: [gen] updated
2023-12-14 14:30:15 +00:00
"timestamp": "1652281376",
"uuid": "e1f5066a-baa5-4323-a160-298d9886ef3a"
}
],
"Attribute": [
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "url",
"timestamp": "1652281375",
"to_ids": true,
"type": "url",
"uuid": "23eaccf8-0b50-4b3e-af0f-cd8d5caf5dbe",
"value": "http://one.doesntexist.com/p/b2ba4"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "host",
"timestamp": "1652281375",
"to_ids": true,
"type": "hostname",
"uuid": "a042313d-d7be-45b7-b98d-cdcae55389ce",
"value": "one.doesntexist.com"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "domain",
"timestamp": "1652281375",
"to_ids": true,
"type": "domain",
"uuid": "92a11e10-3703-41ba-8f33-f29e1e71a4df",
"value": "one.doesntexist.com"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "ip",
"timestamp": "1652281375",
"to_ids": true,
"type": "ip-dst",
"uuid": "1324f79c-0efa-45ff-b103-b1a90a41e57c",
"value": "23.94.183.62"
}
]
},
{
"comment": "Redirect 0",
"deleted": false,
"description": "url object describes an url along with its normalized field (like extracted using faup parsing library) and its metadata.",
"meta-category": "network",
"name": "url",
"template_uuid": "60efb77b-40b5-4c46-871b-ed1ed999fce5",
"template_version": "9",
"timestamp": "1652281425",
"uuid": "28bcffa1-e25b-43e9-9acd-d732c6456e93",
"ObjectReference": [
{
"comment": "",
"object_uuid": "28bcffa1-e25b-43e9-9acd-d732c6456e93",
"referenced_uuid": "dae82c40-86ac-4eb7-be71-594e6355f171",
chg: [feed] added
2023-04-21 13:25:09 +00:00
"relationship_type": "redirects-to",
chg: [gen] updated
2023-12-14 14:30:15 +00:00
"timestamp": "1652281376",
"uuid": "5e5d24c9-f0f0-4acf-9e22-fe2f3b60224b"
},
{
"comment": "",
"object_uuid": "28bcffa1-e25b-43e9-9acd-d732c6456e93",
"referenced_uuid": "a530c278-985f-4406-8446-a586d13a5247",
chg: [feed] added
2023-04-21 13:25:09 +00:00
"relationship_type": "analysed-with",
chg: [gen] updated
2023-12-14 14:30:15 +00:00
"timestamp": "1652281376",
"uuid": "889150ec-f558-4542-8114-f277f1e18ca5"
}
],
"Attribute": [
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "url",
"timestamp": "1652281375",
"to_ids": true,
"type": "url",
"uuid": "641ed0eb-498e-498a-8335-1eb05e2dcf91",
"value": "https://one.doesntexist.com/p/b2ba4"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "host",
"timestamp": "1652281375",
"to_ids": true,
"type": "hostname",
"uuid": "974f6db8-3c13-42da-b333-f1aa36b971c6",
"value": "one.doesntexist.com"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "domain",
"timestamp": "1652281375",
"to_ids": true,
"type": "domain",
"uuid": "503d9b29-a7f7-4d98-bd46-b0673588c789",
"value": "one.doesntexist.com"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "ip",
"timestamp": "1652281425",
"to_ids": true,
"type": "ip-dst",
"uuid": "b7bd8c2c-ec32-49a7-a670-1fab4dab803b",
"value": "23.94.183.62"
}
]
},
{
"comment": "Last redirect (1)",
"deleted": false,
"description": "url object describes an url along with its normalized field (like extracted using faup parsing library) and its metadata.",
"meta-category": "network",
"name": "url",
"template_uuid": "60efb77b-40b5-4c46-871b-ed1ed999fce5",
"template_version": "9",
"timestamp": "1652281375",
"uuid": "dae82c40-86ac-4eb7-be71-594e6355f171",
"ObjectReference": [
{
"comment": "",
"object_uuid": "dae82c40-86ac-4eb7-be71-594e6355f171",
"referenced_uuid": "96251147-2609-46da-9a12-8e59b27a5d03",
chg: [feed] added
2023-04-21 13:25:09 +00:00
"relationship_type": "analysed-with",
chg: [gen] updated
2023-12-14 14:30:15 +00:00
"timestamp": "1652281376",
"uuid": "8f9a19a1-f1ff-4356-a42a-d429213965bd"
}
],
"Attribute": [
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "url",
"timestamp": "1652281376",
"to_ids": true,
"type": "url",
"uuid": "ad4967da-483f-4e9f-91cb-01b66900892d",
"value": "https://one.doesntexist.com/p/b2ba4/"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "host",
"timestamp": "1652281376",
"to_ids": true,
"type": "hostname",
"uuid": "6fea338d-fb44-4939-8a3b-84955e774ab7",
"value": "one.doesntexist.com"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "domain",
"timestamp": "1652281376",
"to_ids": true,
"type": "domain",
"uuid": "8808246e-abc0-40bf-81a7-2a071dacb3db",
"value": "one.doesntexist.com"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "ip",
"timestamp": "1652281376",
"to_ids": true,
"type": "ip-dst",
"uuid": "38606fda-350c-4db4-9952-30a6483cb7b3",
"value": "23.94.183.62"
}
]
},
{
"comment": "Content received for the final redirect (before rendering)",
"deleted": false,
"description": "File object describing a file with meta-information",
"meta-category": "file",
"name": "file",
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
"template_version": "24",
"timestamp": "1652281376",
"uuid": "f506dd8d-6577-41a2-aee6-4dbd731ac45a",
"ObjectReference": [
{
"comment": "URL loading that content",
"object_uuid": "f506dd8d-6577-41a2-aee6-4dbd731ac45a",
"referenced_uuid": "dae82c40-86ac-4eb7-be71-594e6355f171",
chg: [feed] added
2023-04-21 13:25:09 +00:00
"relationship_type": "loaded-by",
chg: [gen] updated
2023-12-14 14:30:15 +00:00
"timestamp": "1652281376",
"uuid": "17d8bd14-a8ac-4f3b-99c0-0dc19cc395a8"
},
{
"comment": "Screenshot of the page",
"object_uuid": "f506dd8d-6577-41a2-aee6-4dbd731ac45a",
"referenced_uuid": "f84d9326-0fc4-4010-b604-e0d13e6667d1",
chg: [feed] added
2023-04-21 13:25:09 +00:00
"relationship_type": "rendered-as",
chg: [gen] updated
2023-12-14 14:30:15 +00:00
"timestamp": "1652281376",
"uuid": "c1b17ba2-6fd4-441a-b317-d921aae4d081"
}
],
"Attribute": [
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "filename",
"timestamp": "1652281376",
"to_ids": true,
"type": "filename",
"uuid": "120ff350-f3ce-413b-89f4-0ac8676a478d",
"value": "b2ba4"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "size-in-bytes",
"timestamp": "1652281376",
"to_ids": false,
"type": "size-in-bytes",
"uuid": "04c5c8a1-bb67-487f-b6be-6e568d176167",
"value": "9290"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "entropy",
"timestamp": "1652281376",
"to_ids": false,
"type": "float",
"uuid": "aefe0ae6-34c7-4b32-b9b0-ee7df8683b4e",
"value": "5.1610648035932"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "md5",
"timestamp": "1652281376",
"to_ids": true,
"type": "md5",
"uuid": "640335eb-5f43-4605-b00e-58a620d5df30",
"value": "98a92abab85921a86fa8f357f5c2c4e1"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha1",
"timestamp": "1652281376",
"to_ids": true,
"type": "sha1",
"uuid": "5b492cfa-164b-45cc-aba5-1b295f869b72",
"value": "90bdc8691282c1ea1cdb75ef6c108e0e35ae8900"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha256",
"timestamp": "1652281376",
"to_ids": true,
"type": "sha256",
"uuid": "7aa08faf-b331-4c30-989c-7f775e445147",
"value": "77f737ba3a583162386ef0dfb658552728c313fb03f6459778513e2b8a08ef02"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "sha512",
"timestamp": "1652281376",
"to_ids": true,
"type": "sha512",
"uuid": "911b54a7-8dd4-4129-a4f2-c5820c2a664f",
"value": "2897386ef7fc4f647b79f2248092112dbfff2df33975a7cce442e3510fe0fb26c274717aae31878cb467eac39244f043c73d4ec4e907c5e6e11c9926eca8e2cb"
},
{
"category": "Payload delivery",
"comment": "",
"data": "UEsDBBQACQAIAFx4q1T0YxHCOQoAAEokAAAgABwAOThhOTJhYmFiODU5MjFhODZmYThmMzU3ZjVjMmM0ZTFVVAkAAyDQe2Ig0HtidXgLAAEEIQAAAAQhAAAAbvOiSyfbWpWJiH34n3xMOaVtHdNuFTdPUT5aTxnfN8WKIc8emP6FADaf2n+dK1BtTNRWArYnFsvusLROJyfUXNjyhsirTmmVPZHE88t03s6cU9Il359Vx6xhHgP86rZ+oDsVApMYehe1fBEp92C0ESBAbDU/lGsRKpKrPdvBVdhVqVzAustqhN1A2LkmqX0uo+5YQ6u6d1snuiPi43FLWRfgBujX/JASzFTfgRIYG1LfhQyq26y5AlgIugn3fygZwPCbEKX+0cQDaT/ATum9aGSlc/s9B1WF5jiCBU5o7Tf05oaQolsUD8pqzfUZONcJ5tMtMNVAYcHQl/g+5LYS/nYZwHxA5YKW/BW4tFSjVCH1lGEeXiLjE6HtZTbQrOhd5sPG+FZ4F9Bp3y4IfoczQE48J4SBeWxRlKyoIas/dABlGbRQo94Qxz5OogZhIk9lWENLsFQ7wpSnMY25iGov7TweTtKwz+uBVOWo+PPQGYN4GXejWoJz0+bLNXlUw1XgOnNCCatxR2xTrTReDzsntRlavVl6b/3Ha2BQOKaBxLv5ZM+aB7+OfwA6QXAKK792/Sn2mZp/e4WH9LWlZ7d56BssOsiomHil61lw3zLJbCf4rpy2eFvN0oUIvhvb0/zN3bpAgqkDcTXOmR/iOcTBA8aRVJYYLlSwxDcDr6IcZw5WmULa4ZU40zpUQbeJ1qcYnxXGlNLJP9Orsou/S8klb72Zgcrqqgj54oNydx55X0CdJtbcal6m7KzspbDa1OHyx1eeohiCvRK9PWM4KxKuZVhDdyYbTN+CxaMQB+sEbOnTnxbSH4XtgBi3gm7iEl3ttiGmm2Cfo/xJFHqzXB3MeN468iBwZbKY9JbOLFoh3KRAeBK6WWAu9mL7yK3tHHnhBhPVxW/lgTvGf5kRq4I4fRLN9QS+whXE+VDjqKpl9tF5fFeKOlnerYNS0kiVetaHXdyGZJxFqqtRlxFJY4EXn9AlkyuHCOnv6JVaVypx0py/1XnXIaqjjGa1ieQ7J7SP6WKZBdmiBj0yG8c4MPlvvIifYHZUz+7xfalbJ7KQ7InntO9njkst1LW0qpMn2meR0kD8oECAQ+8XTJBqwPA+vx0cnzz7ygTDAsslW6ATcwBPOH0JqZmkZ/ytoxBpK6R59K2DUuVqkN3zGikaGEOfOwfenMIdGBKzppr6b7iFm+8W/R0yiczX5r0nlLRXEL0rekK2z5Gv5WNG/uvNqgrYEj7JmLM1M4P4WsuQDPosbJHXh8UHGxJlpjRDKPURoMML3E/k+5E+Ye/VCwohCnvVeaam30dH7fqkkujksNdodgCX0sePk+7Ut2YPdgpR/G7z10XS38kABtylGLTn3cSq2t2ILPJ08mA4KGBPkC9RlXAoctvk+7jMJiZ24dVKLHYkwT6qWhupxjpTJNIgafGMaMHKoibFuHXp6KcxgnqUiXJfrE/aJTHrm5jp94898FeXyNxNDXLVX6Pzk8Ejzw8EGLIR2NYz+NSSd7ntDElW5LTZfIVU76gb4C67OrYO9x1IVfx8bKcSZl8yrYha3kR2J4YQSvwcw5kfwaruqX1qhe1Vy0eLcg5Q5GMvK24ej6J2Nuj/jyY6B7rd92HgGaxPrpLD2KjYdBr9cvl7yrPRbWLSsVWnEl8TDC5Dpr9sMYhJFCH2sXg6ivYm/XuYqoqWb4Qhu3jJZrypGBDAfVR+6esl97VPF7N2PuKbCEeS4JG/ZqLUAz0KoRct3PbQDgB2seLGZgfDbvsAyM7zcbiAGawymg4RahwOIYPygG9MmnkW01O22B/W+LkM9hdwlE8l+CMKdd1H6ehC+j/8MjS3+478B7RY34YfBenreAfey+yTfS8lpxn8T4dyTYRg5f0MudyPtf4wg7VKNuNh8weyJSX7fIw4z8AWkesHM0c93CqHGoPvIB1zVP0XCRtaMnqNlyBCca64y13LJIfNWVn9+aN+NNrYGQsSWbr3SuFZ18wclYGU5nXdqQcza3GUfWbg4AkKDr5+XQ3wafAnvs59UQuCSYzyDh61BRga83oL6XNyVpY8lSNZt+2GGEayWyIwVydm9mYJ6z1QgLNcld54ZxrzKTeSJRTBsdFdeez7IpsBxzr/fZibnRYj5HRm65X3xEBD6fcMg1q9uqYVOFh6EytkWuIcKnEob2PuzL6vQqyQVw0+j2hln2NP1NDr1DN0fPhaiOx3v+vhKb/Nrud0Z0cDWGgmbC7dPPbXWJmgn+KJDrjPm48pn6dZyGm9H8+694tBCDvhMOtJ3kUtVXE3hOVRcZnwvYL/JDV/WcsGwdkz0naUHxa7WeEikxItUFARsROVCnKr5wjQmxRmhxShUtfLyWzo3efuB1zaumYK6KizydCKjiiKVLP6vSnjR7f90PmnCdmRzZhr7DnQkj+Fl7MXEvEYwkZeYRAzA4cLsXU3BmLJIDB0ywsJ+Pak0Oq77dassiLM/d3z+bKgZHBsq7GnDN9z2hGflElDuyM/LhDaaQpcAgJ6nJGGT2duyNmOTUL9Z/vfByMjHSocJpHiz9HGkkUzoAyg8WjlsNr9fRBMrKIU9KX3eZIwlGDqpnWtsuym5uMpfGkMGneMgwqF34j14+/Kxmyk4uyop3x436qfadm2u4Gh1FvoHF4Bv1glfHWWsTQyeyyoAUeEwXlQZ7Apag/U6nr5CnB2TEixq5FdUV1iMvhL/XyAa2DOwoE9YGNMaLXvOh21RmO9iIRAj9pc4JYCSR66fB91gUsWKqvK1MW05UyNVXdF7sQ+Zp3+SSHTAmJD8WSjit3Q70zQYA/SVV5gvQLa7UpDPr69Ky7m0zxEUicXFzIfvZZkCnuGLZY8uOVZEj3uyIVu9PCd23U4hV92Q7MQZy2xudf5SpQNfV3MmEtnbZjjPYXgW500kWMaA6xlwRowK01tG2QWS0toP4Xcvb1+5iln8+Jd1CAbRoROwemRl5O4/18LQMPGYJtnDkB/ZvXWIodSEhemiGKPCv52vuIYClM8cT1LqjtNrGQpy47CAcmKtKa+YwSRirmzT/ATNCqL7zH9rBXP2Co17XSI9YwnRsmQtN0ICsyyXJNh7drMsG1YWxhlxrIpkVnpxBt6KJACkxc4S+3XOyzI0lGiTVk54KgOhqMwJpJVJ7HvQYH2ILpfWWZ4+IAHY+X9G0pg1VcHbNignT1L/X8iIWJ05tpxTRxZHtv3SVXXzS3sZBb483H1Af9PYV/98DZk0fAeOK0v9PfJqxLY/ThwnaId8sUp2V5MmvvxN7091a0kEOwEG2wisdhJytPCACsI/OxYSuR44ddvinfa1a8uxSxOepqhJCm7ReKGuEOT1V7XA88suGY3K9WL8uqG67u+MnSLmQECWWaiclIOoo3hhCylq3J6BXzuXdAd1Yn+ixu4Q6uzeyESWlvitEiI3PG+S3gDtivBWDESiNZFUBH8Atf0a0/Ut1N+kpVC2NRzzlz1610eeM+YKNfGJsAEKNHdCa0S1JoTHVBLBwj0YxHCOQoAAEokAABQSwMECgAJAAAAXHirVAdS82kRAAAABQAAAC0AHAA5OGE5MmFiYWI4NTkyMWE4NmZhOGYzNTdmNWMyYzRlMS5maWxlbmFtZS50eHRVVAkAAyDQe2Ig0HtidXgLAAEEIQAAAAQhAAAApB8Ff6TIAfRIJtnkEG9H9+RQSwcIB1LzaREAAAAFAAAAUEsBAh4DFAAJAAgAXHirVPRjEcI5CgAASiQAACAAGAAAAAAAAQAAAKSBAAAAADk4YTkyYWJhYjg1OTIxYTg2ZmE4ZjM1N2Y1YzJjNGUxVVQFAAMg0HtidXgLAAEEIQAAAAQhAAAAUEsBAh4DCgAJAAAAXHirVAdS82kRAAAABQAAAC0AGAAAAAAAAQAAAKSBowoAADk4YTkyYWJhYjg1OTIxYTg2ZmE4ZjM1N2Y1YzJjNGUxLmZpbGVuYW1lLnR4dFVUBQ
"deleted": false,
"disable_correlation": true,
"object_relation": "malware-sample",
"timestamp": "1652281376",
"to_ids": true,
"type": "malware-sample",
"uuid": "851e1d0b-5323-4b69-ad33-a8fb44773049",
"value": "b2ba4|98a92abab85921a86fa8f357f5c2c4e1"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "mimetype",
"timestamp": "1652281376",
"to_ids": false,
"type": "mime-type",
"uuid": "6fdd048f-ccfb-485a-a8a8-780bee1b481b",
"value": "text/html"
},
{
"category": "Payload delivery",
"comment": "",
"deleted": false,
"disable_correlation": false,
"object_relation": "ssdeep",
"timestamp": "1652281376",
"to_ids": true,
"type": "ssdeep",
"uuid": "24ff26aa-ba81-4211-9080-8b5037850b32",
"value": "192:KezBXJCdzkNfNjzrL9t4SfjxOZxJZDI4Sm85SHZpBuk45X4NY47LYMgygKnKsj:Ke9JCONlj7PjrYZ/ZUj/54Z//uBqLZvz"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "4",
"timestamp": "1652281376",
"uuid": "b939f553-12b7-43f9-ba4d-40944a3be7db",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "first-submission",
"timestamp": "1652281376",
"to_ids": false,
"type": "datetime",
"uuid": "8ecf709d-20b1-445e-9920-2660248dbf9a",
"value": "2022-05-09T19:30:18+00:00"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "last-submission",
"timestamp": "1652281376",
"to_ids": false,
"type": "datetime",
"uuid": "b05965d3-7d8f-488c-9c55-634a7b3d227d",
"value": "2022-05-10T19:29:58+00:00"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "permalink",
"timestamp": "1652281376",
"to_ids": false,
"type": "link",
"uuid": "0ec536b6-8c4e-419b-8918-0ab1dbc718a0",
"value": "https://www.virustotal.com/gui/url/47f13043816a6cfbb2ab068795b6878b2ba8d68b2aa5957111b3d0e621fe9c87/detection"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "4",
"timestamp": "1652281376",
"uuid": "a530c278-985f-4406-8446-a586d13a5247",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "first-submission",
"timestamp": "1652281376",
"to_ids": false,
"type": "datetime",
"uuid": "516beefa-4029-4d75-b0bc-4ecd90e7a273",
"value": "2022-05-09T19:35:33+00:00"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "last-submission",
"timestamp": "1652281376",
"to_ids": false,
"type": "datetime",
"uuid": "70442475-94b6-44dd-b314-00e7f07418f7",
"value": "2022-05-10T05:47:56+00:00"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "permalink",
"timestamp": "1652281376",
"to_ids": false,
"type": "link",
"uuid": "7e467f5c-7379-41da-867e-6a4c9d534e41",
"value": "https://www.virustotal.com/gui/url/e59d879dcb5d59424d6926ddd0039a7951eb2d9ff86abcfe8c476e237f67bdfc/detection"
}
]
},
{
"comment": "",
"deleted": false,
"description": "VirusTotal report",
"meta-category": "misc",
"name": "virustotal-report",
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"template_version": "4",
"timestamp": "1652281376",
"uuid": "96251147-2609-46da-9a12-8e59b27a5d03",
"Attribute": [
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "first-submission",
"timestamp": "1652281376",
"to_ids": false,
"type": "datetime",
"uuid": "d939826f-ed39-40b0-8572-9e23a24c85b1",
"value": "2022-05-10T05:34:49+00:00"
},
{
"category": "Other",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "last-submission",
"timestamp": "1652281376",
"to_ids": false,
"type": "datetime",
"uuid": "b304e6d4-85a6-4f22-94ee-aec5604fe63e",
"value": "2022-05-10T05:34:49+00:00"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": true,
"object_relation": "permalink",
"timestamp": "1652281376",
"to_ids": false,
"type": "link",
"uuid": "db7c52db-36cb-4aa3-948a-5161312222b1",
"value": "https://www.virustotal.com/gui/url/93fec846863a31fa02a8ffc799a292675774cf33d43b897adc7615b4bbadb210/detection"
}
]
}
chg: [feed] added
2023-04-21 13:25:09 +00:00
]
chg: [gen] updated
2023-12-14 14:30:15 +00:00
}
chg: [feed] added
2023-04-21 13:25:09 +00:00
}
Reference in a new issue Copy permalink