2023-04-21 13:25:09 +00:00
|
|
|
{
|
|
|
|
|
"Event": {
|
|
|
|
|
"analysis": "2",
|
|
|
|
|
"date": "2015-07-21",
|
|
|
|
|
"extends_uuid": "",
|
|
|
|
|
"info": "OSINT Milano Hacking Team malware detection tool & IOCs by Rook Security",
|
|
|
|
|
"publish_timestamp": "1438347766",
|
|
|
|
|
"published": true,
|
|
|
|
|
"threat_level_id": "2",
|
|
|
|
|
"timestamp": "1438335004",
|
|
|
|
|
"uuid": "55bb38dc-bda8-4839-8b37-4fe1950d210b",
|
|
|
|
|
"Orgc": {
|
|
|
|
|
"name": "CthulhuSPRL.be",
|
|
|
|
|
"uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f"
|
|
|
|
|
},
|
|
|
|
|
"Tag": [
|
|
|
|
|
{
|
|
|
|
|
"colour": "#ffffff",
|
2023-05-19 09:05:37 +00:00
|
|
|
"local": "0",
|
|
|
|
|
"name": "tlp:white",
|
|
|
|
|
"relationship_type": ""
|
2023-04-21 13:25:09 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#004646",
|
2023-05-19 09:05:37 +00:00
|
|
|
"local": "0",
|
|
|
|
|
"name": "type:OSINT",
|
|
|
|
|
"relationship_type": ""
|
2023-04-21 13:25:09 +00:00
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438333209",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "55bb3919-f5f4-4112-90fb-419d950d210b",
|
|
|
|
|
"value": "https://www.rooksecurity.com/resources/downloads/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438333209",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "55bb3919-5e3c-4275-9953-4568950d210b",
|
|
|
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2015/07/Package_1.zip"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438333209",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "55bb3919-4efc-49de-8e60-47b4950d210b",
|
|
|
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2016/07/ht_malicious_windows_files.ioc_.zip"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438333210",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "55bb391a-bdd4-409f-9b67-4282950d210b",
|
|
|
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2015/07/RookMilanoInstaller.zip"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438333210",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "55bb391a-9298-4e04-8168-488e950d210b",
|
|
|
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2015/07/Package_1.0.1.zip"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438333223",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "55bb3927-0c70-41bd-8fdc-4274950d210b",
|
|
|
|
|
"value": "Hacking Team"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438333380",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "55bb39c4-47b0-4b79-a585-4307950d210b",
|
|
|
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2015/07/HT_Malware_Observations.pdf"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438333380",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "55bb39c4-6838-418d-8dc2-4899950d210b",
|
|
|
|
|
"value": "https://www.rooksecurity.com/wp-content/uploads/2015/07/All_HT_Files_Analysis_Notes.xlsx"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334481",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "snort",
|
|
|
|
|
"uuid": "55bb3e11-bf10-4140-bdf3-41ff950d210b",
|
|
|
|
|
"value": "alert tcp $EXTERNAL_NET any >\r\n$HOME_NET any (msg:\"CVE20155122:\r\nAdobe Flash Exploit (Memory Corruption)\"\u00cd\u00be\r\nflow:from_server,established\u00cd\u00be content:\"|43 57 53|\"\u00cd\u00be content:\"|c9 66\r\n3d 21 24 49 68 69 69 39 12 61 04 4a 49 4e|\"\u00cd\u00be offset:127\u00cd\u00be sid:9931892\u00cd\u00be\r\nrev:2\u00cd\u00be)"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "OpenIOC",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334554",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "attachment",
|
|
|
|
|
"uuid": "55bb3e5a-66f4-4b4b-a87e-4c5e950d210b",
|
|
|
|
|
"value": "hackingteam_openIOC1-0.ioc.xml"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334604",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e8c-e68c-44e3-8156-417c950d210b",
|
|
|
|
|
"value": "0097a9fba6b0bcb09e9473816e51c2c8e48284ff"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334604",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e8c-0bb8-4a5d-805b-4700950d210b",
|
|
|
|
|
"value": "2a2578d7f22d3b2ee52c5d46bb5fdf05"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334605",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e8d-830c-4dd5-80a2-49ce950d210b",
|
|
|
|
|
"value": "4d9ced2ee7d979055d33564cfa5a67773e34f3e51d615f162003311c76f51bdb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334605",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e8d-bfc8-4570-8ce6-4f8d950d210b",
|
|
|
|
|
"value": "0540e5eacd37ea3285f8a239dd72e3e7e4faf33e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334605",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e8d-145c-41ba-99c2-46da950d210b",
|
|
|
|
|
"value": "f713c1e740d67292db2d96c7755a63bc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334605",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e8d-cdc8-4cfe-8ca9-445a950d210b",
|
|
|
|
|
"value": "9f3673b51a622dbe8ea5f92ad37ff12ed0a03ff5c30a9ca20575dca08c624fa3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334605",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e8d-4a7c-4158-9c7a-49ba950d210b",
|
|
|
|
|
"value": "076b09d71c5c55e7ae6f044791142470799648bc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334605",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e8d-b38c-4e40-b38d-427c950d210b",
|
|
|
|
|
"value": "dfd6d9d5d7074e3d822ee7002a2538b6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334605",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e8d-6934-4977-92d5-4d19950d210b",
|
|
|
|
|
"value": "d70699e40511f4dd459420751e66a2564f050ab17b101ca9955423de2c579fa6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334606",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e8e-efd8-4d2a-b870-4bf0950d210b",
|
|
|
|
|
"value": "0837b3eed579123555ae09244b3f23aded72b9b4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334606",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e8e-2670-4c78-97ab-4237950d210b",
|
|
|
|
|
"value": "5c1215ec7da96f58a1e3e66b60c1d4ed"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334606",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e8e-be4c-4def-aeb1-4d9d950d210b",
|
|
|
|
|
"value": "2ef643a29808aa6dedeb69165d8682d5a58a95aa68bce856783a2b8dc2d71087"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334606",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e8e-c280-46f8-bfa6-481a950d210b",
|
|
|
|
|
"value": "09920b2f0d20df022da507ab7b334392f7380cb4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334606",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e8e-e84c-4572-9f45-4d24950d210b",
|
|
|
|
|
"value": "4b5d19d8a0bc70b2165144cb9be227e7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334606",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e8e-5764-43b3-931a-4522950d210b",
|
|
|
|
|
"value": "8306c3a000636a21275774fcc17cd0bf75d1959bd9ea6bdb272666fda8494649"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334606",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e8e-dba8-4660-b2af-4523950d210b",
|
|
|
|
|
"value": "09a77488453f586ac03782a539225487c44c3a30"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334607",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e8f-a0c4-45cd-b71e-4f6e950d210b",
|
|
|
|
|
"value": "365bf9ae89eebc67a34e09ad07ebf166"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334607",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e8f-1e5c-4550-8fc3-46af950d210b",
|
|
|
|
|
"value": "314211107852b35dbf7d2abc54581aadfce1ddf79e1930bb44e37ea4af338541"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334607",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e8f-74c8-458d-a3bb-4555950d210b",
|
|
|
|
|
"value": "09b49ee08641e1d18532a67acc09d98a1b708545"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334607",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e8f-7ad8-4809-8c2b-4589950d210b",
|
|
|
|
|
"value": "710cdda3bc6ff73c2399d0a718c9fbe8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334607",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e8f-c9d8-4b1a-b3a5-44a8950d210b",
|
|
|
|
|
"value": "8caa3a2f4c39992952cd2bb38bebadbbee5fb68114500e37832221d4e59aea30"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334607",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e8f-43f4-4103-9826-415b950d210b",
|
|
|
|
|
"value": "0ac7f04dd08120e93ea449b49eb8e557a5a2ef22"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334607",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e8f-4cd4-4265-8418-4907950d210b",
|
|
|
|
|
"value": "94bac050560b074bf7f48dcc282ab7ff"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334608",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e90-8a24-4451-9317-4363950d210b",
|
|
|
|
|
"value": "b0d3aad477487039fbe9a33a66bd3654fb17f8af731c965d78977ebeb20392a8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334608",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e90-1e90-45c7-b0a4-4122950d210b",
|
|
|
|
|
"value": "0ad4455380b6c2224bf6d0d5112653db2e05ab28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334608",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e90-6334-40b1-840f-4d3e950d210b",
|
|
|
|
|
"value": "37b5ee810eee08eb46da2d4d1710262f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334608",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e90-f49c-4747-a365-4980950d210b",
|
|
|
|
|
"value": "f3fc6d8ed53b5be3be601281848d26134fa85ba4737ab69b13a50a3a8dd523cb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334608",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e90-723c-4a12-99d1-4b03950d210b",
|
|
|
|
|
"value": "0e6ebd6d90cc59eb572762afaca548dcc63397d8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334608",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e90-392c-4007-8990-4f68950d210b",
|
|
|
|
|
"value": "0be0c072cf2a885d77886705e24e08d8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334608",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e90-9868-4e17-8609-44bd950d210b",
|
|
|
|
|
"value": "b924993e72cc8fd0b505e95cea5e8b09d17d2a15c9d9ebc2b0c32843edcd40ee"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334609",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e91-9e40-4bc1-8d85-41b1950d210b",
|
|
|
|
|
"value": "11662f991e15213c282357723bcc49059f6c55f2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334609",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e91-1528-4e9b-97f9-4ca7950d210b",
|
|
|
|
|
"value": "158105fd8f227ab0a2e3440724520275"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334609",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e91-1f10-4a05-9e2e-4569950d210b",
|
|
|
|
|
"value": "d64a0092cf3b55f68c671d462be80241d3a45b75667bb29f624f52aea7f1246f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334609",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e91-9258-4c7f-a861-46a5950d210b",
|
|
|
|
|
"value": "11c87f734bce1fec82087fd16e568472e960fe17"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334609",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e91-ac48-48cf-85f8-4b69950d210b",
|
|
|
|
|
"value": "84964d5410d6c7754e36e7592334df5e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334609",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e91-b3c0-4a8f-832b-429a950d210b",
|
|
|
|
|
"value": "da07eca4cd4cccc81d9418fcc796d28bc95756c8d6d4ad9503effd12b6c0aef7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334609",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e91-4648-4af0-973b-4a3b950d210b",
|
|
|
|
|
"value": "1351e784ebdffacf0fd143c07581136e94ca2319"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334610",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e92-d7c0-4807-b6b7-40a8950d210b",
|
|
|
|
|
"value": "48d638a3194f8740d9f05faf62670ff9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334610",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e92-9c08-4786-8e91-42c3950d210b",
|
|
|
|
|
"value": "fb3b9464e866b35b3d7a3b506f967b32e1c2015e0703780c89993ce6d50a0ea6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334610",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e92-60b4-4e6c-9072-45c2950d210b",
|
|
|
|
|
"value": "13b20e7945eb7342540b5fab2eb2f03063518239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334610",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e92-aa70-4a5b-be6d-43d6950d210b",
|
|
|
|
|
"value": "0df77ac381a54c34bf3f12d13f516be1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334610",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e92-e9e8-4af2-9714-43cc950d210b",
|
|
|
|
|
"value": "5e75e0babe92f1a7691a43641fadb7be84d4d273b8bcc6cce5dfeb5523a6b709"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334610",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e92-a7b0-4015-8830-4331950d210b",
|
|
|
|
|
"value": "158be9f90b5f37590808e0c97323b6476d4c9f9b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334610",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e92-4c0c-4dce-9d03-4477950d210b",
|
|
|
|
|
"value": "38bd6cd2b91810c30ceb661e54032f5c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334610",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e92-d5fc-4f4c-8dd1-443b950d210b",
|
|
|
|
|
"value": "92af7c751d9353ceb1b449bb6ea1a29c7a68a5bd2344759ad1c974ac5c63dee6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334611",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e93-5db8-4724-af10-4602950d210b",
|
|
|
|
|
"value": "1b8f53c2ee42fff1f333223e82d3e538792b9778"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334611",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e93-8a28-4ec3-8847-4a90950d210b",
|
|
|
|
|
"value": "309ad3a96832730545d1ff1f4fdd8de2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334611",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e93-3a60-48b2-bfdb-43c6950d210b",
|
|
|
|
|
"value": "0a5c0224092468a4669f04721e291e3e89653d1ecf436c5c4dd7f1f8df4d0ff7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334611",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e93-2874-42bf-a0ee-4e11950d210b",
|
|
|
|
|
"value": "1ba03151aee8276e95666df59e36506a9136634d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334611",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e93-ecd8-45a4-b019-4a2d950d210b",
|
|
|
|
|
"value": "f7133f6037738c9c0ade22104349e8bc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334611",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e93-7ad4-4652-8682-4e76950d210b",
|
|
|
|
|
"value": "3d8a446c2da93d0c909caf9724ad452c66c944cf71f582a9b5002e9b2cc67793"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334611",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e93-69f0-49be-9cbd-4299950d210b",
|
|
|
|
|
"value": "1f78800e17ecf9535eb695b5665f1da4258be70b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334612",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e94-2c84-4595-82bd-400c950d210b",
|
|
|
|
|
"value": "432f4e8794a2ea8a64e4c75ea80b790e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334612",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e94-e16c-481e-ab68-4175950d210b",
|
|
|
|
|
"value": "d94b971cecd864fe6153ebe94a775157f3cdb69e8ad802eb78cfc0136737c0f2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334612",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e94-debc-4f58-bf8b-4276950d210b",
|
|
|
|
|
"value": "21b5f25b33e6db635ecc245291b092748d075719"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334612",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e94-d544-4ee7-9f69-47d2950d210b",
|
|
|
|
|
"value": "652a5cd27ff8966d26db94bb394ce4d1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334612",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e94-dd84-44d9-8c7d-4424950d210b",
|
|
|
|
|
"value": "b6d736a68360253a94cc89bafbfa3141c382079d3e74346b12251da26149d1c3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334612",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e94-8ecc-4e3a-bf6e-4161950d210b",
|
|
|
|
|
"value": "23442e4cee456a1571f65c75e0e53c388e194d7f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334612",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e94-44a0-4e39-8521-4e80950d210b",
|
|
|
|
|
"value": "92a05da3047dd74826e09acc2692fe57"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334613",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e95-7414-4310-9a44-4074950d210b",
|
|
|
|
|
"value": "cfa438d2d1426c983134203329e30ac92a4c5f6170e1687dc287ecf67ef53404"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334613",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e95-4478-406d-ba84-4704950d210b",
|
|
|
|
|
"value": "23ba80af8dfb460b579b46309f4b7f0de53bbdd4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334613",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e95-c56c-47f8-83e6-43e7950d210b",
|
|
|
|
|
"value": "c36d60abed084c6d61741b08ff6681df"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334613",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e95-0f4c-4927-904f-489d950d210b",
|
|
|
|
|
"value": "a1eae49b5f732a7ceef30fa8aa1218c9c97e6436bfab5555ed79e4b29b0fda83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334613",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e95-85b4-4393-81e4-44d4950d210b",
|
|
|
|
|
"value": "26f87e87c78f075ff69aa7de4f6c50f97f499ab7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334613",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e95-8c64-442e-972b-45c5950d210b",
|
|
|
|
|
"value": "e3bd52648f653b38d75d325f2c205130"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334613",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e95-3e50-4b75-af35-4bee950d210b",
|
|
|
|
|
"value": "79deeb5af79f9a48cbbbb37400b940dc1e709230d0b176669bc1d095c4bedca7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334613",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e95-a21c-4875-973c-4435950d210b",
|
|
|
|
|
"value": "275c5629439be1efa5f586b0bde9f447b85be829"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334614",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e96-7e5c-4209-82b0-47a9950d210b",
|
|
|
|
|
"value": "2e6707641e23e18134e93e3c4f51c840"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334614",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e96-007c-4e23-acd6-43a2950d210b",
|
|
|
|
|
"value": "71864e38545034655c934d46f6b50485cb3d605ad39a7c3889f7d3816440bf1c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334614",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e96-7dec-402c-aa3b-473f950d210b",
|
|
|
|
|
"value": "28fb3ef8f16da864f44529f1fa09872af6b7e858"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334614",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e96-3fb8-470e-8cd8-4d3e950d210b",
|
|
|
|
|
"value": "081b26d9ca74faae821e0b2eb2bb1fc5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334614",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e96-b3ec-4031-bf0f-44fe950d210b",
|
|
|
|
|
"value": "4ae1e35dc83825dc81e886b7597f00781b184be4fa288a8aa7a3c0f62a526387"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334614",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e96-c5b0-4edc-b928-4611950d210b",
|
|
|
|
|
"value": "2f4e851d21c45e9b0a77a9cd9a0d5500a7740395"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334614",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e96-0d38-42ba-8d3f-4cff950d210b",
|
|
|
|
|
"value": "68cd61eefa0e6a7a6b36fb359bdd93ae"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334615",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e97-2d70-4447-bb6c-4415950d210b",
|
|
|
|
|
"value": "b785b107632a3b8e9070a5a9a610202b46d916709f6b969b30c5d3375a2f38e7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334615",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e97-14e0-4263-a34e-4339950d210b",
|
|
|
|
|
"value": "2f9a28719745d1f95818c424bef3bd202f4172e9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334615",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e97-74a0-4d90-9f30-43bf950d210b",
|
|
|
|
|
"value": "56fd59bf9f93ab512cfb0822e20dc157"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334615",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e97-f428-4f3f-841a-4a01950d210b",
|
|
|
|
|
"value": "f82c4673a15ff6c5806f54811c4e782b595a0a445476c3ccdbdc4cd200bfe36e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334615",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e97-41f0-4f7c-8fd4-4376950d210b",
|
|
|
|
|
"value": "333a5d4082808206eeedd309e02d88e720587e4f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334615",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e97-2874-49d5-9142-42ef950d210b",
|
|
|
|
|
"value": "1fc10a99ce2652ba0ec7bed0f8f05c2c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334615",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e97-f2b4-4873-b2fb-4fd1950d210b",
|
|
|
|
|
"value": "f08e6bc6c3a6771f697d4f724bb238f837f61d988c29a2d77dd73cd36a4a38b7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334616",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e98-1cb0-4621-9058-49cd950d210b",
|
|
|
|
|
"value": "33aa87925aaafa5c97df0c4334b3e70b5ce43552"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334616",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e98-bce4-4a6e-8445-4582950d210b",
|
|
|
|
|
"value": "0bb14e2cbce99ac845c62bea9c5d62ba"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334616",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e98-1b38-4c5a-9c1a-4c40950d210b",
|
|
|
|
|
"value": "4f9f7f9b2a3ee884f4aa08c066a458a52f175a78b7748ef4a751543213b92d29"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334616",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e98-f53c-4414-a35f-4884950d210b",
|
|
|
|
|
"value": "3412967b6ff4d2ceece701b899571987b8c5d70c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334616",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e98-91ac-4e3d-9f38-45ed950d210b",
|
|
|
|
|
"value": "d553160f4db53c3ef30bf57aac67811a"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334616",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e98-ebf4-40b4-98c4-4167950d210b",
|
|
|
|
|
"value": "2c2a1044acd7d47ade2e74b06fe366fdc1c363297b5292c8a362f34018ae100b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334616",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e98-e344-4bda-a558-4046950d210b",
|
|
|
|
|
"value": "34da42515658486c097b4a16c8e7ab6d3fd14020"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334616",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e98-9ffc-4a65-8940-439a950d210b",
|
|
|
|
|
"value": "d7697f8af52b42e2fb59a350886f02a1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334617",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e99-a1fc-4a57-9559-48da950d210b",
|
|
|
|
|
"value": "0418ecb096bdb3360694780a76838cd333900ebb26a168e3a95225e6579ea20e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334617",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e99-9b64-478d-8f96-48db950d210b",
|
|
|
|
|
"value": "36016bbccebddd9060073f1c9f0c80a2c2dd9cc1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334617",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e99-6244-4621-901f-4eca950d210b",
|
|
|
|
|
"value": "42202e223b9d21079f397b9116093ac6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334617",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e99-1088-48fd-974b-49f4950d210b",
|
|
|
|
|
"value": "79c4bcc19a33e6b1ef4308b8d8ca93a6f97a08280d80d3ed856805d560e4489d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334617",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e99-a4a0-463b-842e-44b3950d210b",
|
|
|
|
|
"value": "389c1d337548d2e3721466a3ca3fd54881cd5aee"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334617",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e99-0f50-4d38-8fac-48fe950d210b",
|
|
|
|
|
"value": "97ff374ab1a7358eb362406baa0554c8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334617",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e99-795c-45ce-b020-4f66950d210b",
|
|
|
|
|
"value": "010ce301d6ff509e111e9102ec7b883fd888f1510fe3bfba6d71986704dbcd28"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334618",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9a-0dbc-4b06-8fce-4b45950d210b",
|
|
|
|
|
"value": "3cbedf6f7e7c842f1aa3cc6440449fd2defa7df7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334618",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9a-bdb4-44e4-b673-42be950d210b",
|
|
|
|
|
"value": "360303fbb9f31d82afae87a4e71c8e93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334618",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9a-580c-4700-8b62-4ede950d210b",
|
|
|
|
|
"value": "d31c5d91556d0dc52ddc77d70678441f6f7a647eaaf8e1438fdc5cf3160fb935"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334618",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9a-df00-4ebd-a876-46f0950d210b",
|
|
|
|
|
"value": "41b844cd42208eab05e203b5e22712eaf568d133"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334618",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9a-6828-44fc-90ad-4929950d210b",
|
|
|
|
|
"value": "768ee422a113dc1ae0310f6bc4d7c66d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334618",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9a-085c-4d00-b5f7-469d950d210b",
|
|
|
|
|
"value": "cba8e646e951dbfde33daddc1ad6429814dad1ae1786c886948ce9ed7029f487"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334618",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9a-6b3c-46e3-8912-487d950d210b",
|
|
|
|
|
"value": "4357e25f04f902a67604b8b9a6a122a9d3ca0357"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334619",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9b-3f88-49cc-b9ca-4535950d210b",
|
|
|
|
|
"value": "a835bd1a588d516e8d9b12c7b85d54de"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334619",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9b-1798-4c87-96ad-4571950d210b",
|
|
|
|
|
"value": "31e9433eccf1c150462b705af11eff50587d25526225d0c4ba07312af0c81969"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334619",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9b-bb50-46b0-b4a3-4509950d210b",
|
|
|
|
|
"value": "441a3f4e360996f53a0ca5bf7280c03771badb90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334619",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9b-b9cc-445f-9f33-4da9950d210b",
|
|
|
|
|
"value": "7cefad54a4656d68d5662836d794b5bb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334619",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9b-8a70-4345-a609-4e62950d210b",
|
|
|
|
|
"value": "7fcd2160127471fbd92e3dfd656d73eef31195f1fe5a1c77027bd2a961467883"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334619",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9b-66f0-4a3d-bed7-4d03950d210b",
|
|
|
|
|
"value": "4437315b462fce721d16edbe77362b0e634aa559"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334619",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9b-ac20-48a9-ad9f-4785950d210b",
|
|
|
|
|
"value": "33f2a0070170ab861e92435114db52d8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334619",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9b-f150-431e-8275-4f18950d210b",
|
|
|
|
|
"value": "bfb2ac272617e4af5ddf176bb4bffcc090e47b1208f4285a7108d6a59ec51837"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334620",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9c-f520-4732-9c83-4ed2950d210b",
|
|
|
|
|
"value": "48220b4aeb4a96e983d6b1478144592e26fc982b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334620",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9c-4c88-47ed-95da-4dd5950d210b",
|
|
|
|
|
"value": "47aeacba39f33b6ce2fd1f654f760a6c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334620",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9c-9bbc-4914-b6e4-4b51950d210b",
|
|
|
|
|
"value": "40a10420b9d49f87527bc0396b19ec29e55e9109e80b52456891243791671c1c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334620",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9c-de94-4a34-bdb2-40df950d210b",
|
|
|
|
|
"value": "48c3fa74a00f1115c0e089f23997f112c85741b4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334620",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9c-baf0-4c51-8b7a-4315950d210b",
|
|
|
|
|
"value": "b043ec1567ecceb84c20a853d9245132"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334620",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9c-0214-4a4d-9574-451f950d210b",
|
|
|
|
|
"value": "f6c3d4c2db6e10d5fe9dcddf771d6261a525e7789189f0cfdb4a87faf34d6dd6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334620",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9c-3b8c-4a61-9e5c-46cc950d210b",
|
|
|
|
|
"value": "4dbdb482e6f4882ed8d31e1362e84fc104b397d2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334621",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9d-5264-43e9-bffb-4217950d210b",
|
|
|
|
|
"value": "9ed0d182100447ad46b38f8ceef612f2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334621",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9d-3758-48fe-b4b9-40c9950d210b",
|
|
|
|
|
"value": "656c897b39d7867bd4d38696100a09e379b06ab5e5f6842c1329f6bb83e70161"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334621",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9d-b24c-45ac-a475-4b11950d210b",
|
|
|
|
|
"value": "4eb87cff1cf2f1411248cd06b497cac564ed63fd"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334621",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9d-0c70-4e58-9b91-4096950d210b",
|
|
|
|
|
"value": "ae0d2278aa783b8dc1675f41cff9d07d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334621",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9d-d60c-486e-b3c9-49aa950d210b",
|
|
|
|
|
"value": "d5b3cc429c8a6fba074d9b1e2963273ac13cead47f63dbbb97e640b74e407134"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334621",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9d-2820-4023-b96b-4779950d210b",
|
|
|
|
|
"value": "4edb69adbc1ebc884aa65cd42e1187f9223de3d3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334621",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9d-be2c-49f5-abe0-402e950d210b",
|
|
|
|
|
"value": "27f45f64f69d31839a6ec82185b5e030"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334622",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9e-9bd8-4a7f-868b-4d42950d210b",
|
|
|
|
|
"value": "5ec8cd3180a2576b92d53085ff5e3dcf4e3dccaf2154b59879969ef8011fd1c2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334622",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9e-8130-4ebd-8895-4a6b950d210b",
|
|
|
|
|
"value": "5004f0d0410666e923212e941f646777b91958b0"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334622",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9e-2e6c-48a7-ac9a-4111950d210b",
|
|
|
|
|
"value": "f855633c69c3095b20a99bd12d023271"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334622",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9e-c17c-4894-bd42-432a950d210b",
|
|
|
|
|
"value": "7927f3a35d87250253d8abc021d44cc496d2185f376f0d33b0365a68ba81e636"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334622",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9e-09cc-43a6-800c-4ad1950d210b",
|
|
|
|
|
"value": "50651dbc0af0ff5f1623c468fd4ed4eeb3f2460d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334622",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9e-8e68-4e58-a537-43df950d210b",
|
|
|
|
|
"value": "5cd44e29316435cda62790801ec4f473"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334622",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9e-0bd8-49ce-8928-4855950d210b",
|
|
|
|
|
"value": "2b5560f11b24de4fac1b0998cfe80138c2a4f87bb15f6eba6f7f58a5cf1f8622"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334622",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9e-e984-4c6d-8c4c-4f61950d210b",
|
|
|
|
|
"value": "52fa70529cee1101067e7f6cc2532ee64506ba11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334623",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9f-ca90-466b-92bc-4d62950d210b",
|
|
|
|
|
"value": "ed6d8b6078e103b2d12a7fd339838a9c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334623",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9f-d014-4a35-b980-4145950d210b",
|
|
|
|
|
"value": "bf2f9d19521cae12bf25a4108418f6c234af6cad2d7a6482323a12a2da13ebd6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334623",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9f-0158-4008-9f4c-44f2950d210b",
|
|
|
|
|
"value": "537506539114118726725947814c6368cc507ed4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334623",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9f-fb64-439c-b36c-46b4950d210b",
|
|
|
|
|
"value": "f063ea5b63c9eb0e8aff3420caf4b64d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334623",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3e9f-43b4-4fe9-8cb6-4e3e950d210b",
|
|
|
|
|
"value": "ce5d792faaca61d7bb63367f8772f492ee963f054bc03e61b4fae774c3a3c343"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334623",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3e9f-fd0c-47e7-925a-46d7950d210b",
|
|
|
|
|
"value": "548e8ab0169f36b548a5aa5678ef1b033acbcda4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334623",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3e9f-f13c-4331-9d61-483a950d210b",
|
|
|
|
|
"value": "4170d7f066178181b7f86b5a1125a761"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334624",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea0-0e54-454b-82d7-421f950d210b",
|
|
|
|
|
"value": "b7df931aa020195726002b235740bc844fc4b105920d4a139ca6b5a069e43575"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334624",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea0-ae00-4af8-b19c-4438950d210b",
|
|
|
|
|
"value": "57a0d519db2354fb7f83f5243d4a9fbecf37f677"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334624",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea0-c300-4094-bdcf-48c9950d210b",
|
|
|
|
|
"value": "7f1c1146f08a03ec811f443ac6decc15"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334624",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea0-94d0-4fdf-b0cd-4801950d210b",
|
|
|
|
|
"value": "3e9a6f168c4f9f6ce6c6db3fee35218408ee0f79189f53e174f19a439e4036fb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334624",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea0-8130-4a3d-ac14-4066950d210b",
|
|
|
|
|
"value": "58611fe7ab6aa2e2550c40a059c9f11e88b04252"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334624",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea0-5940-47e1-8d6c-49a5950d210b",
|
|
|
|
|
"value": "40e118e4ed768f32da3bd4737a5fc60b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334624",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea0-9254-4d41-8b95-4f78950d210b",
|
|
|
|
|
"value": "7a136aff189f79dee342378d9d011ef35b639840148989670cd9ed3aaa404cdd"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334625",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea1-1628-4da8-88ed-4e64950d210b",
|
|
|
|
|
"value": "589c73842529a15fa9b77b6d4c09b4f519b16fc5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334625",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea1-4ed8-4561-bbfd-42c8950d210b",
|
|
|
|
|
"value": "5bcdf425169900ec224039b72c6ec5dc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334625",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea1-32a0-4287-af3c-4208950d210b",
|
|
|
|
|
"value": "c65d9d6defebeacbf761ae61baee0386dd7aeb2bd8577611edfadfb765e6ca52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334625",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea1-df54-4aca-9141-40f6950d210b",
|
|
|
|
|
"value": "5ab36b7bb8b782cdc3a4670adf3afa2dabc978b8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334625",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea1-1c90-4158-af81-4f9c950d210b",
|
|
|
|
|
"value": "2911e7d0f7a9ee343532865de81b1cc5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334625",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea1-31f4-4163-bd67-4512950d210b",
|
|
|
|
|
"value": "9db48e1cb712104830461c062d0a93f8e3b4043c0ab8b2dc0e1f5599827f4e21"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334625",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea1-84d0-4569-813d-42cc950d210b",
|
|
|
|
|
"value": "5ef6c7729e2f6d445fd3fd72f93ec637a5c32789"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334625",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea1-4a84-48a3-bb20-43af950d210b",
|
|
|
|
|
"value": "7f2aad2ad7bced650d9eb19dc80502c9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334626",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea2-3190-45d0-b1f7-4d74950d210b",
|
|
|
|
|
"value": "e378812f4347b6ec7a517d9c06dc1cd608322033743ec075afe26857bb65c6b0"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334626",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea2-d3dc-4cb8-9060-4c3e950d210b",
|
|
|
|
|
"value": "5fe9dad18883d1dc64dacb7aa8dd7988ca7b52bb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334626",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea2-a8cc-4f09-ae62-4663950d210b",
|
|
|
|
|
"value": "3b726e15b2e161a5acadb1a1bce87cb9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334626",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea2-f3f4-4f80-a8b0-4e64950d210b",
|
|
|
|
|
"value": "60562a923d1fb595d6e144a0957bc5f9fda0d3f105c316ab5e7d7cd27ff0c27f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334626",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea2-a9e4-4468-a9b9-4a6c950d210b",
|
|
|
|
|
"value": "6081a7794e1fb5349ac25fbba1bb80e4df857c35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334626",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea2-4ea4-4d09-8b36-454e950d210b",
|
|
|
|
|
"value": "2a6ad4fb3a29795ec7b2f02304464b36"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334626",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea2-ed88-41de-ba77-414f950d210b",
|
|
|
|
|
"value": "01b3cd088328aa2d87f6b3c435fef56b8a6033f78767a680d416f88c3e3ddae7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334627",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea3-43a8-45fa-addd-4993950d210b",
|
|
|
|
|
"value": "6204297b04970e0f7c843a28636b2e5e28213e93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334627",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea3-d288-4c56-8cd7-4914950d210b",
|
|
|
|
|
"value": "148b8f6c9e47e59f171e2cc938382ecc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334627",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea3-c350-443a-b618-47a0950d210b",
|
|
|
|
|
"value": "60f4e50985afa8c0b2437c78467fc11784416791cd8cacdb37542a3e14d79871"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334627",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea3-2544-4358-b25e-4b53950d210b",
|
|
|
|
|
"value": "621e2fbcddee9d4915c2bd4689234ed40475dfb3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334627",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea3-1ec8-4258-817c-42ba950d210b",
|
|
|
|
|
"value": "aec0f36dd1296689a740e43e3b51d734"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334627",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea3-c324-4e7e-8919-403e950d210b",
|
|
|
|
|
"value": "c14327a7d2c7ab2d3edb5c0db2f87688c30f4f781c10b6017183f74403494c07"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334627",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea3-99c8-4ce6-a49b-4563950d210b",
|
|
|
|
|
"value": "62de7920de0dd9904b9af388ef5bb4c277a61051"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334628",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea4-ee34-4b53-8ca8-44b5950d210b",
|
|
|
|
|
"value": "ef61dcb3711fd43d1a7e40b6dbd7d361"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334628",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea4-e60c-444a-b552-4519950d210b",
|
|
|
|
|
"value": "feee319cff39fe40dd0e0651bdbb24e9701d7f5adc9eefbfbd4e7e465ebee7f1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334628",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea4-78d0-4da1-a489-4303950d210b",
|
|
|
|
|
"value": "6a951c1da9080886fb931d01711b225c1368e6e6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334628",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea4-ce44-4ae8-8f0b-4012950d210b",
|
|
|
|
|
"value": "29d51c29dd3f0811d403c329053a2f35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334628",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea4-3808-47b9-8bb9-4be8950d210b",
|
|
|
|
|
"value": "f1ab31f87585c824381ecd5411441bb1c755d81dd0f42bc08fbb061b9066fba0"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334628",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea4-b9c4-470f-92b0-4542950d210b",
|
|
|
|
|
"value": "6efd210c94ef5d49de0f705931b9e93b37e688fb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334628",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea4-afc4-4b98-8edd-4a9b950d210b",
|
|
|
|
|
"value": "0ee9ea3b831677df1ccde2eaafacd165"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334629",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea5-5e2c-485b-9b96-482c950d210b",
|
|
|
|
|
"value": "13397ce53d5bcc5339a9e5b83144eed11e051666abcf26ad393505cfd82ee9ea"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334629",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea5-4b94-40ff-882d-4620950d210b",
|
|
|
|
|
"value": "6f733dea7027321529d43421cb2cc5444b4e0785"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334629",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea5-7034-405c-9af4-42e7950d210b",
|
|
|
|
|
"value": "57acb822c5a03afabf9082ef3fd3306d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334629",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea5-1a08-49a3-9a17-4cca950d210b",
|
|
|
|
|
"value": "0dd0325e09c0ba103aedc9e899192204ab29f4a0d35a7e53e5c800d9284a37e8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334629",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea5-a758-4c80-90cf-43e2950d210b",
|
|
|
|
|
"value": "753bb0e7250d930957dabfdc0809352eed153b31"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334629",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea5-23dc-4c5b-ab1c-4f6e950d210b",
|
|
|
|
|
"value": "d341cd4cde7d8b10b3362b3d1b640d14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334629",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea5-f6d8-46a6-8e92-4f1f950d210b",
|
|
|
|
|
"value": "639152dcce89b669fa00213d853425bee35f8b79970a663492d24ce29421fb75"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334629",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea5-c2cc-49c7-bf81-4e1e950d210b",
|
|
|
|
|
"value": "779946589786d2dfea06bd102be88df02426b491"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334630",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea6-2ac0-4b41-8cb1-4952950d210b",
|
|
|
|
|
"value": "cc0bb7d434d786bf35447cf90e3b88df"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334630",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea6-265c-4f52-9751-4f5b950d210b",
|
|
|
|
|
"value": "5691fefbba82244c63e2166e246b1ef16d66b46ff1434e13815c8796177dc522"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334630",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea6-5524-4814-bb0c-412f950d210b",
|
|
|
|
|
"value": "7818cbabec362de92407234c123f5a6dd910122c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334630",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea6-9774-4755-806d-43fa950d210b",
|
|
|
|
|
"value": "f4f3692c0bb00a94130d3b205e1e9baa"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334630",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea6-0a58-4c32-ae3f-409c950d210b",
|
|
|
|
|
"value": "3ea8909c7e92d10a39ba08b002b489e718d77f12754e1bac8e69d62891ac8417"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334630",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea6-1eb4-4add-883a-4369950d210b",
|
|
|
|
|
"value": "79fc0befe9e5530e2496a9fa6beadaa636119aa8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334630",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea6-0494-4058-b22c-4baf950d210b",
|
|
|
|
|
"value": "640b52a15b798fa6cee52f2f309f43f4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334631",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea7-e7b8-4ded-a2b8-408a950d210b",
|
|
|
|
|
"value": "4d96580225828b1b735a02835b5d753992be7ccdfcfb80c50d7acaae3e8c63c6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334631",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea7-e9f8-44fb-822a-4368950d210b",
|
|
|
|
|
"value": "7b2507e7e06044fe193b811b7c6ee3768652fc67"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334631",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea7-a4bc-4f55-865e-4020950d210b",
|
|
|
|
|
"value": "5bad3163f9caf8686c7b9e43934a696f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334631",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea7-8090-41b3-99d7-4605950d210b",
|
|
|
|
|
"value": "988246ec5ee40470dd1c6661f7509d43dfa3debadd66ae4722a091935ecb56d9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334631",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea7-85f0-4a5c-8e2c-42bb950d210b",
|
|
|
|
|
"value": "7c1db3fff72b3c8180fe0eedd092328e29b61588"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334631",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea7-ba30-4a86-9b69-4a4f950d210b",
|
|
|
|
|
"value": "fa6d890c0780e5bb42550ac52e46e94d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334631",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea7-e684-46c7-b6ec-4377950d210b",
|
|
|
|
|
"value": "3b471511630e5ae364c28de07dae041a5b44a040f49e15735afa509e44801863"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334632",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea8-3ca4-4ba5-8868-4bd6950d210b",
|
|
|
|
|
"value": "80bf90a45be02815e6765e931063948bc563a8af"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334632",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea8-c800-4678-9cb2-47ce950d210b",
|
|
|
|
|
"value": "dae2dab64bdffe40c3730f7797c4c372"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334632",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea8-78dc-4730-94a9-4beb950d210b",
|
|
|
|
|
"value": "1c5f12e0c15adf930b31402e6586f3a05a0173237ea13adce2f01edde9748992"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334632",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea8-6bbc-4c01-a872-4c77950d210b",
|
|
|
|
|
"value": "827ad016a75e822dccd4d3c0c0cc178e7702a99b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334632",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea8-ee40-435d-8681-4abc950d210b",
|
|
|
|
|
"value": "21749bb7bdeac89843a60b0d032cf874"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334632",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea8-38c4-42ba-b4a8-4d08950d210b",
|
|
|
|
|
"value": "3bee8a4ee4efc157949587342ca73316eb9c95442cdb25dc349008c43dc64ba6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334632",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea8-3528-48a9-a2ef-4da5950d210b",
|
|
|
|
|
"value": "83852d86836e9d2193067919815418972e5cc03a"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334632",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea8-72c8-4907-bcc7-403f950d210b",
|
|
|
|
|
"value": "32d9d4da5e7b99e2d70200d14003e830"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334633",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea9-9d68-4ed6-af88-436f950d210b",
|
|
|
|
|
"value": "a61c9ae6ac4149619f058a09b83e7ba16bf6bf2492201fa299c25495ef01ba30"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334633",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea9-ee90-4ee8-8e10-4232950d210b",
|
|
|
|
|
"value": "84fe4e29cceafae55caf85952c0a83b92c75fba1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334633",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea9-94e0-4bef-a3ad-488b950d210b",
|
|
|
|
|
"value": "a7bb3bcbd0b76c71cead0c9c41d060f3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334633",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea9-cc40-43db-b907-467e950d210b",
|
|
|
|
|
"value": "6e6f6e40a2716d11425a88b560e80fefd1a16d81ddee9663ff42ab82ea3a35bd"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334633",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ea9-73bc-4036-bc6f-4d13950d210b",
|
|
|
|
|
"value": "8561291a00ec2c7cef2bd1d5daf48b350baeae8b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334633",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ea9-fc1c-46e9-8085-4af2950d210b",
|
|
|
|
|
"value": "637969fbc85e184e93a96f146abd7bad"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334633",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ea9-6324-4c4c-a957-4ef5950d210b",
|
|
|
|
|
"value": "9261693b67b6e379ad0e57598602712b8508998c0cb012ca23139212ae0009a1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334634",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eaa-5628-4930-98e7-4bbe950d210b",
|
|
|
|
|
"value": "8697fca8fb4c27f64f42c393e527165e9604ae4e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334634",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eaa-8748-4506-b03a-4880950d210b",
|
|
|
|
|
"value": "41ff8be81c58eb94b5f59e5f91ba0eec"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334634",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eaa-1fac-47e9-8def-49dc950d210b",
|
|
|
|
|
"value": "8d9695d0af6c38b8552ab3182f41f7ae96dc6cd90e107ee7ce9c132ac9394b61"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334634",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eaa-3704-471d-b117-4958950d210b",
|
|
|
|
|
"value": "87c6760c13c17e35d90a203a2acacfdf2ada0ed2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334634",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eaa-52a8-4043-85cb-4df4950d210b",
|
|
|
|
|
"value": "f413e8519a67390e4618fb3653250572"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334634",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eaa-2050-485b-bb8b-431d950d210b",
|
|
|
|
|
"value": "adca333d2cee959c9323327ec8b3abd1193f34c520b80e4f699b49f70e14971c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334634",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eaa-3d20-4b0f-aa14-4934950d210b",
|
|
|
|
|
"value": "88c9e88086c8aa987eeebe70c5876b7660cd12d0"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334635",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eab-d0d4-434a-b7b6-468c950d210b",
|
|
|
|
|
"value": "a64c6ebab211184ab23ae72aebdab976"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334635",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eab-e3e0-4aad-a9c0-4bc3950d210b",
|
|
|
|
|
"value": "8cf6258d002326a03cf4cd70d97837b02a1ba5f3451e88fa354947180fb93eaa"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334635",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eab-9f48-48b3-80d6-4d8e950d210b",
|
|
|
|
|
"value": "89b07f90ec9db28d0c53423e6f64745da7e607cb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334635",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eab-7860-4c79-beac-4f70950d210b",
|
|
|
|
|
"value": "56ac87bbab2e471bad63918f3b953745"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334635",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eab-76b8-4640-aa0a-4167950d210b",
|
|
|
|
|
"value": "edc3fba72f9a485c43c1aa3cbe0c5752d8af2ec7bfecb48a46f467e549daac05"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334635",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eab-c674-4282-a74c-408d950d210b",
|
|
|
|
|
"value": "8a0fa4074403caeef809113ba7c84eba4404ed9c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334635",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eab-72a0-4348-9be5-46e8950d210b",
|
|
|
|
|
"value": "2c367d915ca37e237df16d8548151a8b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334635",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eac-5348-4c05-a847-4c43950d210b",
|
|
|
|
|
"value": "b40d0ed8d1b7bbd0d52990ccbb7e927777d9854640c6c4b0adc683d55a965758"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334636",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eac-ec10-4cf0-88a9-4f56950d210b",
|
|
|
|
|
"value": "8cddf9c84e4a7eee3da4939ee0147d1e39ee3e1f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334636",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eac-53e0-4c67-9bea-46da950d210b",
|
|
|
|
|
"value": "56f3437184e1ee96b1161135f3c5a1ab"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334636",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eac-830c-423d-b045-4a73950d210b",
|
|
|
|
|
"value": "8bba59ce301d510bc3b24c941841ee4a8b0858d37e31c9d59193b78e7da81d9a"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334636",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eac-7bec-457f-b075-4abd950d210b",
|
|
|
|
|
"value": "8cec37385290b004e0b6514a44cb0bf7b7e64aac"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334636",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eac-7080-405d-b878-4f5e950d210b",
|
|
|
|
|
"value": "bc7e2c790deaecf69a69c042932e428b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334636",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eac-f5c0-452a-857c-4ce7950d210b",
|
|
|
|
|
"value": "d5d23fbad723009a6a6364ef28153ffc95190e269cf3749c3cf28128d4c89be1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334636",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eac-1b28-4b2b-b35f-450e950d210b",
|
|
|
|
|
"value": "90342657a424fcffa836dfa5136eb362f49fdfb6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334637",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ead-6e04-4474-8891-46d5950d210b",
|
|
|
|
|
"value": "19e932c289b936f407cd93dc4162eec4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334637",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ead-c828-42c5-b736-46c8950d210b",
|
|
|
|
|
"value": "fff8c7da09ace612e203a7d91b24e56a9e1715d5bfe6a7a4466adff284009a1e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334637",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ead-ec88-4107-b328-4e0a950d210b",
|
|
|
|
|
"value": "9432d96afa2618213a7e2ccd6c9735291c694b9a"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334637",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ead-86bc-4111-b668-4f53950d210b",
|
|
|
|
|
"value": "bdfc8d71ed9d065f7fba87f84adeea3f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334637",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ead-a304-4235-9b91-4cb6950d210b",
|
|
|
|
|
"value": "91b0995ee522a6a01fe112dd6cdc21f2cd57b26ac84d8e3065f124ccb93c5eb4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334637",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ead-ef18-4d11-b2d3-4147950d210b",
|
|
|
|
|
"value": "944e99725740271a01012d13ccbc9b9b4094fdbf"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334637",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ead-87bc-480a-a2d3-4a05950d210b",
|
|
|
|
|
"value": "5a0ae7088982e61cad12d0bfcc14d070"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334638",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eae-9510-4537-bdf3-44f6950d210b",
|
|
|
|
|
"value": "374f1774b3689e8f1cbbee2cdcef9a94bb30048b0f4f243b8c1c8d1d70ec8442"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334638",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eae-1af4-431f-a3cf-43f6950d210b",
|
|
|
|
|
"value": "956397670afa8921a29110f9926ba118b0a9b5fe"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334638",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eae-13d4-4621-ba78-4909950d210b",
|
|
|
|
|
"value": "c2979839d2dfee2d26b32510d4c35bc2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334638",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eae-f288-4fc7-bed6-40d5950d210b",
|
|
|
|
|
"value": "ea2244395a2f750564fc26d64b4cd50c2afd779b4404497564e0fe13a255b707"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334638",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eae-e1c8-4f17-b552-47b1950d210b",
|
|
|
|
|
"value": "97400f2cd6873187109fb9a4be4cc199067e8e4b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334638",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eae-3d18-4e20-833d-40be950d210b",
|
|
|
|
|
"value": "32fcb852290c66212c9f5377313b3c54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334638",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eae-9098-4c04-ba15-4cde950d210b",
|
|
|
|
|
"value": "0ca7fafd58f8ddca6dd182790b1a634205f45bac5c4a3ff4cecc3473d0c47726"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334639",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eaf-3f00-4122-9782-48a4950d210b",
|
|
|
|
|
"value": "9b1ed2cd261bc4b6f1ccf8441dbf3d5c936b63c4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334639",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eaf-a690-49be-82f7-45ae950d210b",
|
|
|
|
|
"value": "58a5485bebda446634c538f20362f0e4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334639",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eaf-e7d8-42fd-888d-4b3f950d210b",
|
|
|
|
|
"value": "976a843ee5a35e5015b5b2394e520e82403e6f81f877a4206bfe705bcb5e13e4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334639",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eaf-24cc-43fd-a85f-42ac950d210b",
|
|
|
|
|
"value": "9cfa6d066024a458e133fb9cfbafbdfa0b1c64f9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334639",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eaf-7b7c-401f-b5b4-4e6f950d210b",
|
|
|
|
|
"value": "63de9e55e07f81e6d38eb859483b103d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334639",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eaf-f95c-431e-b07d-408a950d210b",
|
|
|
|
|
"value": "6d22dbb5285391be5dcce7a2aed9f14b7ef57de90fd5b02d4bd7ba07d4a5d455"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334639",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eaf-acf4-4f03-b8fd-478f950d210b",
|
|
|
|
|
"value": "9f6a16d59f1159110caf32df1ad2bb6183d8bc49"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334640",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb0-9f70-48ac-9967-4fbe950d210b",
|
|
|
|
|
"value": "1ee3aa67213868df9b08d00f3bfca6b1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334640",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb0-1b00-4e40-a20f-4d45950d210b",
|
|
|
|
|
"value": "5e5157e77089c4cfcfb2dfc82a574e465a943323e330dfe15316553d41f3d7eb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334640",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb0-9ee0-42c6-9dea-4c46950d210b",
|
|
|
|
|
"value": "a047c5270762a05632b908c65beb14908bc4972f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334640",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb0-7300-4987-bbad-43cd950d210b",
|
|
|
|
|
"value": "b4ffce10c64d1107901318b43b012e9a"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334640",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb0-f6e8-4fee-8366-44a7950d210b",
|
|
|
|
|
"value": "c8b3fa82fdd97f731851fa19611499b2c7a493cd689ac4d1796b3687d7fb6c82"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334640",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb0-b180-4b4b-9424-4a28950d210b",
|
|
|
|
|
"value": "a14d7340ac6baf0b38eee37d7e3097d92a7e75e7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334640",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb0-4ff8-42b7-a711-42e5950d210b",
|
|
|
|
|
"value": "a05c9161177ee61f3e5aba75fc0a4970"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334641",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb1-8e7c-4452-997d-47da950d210b",
|
|
|
|
|
"value": "559266876f060621f9b910ec75404946121460375b6f7812da717896e96dec26"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334641",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb1-2e28-4a87-94fc-47f3950d210b",
|
|
|
|
|
"value": "a3a7545333638ec13ad33af6c4ec32a2d4f56c5d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334641",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb1-25b8-435a-a323-4f7c950d210b",
|
|
|
|
|
"value": "9bce542aa3fdd21c63e18d453ae8039d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334641",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb1-b494-407b-929b-4d0b950d210b",
|
|
|
|
|
"value": "957fcc2d137e9164635831dd0ab8bca8079ec8b1a4c2eb6e8ac254c5732b025b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334641",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb1-6010-4876-8527-4acf950d210b",
|
|
|
|
|
"value": "a56a1b3f473346f0395c0de433938dbf4fa25a11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334641",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb1-f958-47c4-8315-4ec9950d210b",
|
|
|
|
|
"value": "c219ac463ef4bb377b0b5e7ec19ce976"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334641",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb1-bea4-41ff-8197-4a5e950d210b",
|
|
|
|
|
"value": "a5948e46db292b61d4c4032a7c7af15453477dd6ce4453daa4a6753c7763d873"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334642",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb2-48e8-4606-9062-4e9f950d210b",
|
|
|
|
|
"value": "a6e5539410661a8407ea022f4f55aa13ca674fa1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334642",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb2-9c74-4920-a128-4624950d210b",
|
|
|
|
|
"value": "5e000fd125d326782a4b3dbd8eb65cf2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334642",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb2-3e28-44f2-beaf-4947950d210b",
|
|
|
|
|
"value": "602bb8e06f9ec55f1b4c78a77e4ec229548763076a69e6606a898c4dd9731ff4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334642",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb2-bb5c-4784-b9f7-425c950d210b",
|
|
|
|
|
"value": "ab30ae8b0bf1f3986d9635ea6caddf3878b26fa1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334642",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb2-f240-4a40-801d-4b91950d210b",
|
|
|
|
|
"value": "89eab97e6862ab4c47d9f66f850e58ee"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334642",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb2-1f84-4fb5-8d59-45a4950d210b",
|
|
|
|
|
"value": "84058a01bb257a5c0f9a27f893ded585d349c9d87036d1a386fb8368cea2f545"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334642",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb2-0ce8-4ebc-a72a-4f7a950d210b",
|
|
|
|
|
"value": "ab57daff9d93e71bcdf7f4b356089d3ae681602b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334643",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb3-6760-4d9c-96f8-4198950d210b",
|
|
|
|
|
"value": "c89f6c16e581e975a12ec19191a766d1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334643",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb3-0b08-4db1-83cb-420d950d210b",
|
|
|
|
|
"value": "654e7dd64ab4ef04ea22f63fb0497346fb8d484a488be428d78d32a17654604d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334643",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb3-1588-4fb3-b59b-438b950d210b",
|
|
|
|
|
"value": "ac63f0f2ccfd7ef77b1369130e2d4316c306b4d8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334643",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb3-63b0-4b72-ab1d-4254950d210b",
|
|
|
|
|
"value": "5169e6cf3d06429b94bafd835b5e2791"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334643",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb3-1db8-4d39-851d-4ac7950d210b",
|
|
|
|
|
"value": "ec0e0c640f83d91fc50d657870f4b1d07bff0300ad6ba841bc7a211160ca79bf"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334643",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb3-e6fc-4a17-bc0c-4489950d210b",
|
|
|
|
|
"value": "ac8945be4493b660b4ab4283e644b9b0ab3f74a7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334643",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb3-9eb4-481b-a92b-4f93950d210b",
|
|
|
|
|
"value": "f91a6d14a7e0257d2da9b1b6fbc6010c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334644",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb4-631c-4a47-b6ac-41b2950d210b",
|
|
|
|
|
"value": "72ec760b698dc19693eaa846b2cc21ebceec4ee122feb30cb0802a9920af9898"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334644",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb4-f198-49fa-95cc-433c950d210b",
|
|
|
|
|
"value": "ae4ca2e5a431c67a427a36823aeeebd89f3ed0cb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334644",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb4-5c48-4c34-9ef5-40ad950d210b",
|
|
|
|
|
"value": "8aa3c6e9cdb8724088c67c414691b66e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334644",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb4-dcd8-4bc1-9cfd-400d950d210b",
|
|
|
|
|
"value": "a801ca60fe94c8182274cbea1f5d3666d0b9aada7feffe3d9a613eb1c3a6f949"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334644",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb4-d554-4341-9961-49e3950d210b",
|
|
|
|
|
"value": "b01b815d200a6cc90a0a15f9cde89fa93b7f9dc6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334644",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb4-6f6c-4ddb-b7c7-4063950d210b",
|
|
|
|
|
"value": "f2e0816f239a4066dcf4f035d3c91021"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334644",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb4-f598-4a34-a72b-4283950d210b",
|
|
|
|
|
"value": "f4c27c563e9fd56990f1082cc185c8a6f0b04fee97b57042db10300e1eb37f97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334645",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb5-4514-4732-b264-4dcf950d210b",
|
|
|
|
|
"value": "b0e59fc1d41f66919fc25e454d26d9fd004e03bb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334645",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb5-29a4-4f77-90d6-4675950d210b",
|
|
|
|
|
"value": "b0d0828a54cd184137de8d0deb698119"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334645",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb5-e724-4888-aa5a-44c1950d210b",
|
|
|
|
|
"value": "6e678dc4d933b186557f671913fb2fada37f342d5007dac0b745ca718d2e7405"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334645",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb5-bbf0-46ed-91fc-42c7950d210b",
|
|
|
|
|
"value": "b149a8009f1c4e845778370d25f2df980adea362"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334645",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb5-6bc4-4ef7-bbb6-4328950d210b",
|
|
|
|
|
"value": "6f653987ef4837ab20bd0b2d2f609ab0"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334645",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb5-ed5c-431a-8c73-4289950d210b",
|
|
|
|
|
"value": "a9e25fbb95253412de09bc1e4323602afbf5077aca71f861cbc7ad74581511a2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334645",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb5-6298-409a-b6f9-4cf4950d210b",
|
|
|
|
|
"value": "b36ceec3b2bf64802b56c610d3f0be29adc7d4b5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334646",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb6-91a8-44b6-b199-4d99950d210b",
|
|
|
|
|
"value": "0a011ad2222a93014e7420db94f6aa2d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334646",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb6-f658-4d9f-8fbe-48ca950d210b",
|
|
|
|
|
"value": "7279dfe295bfb075bff6a856097491fbd4c932970bb654c969a995322f0d03db"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334646",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb6-5dc4-4fce-a0d2-4d5b950d210b",
|
|
|
|
|
"value": "b6435e8a9356ef2dc0d31b491b78f8c870a4bbec"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334646",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb6-9bec-4fc8-a4f6-40b1950d210b",
|
|
|
|
|
"value": "4b8bb84127b0967d316e3d507a0f3b59"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334646",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb6-89dc-4e0d-af49-48f1950d210b",
|
|
|
|
|
"value": "f8addfa091021a34f8b16fac0687b685b72ff1cac87ba1392d6195ab42954d42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334646",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb6-6188-4406-a5f1-43c0950d210b",
|
|
|
|
|
"value": "b683759f398e76e471879efb52df1738bf1fc307"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334646",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb6-2354-4b8a-85a0-4404950d210b",
|
|
|
|
|
"value": "875a81e316b0759f246bde12bf5be852"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334646",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb6-1954-4824-a281-4633950d210b",
|
|
|
|
|
"value": "eda9ba61ad01810aa53eece81626e913c4058a3b3cbf65fded907528117db0ec"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334647",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb7-55ac-4b3f-8293-42d4950d210b",
|
|
|
|
|
"value": "b70d21894318a95717db2c5113be455ccd4c72e0"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334647",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb7-ce08-4f77-9b58-44f9950d210b",
|
|
|
|
|
"value": "a4d16a3874aaf01d69c27032cb8988c3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334647",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb7-6304-4659-b849-44a8950d210b",
|
|
|
|
|
"value": "b15b2acbe02d7b0649b41d1fe7e0cd008761cba28d20c5d9fa9c17e3a430d0eb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334647",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb7-7370-4d6d-a2d0-42de950d210b",
|
|
|
|
|
"value": "b7ec5d36ca702cc9690ac7279fd4fea28d8bd060"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334647",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb7-1340-43cc-93f0-4527950d210b",
|
|
|
|
|
"value": "56eac983a8caa8c0037c6ba25e9a2d9f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334647",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb7-089c-4e52-95db-450b950d210b",
|
|
|
|
|
"value": "fc609adef44b5c64de029b2b2cff22a6f36b6bdf9463c1bd320a522ed39de5d9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334647",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb7-a8d0-4ced-afea-4c95950d210b",
|
|
|
|
|
"value": "b904f58d5bfd82d0778bdc9911f3b2193398e7cc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334648",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb8-c200-472f-b86e-4559950d210b",
|
|
|
|
|
"value": "251de11b2d47bab208b578db6f4aa38f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334648",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb8-84d4-4d0e-878f-44dd950d210b",
|
|
|
|
|
"value": "a9af1d410b796a7d89050bb8189048260564a1ff0b94db25d0f465ea18b1c02b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334648",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb8-4a88-419d-841b-4810950d210b",
|
|
|
|
|
"value": "ba553804706964473d3782468b1575548da0e211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334648",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb8-406c-481e-b46e-4895950d210b",
|
|
|
|
|
"value": "64e273360b3f45a60cf99ad564954a19"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334648",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb8-fef4-4092-841e-487e950d210b",
|
|
|
|
|
"value": "73ab06fce6b9746c1010a3c588c62069213d94134823b7527559a0f41c88d20d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334648",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb8-727c-4613-9c06-418b950d210b",
|
|
|
|
|
"value": "bab514067c72f51786054136d2e6ab927c62b275"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334648",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb8-9654-4eb2-92b1-476d950d210b",
|
|
|
|
|
"value": "b8bb19a432127cae3680ab46140c4789"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334649",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb9-fac4-4004-b29f-4c8d950d210b",
|
|
|
|
|
"value": "5a45524e9ad739585c3851b32f660d777624c811d0b293b3474fa2568e8022d4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334649",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb9-b524-4e5f-99e9-4b44950d210b",
|
|
|
|
|
"value": "bbfbf78a4bfa692b9d152ecc679dcfe1db63ccd6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334649",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb9-b958-45d4-a471-45f8950d210b",
|
|
|
|
|
"value": "cef9886a936a35af81ed23b702305ab6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334649",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb9-1570-45b7-ae9b-40cd950d210b",
|
|
|
|
|
"value": "61fe96a5118b531e7f1659085bcd61084354961fb557588bae3619665a8dc681"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334649",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eb9-f52c-4dbf-90a3-4e7c950d210b",
|
|
|
|
|
"value": "be8a1093a62d3c2741227510ec09029a18b23a27"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334649",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eb9-539c-4c0c-bb11-4841950d210b",
|
|
|
|
|
"value": "f62c6e428738f074cf90f21e289dd34f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334649",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eb9-c48c-46e8-9141-4b18950d210b",
|
|
|
|
|
"value": "a4afe60c024a34ae16dfbde1224550224ab3195f3d5dfe35c50ebd6a12fd4170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334649",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eba-7d1c-4dc5-8830-4c2c950d210b",
|
|
|
|
|
"value": "bff3f180564f072f45d72bd6a840e9cde68e863e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334650",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eba-2db8-492b-aa16-4fd9950d210b",
|
|
|
|
|
"value": "83aff63d5b3855cff982422bebc779d4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334650",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eba-e984-4ffb-ad3f-4e79950d210b",
|
|
|
|
|
"value": "32599e86cb3bc9e1f91ff630fa41cd140354a21ac47bdb48082fbb8fba900f53"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334650",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eba-dc64-47b0-a0d5-4e39950d210b",
|
|
|
|
|
"value": "c520096fc851bb0da060fb6cab274387ca8e8f88"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334650",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eba-efd4-46a6-9d91-4cdf950d210b",
|
|
|
|
|
"value": "780c1904904356bb7e4304f37bd98c7b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334650",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3eba-906c-42ad-acda-450c950d210b",
|
|
|
|
|
"value": "c52f4d1cf3ff09b22cf2f4bef867456aa7426c00fcd19c38b66ee3adc7eba057"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334650",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3eba-54f4-4c4e-91a6-44a9950d210b",
|
|
|
|
|
"value": "c5959b7d97f2855950bc35c9e0477b1940a43fc2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334650",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3eba-020c-4d92-8cfe-41c6950d210b",
|
|
|
|
|
"value": "bcd74698b43531a3df7fb2f76f4b0a56"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334651",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ebb-54e8-4c21-8fbb-44d3950d210b",
|
|
|
|
|
"value": "a23b5fc7d309b982f9dafc712b6a95c1cfce6102f86a7dc3f3013819638081a9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334651",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ebb-a034-4cae-a636-4df2950d210b",
|
|
|
|
|
"value": "c6993c06bb4721a8637390b282e30d5a1c91a22f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334651",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ebb-8fb4-4228-8802-4b58950d210b",
|
|
|
|
|
"value": "5a724230ca622bdcdc0ba41e524821ca"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334651",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ebb-2150-4d30-a6bd-4d22950d210b",
|
|
|
|
|
"value": "90324a869541e0e67f0a3d4dcbdcdeefcaa4839edcb55ee163b7f26f80725278"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334651",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ebb-8bdc-40ed-bc9e-4de3950d210b",
|
|
|
|
|
"value": "c7d3c7b4ff167ccc0957f5659c5591f2ed43e70a"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334651",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ebb-e304-483a-a0b7-4764950d210b",
|
|
|
|
|
"value": "b1c1f4f3e9189ca1763e8b2ca3bbfdfa"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334651",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ebb-3c20-4cdc-8d9b-4668950d210b",
|
|
|
|
|
"value": "cedaf3f2bdbd936ca276b636bb119136d67e0e2fa74614442c95bdbae6c50585"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334652",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ebc-ce04-418f-83b0-46b4950d210b",
|
|
|
|
|
"value": "c893cd86c0e0d6ed267a5f38c8e51b79436dac62"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334652",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ebc-6838-4d5f-949f-4cea950d210b",
|
|
|
|
|
"value": "d9faaf817ef1c3ee664659049dde5f39"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334652",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ebc-ca50-4e55-bbbc-4fef950d210b",
|
|
|
|
|
"value": "ab4de0951de38c475d846da1da8336b97e886b6dbd694332f3624ee5595186fe"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334652",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ebc-5b00-4876-9a64-46e7950d210b",
|
|
|
|
|
"value": "c926351a98a617b0be47608c5d03d08a2a82ee1d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334652",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ebc-88b8-4fe7-8d54-4363950d210b",
|
|
|
|
|
"value": "f69da77c13a651074c919ab26507c011"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334652",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ebc-db0c-440f-a709-4470950d210b",
|
|
|
|
|
"value": "07ed3d9bd82a3b490f33f36117af3ad02152d51e9c2470eb0089dab1305368f1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334652",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ebc-cacc-4f96-a728-461a950d210b",
|
|
|
|
|
"value": "ca84583819c9723fe8d9fc69d8cee66687a180c7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334653",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ebd-44dc-48d1-91ac-4708950d210b",
|
|
|
|
|
"value": "5cb4e4e218b97c09c885d157e83f7247"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334653",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ebd-791c-400c-ad02-4da6950d210b",
|
|
|
|
|
"value": "150924668c8d7cd9899360eba12f13246538c50fbe7ef1ebf234ed7128c9936e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334653",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ebd-e428-4d0f-85b4-4693950d210b",
|
|
|
|
|
"value": "d228b700a6f4542a63337ab0899bd7e90982c30e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334653",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ebd-a378-4131-9f5a-44dd950d210b",
|
|
|
|
|
"value": "5527d16136944bc3795bc65bcbbe65f3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334653",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ebd-f030-4014-aae6-43e7950d210b",
|
|
|
|
|
"value": "42dc1f9417fb067c3b96622ccf6e8c80c9d07202cc28f3c4d460d5bdc6ff249f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334653",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ebd-2a4c-4ba2-b919-4b9c950d210b",
|
|
|
|
|
"value": "d2cc4bf197b9d408bcec69252725bbcdb516308c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334653",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ebd-cd7c-4203-b34b-4fd0950d210b",
|
|
|
|
|
"value": "b58e692d0558ba1b9cfcdda2775c7fac"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334653",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ebd-6044-4377-8864-4e2c950d210b",
|
|
|
|
|
"value": "ad55c2dcf7e3373ea074061d119c891b34e4364cd7f5f679b475b5ec3371592e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334654",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ebe-eeb4-4b80-b503-4b0f950d210b",
|
|
|
|
|
"value": "d73123ae61b9183f82ac9fa64c813f2b7483e772"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334654",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ebe-04bc-47b4-81fb-420d950d210b",
|
|
|
|
|
"value": "9ff1afd5fc8595cd35741696a7a24a4c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334654",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ebe-74c0-46c3-9f06-4ccd950d210b",
|
|
|
|
|
"value": "637cf542512b0b6507b39686c7e87af30e7aa3a02eb9481a49efb4d0951adfe8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334654",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ebe-d204-483c-adeb-454c950d210b",
|
|
|
|
|
"value": "d86c6c85f3fe7981f7824f21bcaf45f876943e55"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334654",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ebe-8fc4-469b-8f16-45b3950d210b",
|
|
|
|
|
"value": "2b7677ebb41abfd97225b2dcf8bbea35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334654",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ebe-f770-4cea-9eb0-40aa950d210b",
|
|
|
|
|
"value": "dac6abd5ba0865b7983cff40f7a13d9cde89fed3c5b81c2b785e884f9ccdf28c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334654",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ebe-25b0-4c29-b78b-49b7950d210b",
|
|
|
|
|
"value": "d89f0d3e65532a41615d0ee21f2b2379eb0b27d5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334655",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ebf-13a0-4551-ace7-4df8950d210b",
|
|
|
|
|
"value": "738cf6db1f93006967ed1aeef87c6ba6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334655",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ebf-8e94-4608-ba25-487b950d210b",
|
|
|
|
|
"value": "5f6bc6573d006609d1f0b5c3d051dc6eb5b30dbc60c4e2e7c7b6826434c6a59b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334655",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ebf-134c-4891-b8dd-45a8950d210b",
|
|
|
|
|
"value": "d981a1a553729bc6ad875d57825dda17b226c385"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334655",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ebf-ff88-4d0e-ba2f-4f1e950d210b",
|
|
|
|
|
"value": "168b06ee1219ada0afe184f9a70d12a0"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334655",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ebf-7200-4f13-bac6-482a950d210b",
|
|
|
|
|
"value": "cc87e067021f8b419cc73863d26bd54e25b6f4c8149d6d331ba50e54aea917ad"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334655",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ebf-fbcc-4565-9dc3-450e950d210b",
|
|
|
|
|
"value": "dd6ac4da70c52dc6aad69590c2335925859c838b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334655",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ebf-06e4-4af2-8d99-42c0950d210b",
|
|
|
|
|
"value": "713c269faa5f650710997004d3be6971"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334656",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec0-c120-4fd5-965a-43a8950d210b",
|
|
|
|
|
"value": "6739dd4361c559fd9099dfc967b06eb5bac95ee8693986ac29c7b368dc7cff08"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334656",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec0-ce90-446b-9cdd-45bf950d210b",
|
|
|
|
|
"value": "ded04333c0eeb0f7978da4f298c191ecf42f98c2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334656",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec0-c644-44fc-b26a-414f950d210b",
|
|
|
|
|
"value": "e1e36fa0c482c71fd777be049272f7d2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334656",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec0-08b8-4f8e-ad20-4a76950d210b",
|
|
|
|
|
"value": "e32cfd415d5aee289a62a02b28b7815346cd150d70c0e1f95bb92ecf26a855de"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334656",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec0-5acc-4b18-b20a-4923950d210b",
|
|
|
|
|
"value": "df7e96430c086efef38810de0ce981f7c4b5bd3a"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334656",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec0-0cd4-437a-8699-486c950d210b",
|
|
|
|
|
"value": "a226d93f726bdaf119088e62b9b70989"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334656",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec0-b57c-4a59-9b09-4b1a950d210b",
|
|
|
|
|
"value": "b20b198d9e3af27ecac4a83b66234cae4eef6db0c1192b6f9ba9ca946033034b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334657",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec1-40fc-4309-8e67-4dc1950d210b",
|
|
|
|
|
"value": "e113e2904aaae7aa5c2438fea757846cad8a7e9b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334657",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec1-1f4c-4c1d-ae91-4e43950d210b",
|
|
|
|
|
"value": "aaf26a0477841b45969fdce35bd2e1e1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334657",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec1-cd2c-4b56-8d3b-42c6950d210b",
|
|
|
|
|
"value": "d9c55606c757e78940c3a22fc25ae12ed93a68c9f88983e58cd4795047504246"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334657",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec1-c1c0-4efc-a007-4d67950d210b",
|
|
|
|
|
"value": "e19a240f49e953a8ec9a7efc3b0e47cc8ecb07c2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334657",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec1-c290-40bb-99ce-434c950d210b",
|
|
|
|
|
"value": "aee7029335a4df8ac44d3587e41c21dc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334657",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec1-30a0-4cd4-9be6-4000950d210b",
|
|
|
|
|
"value": "3f85279eee498578935e7f51881f8411be5ac7ba45f2334699230cd0b9d60032"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334657",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec1-2a88-4594-8430-4998950d210b",
|
|
|
|
|
"value": "e4c874697e71bb3b3b7fa0d5142f5c28df786313"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334657",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec2-2648-40e9-a064-438b950d210b",
|
|
|
|
|
"value": "448975cbf086c450d1ac6285f1b57e95"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334658",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec2-0ca8-4c3e-b510-48a9950d210b",
|
|
|
|
|
"value": "b606cad7024a165b899e3d2ae9625e6d0f207928eb2838a6c4c8b26ddd583bb8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334658",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec2-d490-45a1-91b4-4cf9950d210b",
|
|
|
|
|
"value": "ea072de4b781749a694628da0758c934ce9cb0a4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334658",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec2-022c-4aea-9dc8-43d8950d210b",
|
|
|
|
|
"value": "014402d32082497d9fae6b339f358401"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334658",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec2-9f80-4c4c-9bde-49af950d210b",
|
|
|
|
|
"value": "941ceeb2cbe1969dc41059e0766b5d6df687e8e8d96e31efea71699686ab6b9e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334658",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec2-4314-4d76-b13a-4652950d210b",
|
|
|
|
|
"value": "ec316bb9b9d0a09c2bd566e98d6507edb9932eec"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334658",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec2-35b4-40bd-b986-4164950d210b",
|
|
|
|
|
"value": "d54e2e633cea68716023e0e524325ffc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334658",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec2-5bc0-4e81-8c75-4769950d210b",
|
|
|
|
|
"value": "72dc79c35aac14f453674ac3b62c268843a9c614ae99da01879db04c1dd995f9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334659",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec3-9640-462b-84a5-4af2950d210b",
|
|
|
|
|
"value": "ed91c8a09126bd27edeb0a6f9e5ef64a9b5bd29c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334659",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec3-1b1c-42f5-9577-4093950d210b",
|
|
|
|
|
"value": "a0764ea07a40604b295e8600a3b73231"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334659",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec3-8458-4994-9184-4ac4950d210b",
|
|
|
|
|
"value": "9a1dc317baac5b31e8f9498c979e623db6e57f34aaea6dac923853cec1a30397"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334659",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec3-4600-49b4-b4a9-426b950d210b",
|
|
|
|
|
"value": "edc03b57e86aab5f869533ce2487f6918e26d5fe"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334659",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec3-28dc-49d2-b7ee-468f950d210b",
|
|
|
|
|
"value": "c170a9961560e4c96215a06f75985fc8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334659",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec3-21bc-4ec5-a8f1-4926950d210b",
|
|
|
|
|
"value": "598bab73e4e2e9a09da64a16c807fea62bac20ec206384194478fcaf9eac1b14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334659",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec3-5fc0-48a1-a142-40e5950d210b",
|
|
|
|
|
"value": "ee0d1a3ca639971d130eff10c22350c77a4a062c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334660",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec4-6544-46ea-91ed-4256950d210b",
|
|
|
|
|
"value": "cca243be233cfa4c3f44c2035b5db135"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334660",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec4-449c-43ce-a947-43b1950d210b",
|
|
|
|
|
"value": "1a178c22b5e9a7e99c0c733ff9d8452b22a3418b3c137687c8407c309e79a714"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334660",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec4-3500-431a-8d90-431c950d210b",
|
|
|
|
|
"value": "ee52c9416e9da9a1f67785bada3c9f4dae89d1e3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334660",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec4-20d8-41cb-a8bb-4568950d210b",
|
|
|
|
|
"value": "4bd8de4ce17067db858d63997315aee3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334660",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec4-6cc8-4ebc-9b21-45ec950d210b",
|
|
|
|
|
"value": "f2f6dfc7fc3ff1170a80d661c1dbc18dbdfa456c1327ac475a7b21a38ec014be"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334660",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec4-1b0c-44ca-8a04-4f90950d210b",
|
|
|
|
|
"value": "f039f975acec4b8b60b7619cc75e0b87d809315c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334660",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec4-72fc-4368-b7cd-451c950d210b",
|
|
|
|
|
"value": "60b9933665169020a3565781e4058e08"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334661",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec5-117c-4be0-b8a2-42fe950d210b",
|
|
|
|
|
"value": "200c0623f75433c1e2821d930e6f3e072c5e06f2bd1770551595acc3b170febf"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334661",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec5-b230-48dc-b36f-40d7950d210b",
|
|
|
|
|
"value": "f19e73120166b637ee7a941540979efaa4a284b5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334661",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec5-4c88-476c-a654-4bf8950d210b",
|
|
|
|
|
"value": "7ebc36666f11c4285ee68501dc3c1b5a"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334661",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec5-302c-4416-9dad-45bb950d210b",
|
|
|
|
|
"value": "71fe815f897877e69e4a37844a6d2feb40fdecaed1dd55b07472234e87e22767"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334661",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec5-a200-4143-8425-418b950d210b",
|
|
|
|
|
"value": "f3c3f9e3139efb822e7b574898e95c38498462c0"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334661",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec5-92ec-4a17-81c4-4016950d210b",
|
|
|
|
|
"value": "2377d5fa8c47ed262d49575e2e612433"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334661",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec5-9590-4587-85e7-472b950d210b",
|
|
|
|
|
"value": "b524abb464b30366afff9b01da259432f76fef62a7b9d128284e289e76b3da16"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334661",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec5-7da4-47f4-9a9b-4b43950d210b",
|
|
|
|
|
"value": "f7653b3b9d71303d8ac9425985400b321934ddcc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334662",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec6-51cc-41c2-ada5-4c37950d210b",
|
|
|
|
|
"value": "be6655c17f0a797f2c01b2ab42b55107"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334662",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec6-8458-422a-87ae-471b950d210b",
|
|
|
|
|
"value": "7561ace6f04ca6d023d7eba0c8cd49b2515baa71a40926f625538e41e21f641f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334662",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec6-1634-43cc-89c8-4bd4950d210b",
|
|
|
|
|
"value": "f771f3b68376fa211e590a7f5cb65f7cbab20187"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334662",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec6-34d4-4e04-8625-49be950d210b",
|
|
|
|
|
"value": "7421ef518702479d9b1a4b82318a1095"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334662",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec6-ae14-4373-807b-4cc8950d210b",
|
|
|
|
|
"value": "b800ba5adfc26f20b4049dba2442be73347e999a224716c7ecb5271e482e0a4d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334662",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec6-0f40-4ea7-a82c-4750950d210b",
|
|
|
|
|
"value": "f80dbd487b738df05fe27b8d5238cbd3e429dd97"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334662",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec6-4768-4e0c-ab9a-44bb950d210b",
|
|
|
|
|
"value": "8a19326b0ecbad83058b0ab803bad254"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334663",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec7-a0e8-44a5-9090-493c950d210b",
|
|
|
|
|
"value": "2c72175f96c651eea3d3411efacf73e0fb3e7543451b73f5e2521f47be67f006"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334663",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec7-10c8-4f9b-8060-4297950d210b",
|
|
|
|
|
"value": "f9860169568558df2eb06b9a7ab9d0a89f45cd44"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334663",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec7-2244-4227-945e-47a5950d210b",
|
|
|
|
|
"value": "1c5764dd71b9109dbbcd83201be2ceae"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334663",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec7-f110-4ac8-ab05-4aa0950d210b",
|
|
|
|
|
"value": "abbac3dda22f825197dd65b8c1076c5ab8d7ecaa2ce2821b242f63154eafce3a"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334663",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec7-2720-4bc3-ad6e-4613950d210b",
|
|
|
|
|
"value": "fb106fdbb8ab0ee1272271aa880c254f8da59e42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334663",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec7-64c0-42a8-a411-4aa4950d210b",
|
|
|
|
|
"value": "27fdc0db940764a1218b7a3698571bf2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334663",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec7-22c0-4a56-a345-41db950d210b",
|
|
|
|
|
"value": "e2f8c5f8c3ab687b91dd28081fec71e0bb9f70066237768e7020fd992c80f2d5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334664",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec8-7fa0-4e55-808b-42a6950d210b",
|
|
|
|
|
"value": "fb9fddb2b74e62d2e949520de23d6a2a2a16e576"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334664",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec8-0df8-4068-90e3-417f950d210b",
|
|
|
|
|
"value": "f12ed5b550d6856ccb501f9ad65f956b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334664",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec8-734c-46f6-9004-4542950d210b",
|
|
|
|
|
"value": "a72dc5010dc21c3bc9075c74fc7b87f0f89cfbeb1b1c4cdab06db4262d84969d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334664",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec8-07e4-4890-a3f5-42d7950d210b",
|
|
|
|
|
"value": "fd9516d2c5493009009eedc0e98e345956516d1d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334664",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec8-0128-4a19-8e35-415c950d210b",
|
|
|
|
|
"value": "983ea03599f2371d3aa4b561fbdb9d35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334664",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec8-2f8c-4249-a194-451f950d210b",
|
|
|
|
|
"value": "1b72081c4422785d8c6c016b10bdd7545e5fc6f1ff73277b0366e9b40e624616"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334664",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb3ec8-cd20-4d25-b584-4034950d210b",
|
|
|
|
|
"value": "ff3d21c97e9ca71157f12221ccf0788a9775ec92"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334665",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb3ec9-5b1c-4635-91d3-4f82950d210b",
|
|
|
|
|
"value": "2cdd85286c5531557f3f20a7cafa7291"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Verified bad with VirusTotal",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334665",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb3ec9-94d4-4d43-97b5-4703950d210b",
|
|
|
|
|
"value": "8f6988e717e0334b33b7f4697c8ebbb5038c218994c8da7dc295986fe43b2b8b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334998",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb4016-84d8-4936-ba45-490f950d210b",
|
|
|
|
|
"value": "22e1893d9da4fe32aa5abe60f14dad6e52c45095"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334999",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb4017-9f80-4607-8d21-4d60950d210b",
|
|
|
|
|
"value": "3c8fa6759db3772f109b6e9860fcdc93"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334999",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb4017-c9b4-4513-b3b7-4d93950d210b",
|
|
|
|
|
"value": "9581e36c5a55faae049a89fcfa584cde4fa7294b156e31de3e1a33035f4df3a4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334999",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb4017-dd64-4bd5-b876-44db950d210b",
|
|
|
|
|
"value": "3320916ed703343c70ba0166595936eb588a12b8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334999",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb4017-9c90-4008-ae9d-4857950d210b",
|
|
|
|
|
"value": "f27de7b44ae44588445238ef441c9d99"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334999",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb4017-ead8-4614-8982-47ec950d210b",
|
|
|
|
|
"value": "14844c483d486348f598f31956aa13e50f3fa85320287d91815be3a611c8f1a1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334999",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb4017-cb9c-4e28-ac52-4dce950d210b",
|
|
|
|
|
"value": "5acb3aa1f44924b0b1d3e9cac3098ad709aa397b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334999",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb4017-c04c-4dad-9527-4d68950d210b",
|
|
|
|
|
"value": "14b03ada92dd81d6ce57f43889810087"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438334999",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb4018-1b6c-422d-8435-4049950d210b",
|
|
|
|
|
"value": "3190e725cc9eb7c116242da2d3f5dba46853b20f46e681df262e201cc22117e7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335000",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb4018-de80-49aa-800d-4ea4950d210b",
|
|
|
|
|
"value": "5cb07296bda8758a6ad52abf8cbea611ffbfd390"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335000",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb4018-a0f0-44dc-8c4c-4a77950d210b",
|
|
|
|
|
"value": "ba6fd88683895e4e4a4aa32014ee93f6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335000",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb4018-ed3c-4374-aaa6-4f26950d210b",
|
|
|
|
|
"value": "3e1ed9e5fc7ecaa8a01b6fd160cab39d251390a21fb7f6bb98e070efe1506617"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335000",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb4018-40e4-4385-8bdf-4929950d210b",
|
|
|
|
|
"value": "5db463fdb694978f876a9f94c9578e8182799ce1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335000",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb4018-e748-42d9-96bc-4d6f950d210b",
|
|
|
|
|
"value": "82b07d1f6a53b4073ac2e66638051ff7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335000",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb4018-ae98-4a9f-9ee7-430d950d210b",
|
|
|
|
|
"value": "f009f01467722aa8ba3d7543b9dae37fb8f2de2e0d6ff46755d9684b47775e41"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335000",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb4018-b918-4567-ae33-491c950d210b",
|
|
|
|
|
"value": "664c8dfb65f86a691df9641d9d1ab67c5b39cda4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335001",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb4019-67dc-4f6a-8c3d-442f950d210b",
|
|
|
|
|
"value": "af06c4e1e064a6490d488506960e8bf8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335001",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb4019-e630-464b-8abd-47ef950d210b",
|
|
|
|
|
"value": "5048af2f388cfa1bd9ee077953f5ef1499a81ee57a8876a051ea96bd08ceb69c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335001",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb4019-741c-4236-8b44-42d1950d210b",
|
|
|
|
|
"value": "685c4287e74a9704d422ee577b7acb0748119f56"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335001",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb4019-e74c-4469-9c9f-4b8a950d210b",
|
|
|
|
|
"value": "8aaaadb7d6a179226e462a9c8004e80e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335001",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb4019-885c-486a-b8fe-4923950d210b",
|
|
|
|
|
"value": "1a855cef1bb454e7313dba60885e16fa8cb3dced1e38b8ad59ad5429c4e12493"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335001",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb4019-d204-40ef-9af3-4816950d210b",
|
|
|
|
|
"value": "896fe06a9b746dbd9f581267fbf8209a9d071c77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335001",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb4019-88fc-4781-8f45-4c93950d210b",
|
|
|
|
|
"value": "3ae733df029c56fa2e3fc9c07458d8c2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335002",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb401a-e16c-473c-82bf-41fb950d210b",
|
|
|
|
|
"value": "72269cb148f90e8dd2eefc947eb59af88e8f7bb9fbca2dc0d0d572f7a727a6e1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335002",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb401a-1ac0-4139-8217-4d66950d210b",
|
|
|
|
|
"value": "8b4dbcc306c0df0b96505747e13e9c15747aac38"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335002",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb401a-8fb4-4ad8-b878-4314950d210b",
|
|
|
|
|
"value": "708dd9be439c744b43ce18303b8426d9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335002",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb401a-8720-4237-a30c-4741950d210b",
|
|
|
|
|
"value": "d8d668e9d0c8e228b5d329b03cafd5e4b144cd955bacd7052d9c4a3b6ca67753"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335002",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb401a-f6c0-4e45-a3eb-43ca950d210b",
|
|
|
|
|
"value": "8e401062e69b1b0907dc6e30a1ef6e6b9fc03dd0"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335002",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb401a-f5fc-4b7f-8a94-4616950d210b",
|
|
|
|
|
"value": "2b71bc9e931f39bebf8b27ad8a6c1341"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335002",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb401a-3a80-4574-afeb-462c950d210b",
|
|
|
|
|
"value": "21451a9ffe2d82092e0b9f64601867ef9710e0de6cc2ec40de80571c6e6f8ba6"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335003",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb401b-397c-4f6c-80f0-4a79950d210b",
|
|
|
|
|
"value": "96d230111d22f00762507dfde87cef89818741a5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335003",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb401b-1e8c-4b11-b155-4eec950d210b",
|
|
|
|
|
"value": "e020e15263f94716347b3755415e3db2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335003",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb401b-c6c8-4817-a332-4758950d210b",
|
|
|
|
|
"value": "1b8fc7508f0e1ccfb2fabb513054dfe517e29f42383d865e68f1b70fc96cc239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335003",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb401b-60b4-41f8-b3e6-4cd5950d210b",
|
|
|
|
|
"value": "99e4e7ed8dd2d54f6b68b7c0f03bb361ede438ac"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335003",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb401b-4bbc-4909-8413-4e86950d210b",
|
|
|
|
|
"value": "c1230aa332b3642ae0c6f64abf7823a9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335003",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb401b-033c-48e6-ab30-4a55950d210b",
|
|
|
|
|
"value": "3c031a468d230b44c1fe6bbc59d5445f78ce329885bc9f66687852fa7e61f7ed"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335003",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb401b-0e30-4162-a083-43b1950d210b",
|
|
|
|
|
"value": "d0bf7118bdea8868e794171e176c7e1b45da7cfd"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335004",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb401c-1240-4adb-a8db-4c22950d210b",
|
|
|
|
|
"value": "eedb2f28eec31de121432f3f9c3c5ba7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335004",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb401c-82e8-4e8d-bc5e-4539950d210b",
|
|
|
|
|
"value": "da400b87fba59ba933e1a77ce4ca27e6b42e27a3fd5551fbe8bf39853ed30bf4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335004",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "55bb401c-e454-44c4-bc73-45b8950d210b",
|
|
|
|
|
"value": "f67d3e3c5892f9f8ecfa4e75fd46942937f43cc9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335004",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "55bb401c-3eb8-48ca-bb83-4aec950d210b",
|
|
|
|
|
"value": "375e36fa33888f4d48a8d40809165277"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "Analysis suggests file is bad",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1438335004",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "55bb401c-4308-44ff-b9e6-4b44950d210b",
|
|
|
|
|
"value": "c3baa6e1a9ca0c79c35a53cfb5cc4bb76e45ed623841bd359d7241a8d82c5a54"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
