2023-04-21 13:25:09 +00:00
|
|
|
{
|
|
|
|
|
"Event": {
|
|
|
|
|
"analysis": "0",
|
|
|
|
|
"date": "2016-05-26",
|
|
|
|
|
"extends_uuid": "",
|
|
|
|
|
"info": "Malspam - Locky - 2016-05-26 (.docm)",
|
|
|
|
|
"publish_timestamp": "1464257041",
|
|
|
|
|
"published": true,
|
|
|
|
|
"threat_level_id": "3",
|
|
|
|
|
"timestamp": "1464256483",
|
|
|
|
|
"uuid": "5746bc01-151c-4f41-a957-4b5b950d210f",
|
|
|
|
|
"Orgc": {
|
|
|
|
|
"name": "CIRCL",
|
|
|
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
|
|
|
},
|
|
|
|
|
"Tag": [
|
|
|
|
|
{
|
|
|
|
|
"colour": "#ffffff",
|
2023-05-19 09:05:37 +00:00
|
|
|
"local": "0",
|
|
|
|
|
"name": "tlp:white",
|
|
|
|
|
"relationship_type": ""
|
2023-04-21 13:25:09 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#3b7500",
|
2023-05-19 09:05:37 +00:00
|
|
|
"local": "0",
|
|
|
|
|
"name": "circl:incident-classification=\"malware\"",
|
|
|
|
|
"relationship_type": ""
|
2023-04-21 13:25:09 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#2c4f00",
|
2023-05-19 09:05:37 +00:00
|
|
|
"local": "0",
|
|
|
|
|
"name": "malware_classification:malware-category=\"Ransomware\"",
|
|
|
|
|
"relationship_type": ""
|
2023-04-21 13:25:09 +00:00
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253477",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "5746bc25-9984-488b-8ccb-436a950d210f",
|
|
|
|
|
"value": "http://www.abbigliamentotorino.com/9uh87g756"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253478",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "5746bc26-ff74-49f2-a3e5-46d6950d210f",
|
|
|
|
|
"value": "www.abbigliamentotorino.com"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253478",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "5746bc26-cc2c-4bd9-86bc-4ac6950d210f",
|
|
|
|
|
"value": "flash.dialogicnet.it"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253478",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5746bc26-c810-49e7-8d06-4b59950d210f",
|
|
|
|
|
"value": "46.20.80.8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253479",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "5746bc27-f948-4e00-ac16-46db950d210f",
|
|
|
|
|
"value": "http://www.centroinfantilelmolino.com/9uh87g756"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253479",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "5746bc27-656c-4388-b66f-4754950d210f",
|
|
|
|
|
"value": "www.centroinfantilelmolino.com"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253480",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5746bc28-0ba0-42e8-a916-4a09950d210f",
|
|
|
|
|
"value": "217.76.156.98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253480",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "5746bc28-6d00-4756-ab71-47f4950d210f",
|
|
|
|
|
"value": "http://www.citytonight.es/9uh87g756"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253481",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "5746bc29-5198-46d7-a3cd-43ef950d210f",
|
|
|
|
|
"value": "www.citytonight.es"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253481",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "5746bc29-4d4c-4e0d-9685-45cb950d210f",
|
|
|
|
|
"value": "onlinux-es.setupdns.net"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253481",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5746bc29-8e48-4c32-a942-4e85950d210f",
|
|
|
|
|
"value": "81.88.48.79"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253482",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "5746bc2a-8d0c-45c1-9694-4d2f950d210f",
|
|
|
|
|
"value": "http://www.johnlodgearchitects.com/9uh87g756"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253482",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "5746bc2a-f3a8-4d6b-8cad-413f950d210f",
|
|
|
|
|
"value": "www.johnlodgearchitects.com"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253482",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5746bc2a-783c-4802-afa9-4fa8950d210f",
|
|
|
|
|
"value": "207.154.33.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253483",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "5746bc2b-5ba4-4d21-b965-4114950d210f",
|
|
|
|
|
"value": "http://www.pececitos.com/9uh87g756"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253483",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "5746bc2b-cd08-456b-825f-4919950d210f",
|
|
|
|
|
"value": "www.pececitos.com"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253483",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5746bc2b-4128-4e1d-8574-489e950d210f",
|
|
|
|
|
"value": "217.76.130.80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253484",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "5746bc2c-42b4-4605-a113-4038950d210f",
|
|
|
|
|
"value": "http://www.studioparcianello.com/9uh87g756"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253484",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "5746bc2c-78e8-4798-9a95-4049950d210f",
|
|
|
|
|
"value": "www.studioparcianello.com"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253485",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5746bc2d-6e78-4b34-b040-45c5950d210f",
|
|
|
|
|
"value": "109.168.95.40"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "downloaded file (PE)",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253560",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bc78-e5a8-4852-9991-499f950d210f",
|
|
|
|
|
"value": "9uh87g756|04df85f97e503320df8a34fbf3284350"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "downloaded file (PE)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253561",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bc79-a128-40e4-b025-4cf0950d210f",
|
|
|
|
|
"value": "9uh87g756|f53f034fcaaccc9986811e2f2b33f8cc105670b8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "downloaded file (PE)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253561",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bc79-36b4-473d-8ea8-498a950d210f",
|
|
|
|
|
"value": "9uh87g756|46e46963b3bfbe43fb37118f86e8e236b1c0317770e5fba46f94081f29c000c7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253731",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd23-b8dc-4000-af13-44d5950d210f",
|
|
|
|
|
"value": "Fax 49 22303820192.docm|e09e97d5377924cd268ab470fd38f272"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253732",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd24-9f98-4a0f-acc8-4052950d210f",
|
|
|
|
|
"value": "Fax 49 22303820192.docm|d44602025023f44f3c189300858e5485eb9da124"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253733",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd25-dd58-4373-bb1d-4a12950d210f",
|
|
|
|
|
"value": "Fax 49 22303820192.docm|88d0f2ae65940a03bb02f5a12751847fe73bba9dc0a5bdab124f6b44ad0e85c0"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253733",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd25-1cf8-4252-959f-4608950d210f",
|
|
|
|
|
"value": "Fax 49 22308992636.docm|3df0035b21ae7a8afd2031fb0b191fb9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253734",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd26-a498-495a-b156-4d29950d210f",
|
|
|
|
|
"value": "Fax 49 22308992636.docm|39719a5b817289a2fdeac46411e0171ce0eea26d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253735",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd27-79f0-4fb6-a45e-4cb0950d210f",
|
|
|
|
|
"value": "Fax 49 22308992636.docm|f52e4bf8f5a10f8f592b661013b6b07bb1d44d0a8bf3231d7c0f985fd9be27b1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253736",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd28-64a4-4d02-92db-4201950d210f",
|
|
|
|
|
"value": "Fax 49 22310610263.docm|198686c4121b38c7d6c85ac184fb929f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253736",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd28-bdf8-450c-aafd-497b950d210f",
|
|
|
|
|
"value": "Fax 49 22310610263.docm|4fb3c6c9ea5c5dd3ea7784cf27c066e42a4f7951"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253737",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd29-afec-4c35-9e9d-46ee950d210f",
|
|
|
|
|
"value": "Fax 49 22310610263.docm|9eea5ec0ea8a1ee731d6f315d9e9af7a34f38b647dde1f2ba5b6cebe40f9c1fd"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253738",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd2a-89f0-4268-b947-465a950d210f",
|
|
|
|
|
"value": "Fax 49 22312122043.docm|43e70421f9f44e9a1e3566d5a1f53cb9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253739",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd2b-2e98-46a4-aaee-44e0950d210f",
|
|
|
|
|
"value": "Fax 49 22312122043.docm|1c3d53d56d72bcd7b5625153f2ef0081d4990211"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253739",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd2b-3e54-4175-9311-4a20950d210f",
|
|
|
|
|
"value": "Fax 49 22312122043.docm|f9a154f86f86675109680c60bd54d0f2e2a3b9950da7cc0b75de8e8c6153d06e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253740",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd2c-c47c-4b29-9d94-49e2950d210f",
|
|
|
|
|
"value": "Fax 49 22320369919.docm|8316305c61aaa17d929479905f280b74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253741",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd2d-6604-4949-af9a-42c8950d210f",
|
|
|
|
|
"value": "Fax 49 22320369919.docm|acaa74367b405749755b19a1a42862950ba3fbbe"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253741",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd2d-9b28-4168-a734-403c950d210f",
|
|
|
|
|
"value": "Fax 49 22320369919.docm|66ee6ce70b76b5cb92cc7c59594f34bc98bd2ce050e16d7af9651dc4978addaf"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "UEsDBBQACQAIACFJukgLM+qgK70AAGHIAAAgABwAMWZhOWQwNThkMzJiMTExOGI3M2IxNWI2YmJmNWU1YTdVVAkAAy69RlcuvUZXdXgLAAEEIQAAAAQhAAAAfKT8I9FSizErd1CPfVxcsvtlDKbA1x8YpEOFdSbMur0ft1pCpqoXTt17HPHRQV5CxhCY34QdMrIqlGoYTp8bGtrzg/uvnCqs+mhbNa7ipuoObdGLuh+bXkYLgUJvSURrEq2p2P3w2bF64ku5/+XKaSVFXqFETgXCoVZLU9X3stUPVTsZ+SRqy6afSEaeDN4Goskp5HCm/Y68JLg4pp5obxe6J4hRf67TJIcVGayBg6ySujO9s87aatOZM2Z7elt/DAiEqvDizumL9QBAWVW/bglsHS1jVDhP6+TEZ9cBAP85KNXrjChjF7PnjiemuQnMpA1AnZha59xn2EG4HF+nRcNz7ifMT/pmLEJ8qNxUNHHl7pdXbt5D7eFPcbmMuNs7VYifEIsBNKuwSV5+GbGjVJM60tKS3gs+5wfx4FT/I6y86tYu7ER48BxCaMmbu5sKbIpADxkheEw+hcjE2uK8dj3lNRY3P8jxTIJvrmRaSm3nsQTntqH3LZdYw5MRCG3v7wkwizl3QOxFHrtKc1jmiXva3KRj0Fmdq3UKSzsm6iI3kJxTt1+CBcysE/B1c71rA+8SYvh/SyFyv9SObkMEtow2YOYWQ8a/exX3FCDcYjLMANQvOWDXOZgGlx35Zc1SP+/1L7TmpZcYSpVSdbVaZoNCSyjv2FvJPMXJT8BnEQJgvR9sO90cbnFawQX21R6HI1ZC/GPLOXdLiZmoVtm/CEiZQ2vfXTdS6hJoEtVskJAfZsZkiRIVyLwP2qluTeNY7mVG4rNIzI38zHDO7oy4aWIG2xK7fgqf8UUO34GJoJ/JkjKaSW8rPzt3YIkgwUJYl+L2LFhkn5WPatD1SR0naomUg1mlpW4YLQj7HibmNEJCkuAkHwnu0CMKDYQfWg5xexZVS+PTEjzCT+yGka73DZ3NXdciVM4vFscI3ZfVN6KqOlZLbEgZbubjl8ChN0W8HUwGllLy+UaRNAH+D09jSxYevlqJXM1M7qUos4trkpdBOfOwqdEfr0mXQTN0jZZ6cxUoiUWfxNmH+PtDddSgJBdW2a3OIsz6iwJD8H49TxJYcIEuSGxXZ5738oBGi8UbAgm2SPrXsGDkAboz5cxR8vUmWr3g76QkuC0mrbx4AyC2hcWyl7+1yj6Er+6dz527uvWeECJs9tjCvMWOnte6oa3qWKYrnnfh9uz+g+qwZ27+iBKuWs1wuuLPKUsPN4OHCqLzmg4iosRAzUxo9SpWS29vjY9ujODNya2dXuDbOH0I+1Vkfwwwdqw36QxfeKo02zugXxY94YISTLOnt3qL6XMkLTLFHNHFU1oUsHX05JVtP82GZ8yDLszqqsLFB0oeM1pPOWjhlY3/8K9VvOj7rTO4+3/NjwNGk8cuVbJR8CrHzuTTVeCgZlL29WA5E1gQFoC+9iZvgNj4i6vFkAFGoKX7CLToq24V32pWpERVW6T2cxacNALx0blb6AuobFc4snrYPMUaah4ct3xpjMp34G7Gu0oAskjJ5VeTZhlFYccXp6Kegmth8hkBAXIzY4YRrOr3T0C7l0j6MGw64UNZjGS5jf+rN4+VoncRMXVOitxoteeq5Lt5w2sBC6vIPUYXzNNek0hHSMRxTJDMMtMgpJlYOVhQ0S8EVGqkuBmRYFYVBLTQiO5JuyeIJh9dvxcNEbPh8qNZQwG1iLzrsGxvAc0oquarEBVgbPk5VP6Ocd1OFH4iyXm0nhDv+3QSMyBwQFJqRqYdz3a559fCW4s7t36ym4YLvPgmWI4hgoGysCOfkqDN4Jd8Pt47PT9B1uePrSb+xDPYAKcWfgkjIUqi+6zz4G27tzEt29epEJEtOePZbmglp/g2yYoVQVZvRQnITF3PSEDVye46ibHMpucwMv8KHcDgpiyqAjZdFU84n+2FEMNLAlc7qa0hH3IeLcxfbPRN2os1+QpVWbGNpJz6evUuoOpasJEqK039NTqAG0n1qLBKSkHRpf4eF9mfgHC2Avf1F14pyI41D0YwshGatdvHuMoFAV1JBT4JCy9nrqB0q4JIpZRUveTA5hYmxrIxCkkZiJ40qwzMY+eKEKcNUIouB4Wer9dpnYENzJAllpc1TrLfSc9IzFDlv/2iO21HyeJvv5HgBF8bKMgpLMyEZt+G0vSHVYNdjbNap9PXQ3b4bzQImdwsvnZCoElQk1BORlz7T1KOOLwlxmRhEEG2F0MscEgdSRKRa1lSQ35HfK6K3XanjoOWJ+W8UfGMlqKcpoeKkGaRVnWCRGe1vpz7vWjC5HrAm6h6YNCtGfQ9A0dEmA+N0INBEA+lO7fIs7d9RCU70xBYaVI6ieRHzgQqihVe2xnDUsMHwM0oJGfQLO9QLCpQeHac6Lv8OlVA3dUCYaB58NxwdbZBaUabcO0l7XB0PeBOHSVbwRXbyTx3RVW0zOHwZDXhPnoB1QGR3ppPw/ORtwHZ5NnAKaYvCalNEsMXS+XDs9bLro/xtLUuavvqCRicmPClSN2BMf/VOKA/kSUv5ERZH3V5E7/SwPB/XJy5YkNKa05XP0beHinywfOBRKT0IeEKKMpV/j0uPsizATD66oTd4EZqwO9+6HAT6SfcZv5SFnoMy5Sx6qz/2nkIN9hviYJtzpRUu7gzb6vq5J/M8D/qh8HspJMtDgnMjddTopsHiZjjcmdlAJoNy9XOVcxEjB0txJiMF92gLSPjX1DLMM41GYt23g2WjpJrmTYVv2os3BxCz7lNbhWlCX+4/15fJuQIUHH79FeYDwR1kbYlCWmbcD+qCw2LioujuaVDP27EZKbnfcaxoNjWp/ID3mDSOr6v1e4ARYgpvQhhAnoIaNCgpeZZ0m4e0rrdRvfaaXNEOZ+UJupjYuFt8RVHMhFfuWlzoXzJfEg0LCuuWLTbvsrVz4XtZaf/m2bEB4kjUAVWC2+0cjw2n22tgbV2WuZFe2LulGpHW/CP02WSRck1Ox2kpC8gGmWbJjSSqIW1HpHU22L2QuF0UWLURWl0xjm3eBRpHiFChEVqm+gecfk3OjY0Pn7eCXusIHFNxGw2wDIEf91RYGiAgDEen6oywqnN32OO0chhB4EL19ZQTB7i1TnwbMnwrAbpEeVCC6TH4zjY+yt+R+MNhYbUZMoMrEBFl3UztTj4ZxpmKWfWu1B9LDiFQvNeQqQG8/9ZsnioTqWi4z3707E5szHPUVPM1knr2oCOW62qrO8gRElKPBZtpqQDVJC5+lDVaMd1DVRiyj7w/qi3jbZvULeQtYNadCH6OvrrnPMlbBXd16UuZ3eIzP/KXCPcFzG7nZ73ar/GyFelPsezOUcWJQbsz7hrX48bwnpAL+mxDvIC22ADlFBdCijweSMwEHw6Gmj8CP4D7kE9hD2g5p0Maaodok5LO2YvS5Zk0tay67ZWnhMXlZypxJWrH03OuXoZrr3wERMBWwpX8I3TF9Kp6geVQ+MMonmBu5NDMzSElbnUuDH5Bky43k/vFPA1tjyJtAtn91qJl9p1SqGSL9FJLliR2Juk/+Efw4/xPosa5Gs91zAabseQXfojAucygq07Dz48+B5MJZFvn/opyMxMRbExsBqw3G0lmu+au2MVLbOn+ny3UMAJ+kYVOztnTlfP7kjm5PAbhDpEuK8DdxPjwS/95f0SCnu+A+ZP6Eo598n60X3UCGNPaMAxBHP+wvx4TEzQT9Qp4Qs+CMvFTxD+YFhJ2XkPTmj6IrSCFzxAgwi/bE8jGV9D/KX8xT/ljdTwbNYB0aKyPB9gdKAlgJcVXsMnNKW0hjIdvvVm+FVQvjnD3n5JpZtZHh16WCMpvMux4OvAN3h6seCBvrlM6S8oJmrI0SksLEBwLlFcCPtuBwY1zlr/z1RtzIhxvu/D5Xwni8CIK6jFoWyJn6vLsM1hP5MDWdhNOzIUkynDUL3c9iwlGlEDuCEWoI64jhwQlsAQPjiZMYVpklEkBeKcWRM2wd5A3r/JsR+FLHL2Aq
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253742",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd2e-c1bc-47d7-a470-4e80950d210f",
|
|
|
|
|
"value": "Fax 49 22321852423.docm|1fa9d058d32b1118b73b15b6bbf5e5a7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253743",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd2f-a490-45d8-b300-4e62950d210f",
|
|
|
|
|
"value": "Fax 49 22321852423.docm|80a801628eeb9a60fefec25c7a86672c9b61831f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253744",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd30-eea0-4650-b914-4c43950d210f",
|
|
|
|
|
"value": "Fax 49 22321852423.docm|2a50b837922cefe6cd9c5fc5f788a47791f11c5bd204192ce42dd7800155cf0f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253745",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd31-b0b0-45f0-bb59-4c5e950d210f",
|
|
|
|
|
"value": "Fax 49 22323957995.docm|17dfc9f3e2e9075f50b644036c3a0260"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253745",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd31-dcb0-44f2-a95d-43e6950d210f",
|
|
|
|
|
"value": "Fax 49 22323957995.docm|9a3ea0f1288d44e7b4399c9461964ae936202e00"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253746",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd32-2438-4ff4-a3f5-4e42950d210f",
|
|
|
|
|
"value": "Fax 49 22323957995.docm|3f40366ba8fd7ea59c28fd2f51cef4787db7bb23f0fa866c7f27e0e15aed233d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253747",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd33-5660-4048-a712-4be7950d210f",
|
|
|
|
|
"value": "Fax 49 22331449814.docm|7375cc25a030da74e0237535efd18e68"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253748",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd34-6edc-49b9-838e-4d7c950d210f",
|
|
|
|
|
"value": "Fax 49 22331449814.docm|6e11f4ab30df4f0e90dedb3d8fcfce12f574a69b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253748",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd34-1ed8-4700-a069-4c4e950d210f",
|
|
|
|
|
"value": "Fax 49 22331449814.docm|ca189c585409839a2e9053316ccba3e05df5390708baca861a0ce3f6ea79331c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "UEsDBBQACQAIACVJukhnLaeS5L0AAHHJAAAgABwAMjBiZWIwYTM1ZGY1NWFiYjljMDY4YmZmYmExNzU1YTRVVAkAAzW9Rlc1vUZXdXgLAAEEIQAAAAQhAAAAf8ck9cJe56Hhlh9NhFVmGEwHfc4bV7+j63SeM5iPl03orU+kBa6ZIySGTs+NIq4N+7wOVQAkDwNnk62vvR4CYnFo3iSPjLeC+w+wM9iND+Sj9lRltoBvu4nuS5paafYDC2en6bS7HzGVpXbe7k8LHVm3GSHApgpxnj9u8FMiE1ZITJ90ZhKo7ATy8Y2FdL5qg3WykoFRRZ+cPKHNy7lJCaYyTBYvzX9SNMXWQdzsZhuOBhKAl7aSTjTAd0hI7B8PQkzTwoTHkoz9EvKV6iQP5G/L2GxWktwDHvuwU6KFsGK9ecl3sXPU0j8nKaMRwguTkNrph58/oyGF413ZQTt1MSILCtyzuqk/CX04MCsSqOKfvLjdTdNyZQQ6jP2rlzaPfi0rYLkxhoCPXpKxP5hmV6JhJmkOqo2TUAueMHkyvFFT3NtBi68pFji8Q3l7BMU1pKanYoDFLAmi9YoxpG0aFkq8m5RR6KlxXvXohyDUDClj7BGP6i3Gx6JzV+4+uWKqxtfRrOW3kHT+GaSfiEDGDlr2X+yfr17d/IBQd5EBNhV8ubxTqTYWfG9RiW0rgsGkHsXap8ulk9ZhP2oAX1+L+P3/Tps4baAEH3PrBHTxwPZjf6qGF56IOc4+x6HDp+SpJEJg81gYsb3gG/eKjJ24OBti6m2fisFszhK6miP1rAbN9PunSEojibuq/W1lC0wwrAZ9RkjtrNuNu6bHlpFs5p3UvkGfCKF3mgzXkf9/x1cPPzjkCO1LJqqJ+H69eeTILi4ODjrBfEBtHtwtVFg9nJikl+3ujM4w2/x6rDRyAFoDlF5xKSBwPwupI2XlVwEJkMYc1Lyg+rd/TZO72s/MnBKBO8hg99q5jLo0pst+/wIx/LvXK7uHIHbrPtnKZ6Ud8s/bPQbNlQNOCL74KYbwkyUqFfJDLUfOOkt/UVtMdoVzw35btl6moYbt+kKeceAUw1Q+YzTnlNCLcMx8yhdwbeS9VqSk6XZChNytGmZCDdiXSiRcmOpo8F17CqXBjeAVUqYLtDI49bUVZFKwzarHBFLGNKU7DX0UyPzEYci7OkZoT8/ekOGEGsY0Nm0G3ZSmaUFOn6OSotnb7jBPFFE3VSLT110/RWKUURWFGyspWhi+es+vT0d7CWgCIlaEHoc8vu0opZczlEKKAbjwt3yt90dLNyfZUOsl6LZwYz7S41o85K5DC640oa6IxjHl/CjC1GWAD79yboAu2Pqi4YkH/4StpLV8KRWH56PseB5+6fp3zeYUeBsf+be+NlPKHqRdZ0gSv4bJXa+S46DF49JBng696u3X7OVYi1sZI1YlaC/KGI4nRaPWk7Z7L8WwNhTfZt4R/DnJKdiKVb4BwggYp3+72qXFdffVVFEwi9mQnKR397u0nlaOYFYu81SdRE6trXLEI4TSX5W5bJPO65yHNgM+YIUsquSBlgHiZLP3rr2BmlIh8JOf3Dq/YhvpyKRE+v21CZQHxiU+IannlW2hcmaR1T0QBIBHOR7weQqsodEBt+xmCoBiORRA+eTeOVZOHmpKRGdkjNRCe5Lw2q0SH9Qxh6PZK2ZxqOGorxRJD28Mdq2YB9kkFzacTzfuIHD5F+r7I6zQVWUVjlmf01jNGE527EIZgXQHp5MIaQ5xNnz3XrcOoLTgrtg+zDsTDlczT6J0rmy4Y2E075j33Av5TAihefyiSGMv5QfA2yfXoc+EYloj9N6/0cWEe0X4Uwon2bTvEYO086eFL5HUridDOBB2TqC3NQ73OAla3YWlYPdazeeJxzklsbF70/gwqK04Uy/s4SSZ2wV/j5rvKDaKtMVcdSmyNGS5j2Q1ULpd1cvFmYH5Bvl8fNG4i7iAeuRy5v0RSnAShHuvvojx5/S8AzA/XE+NLP0QLoGAlrouoHTQOLgEWR8WiYzeBeBVjNa9CoJ7OBfZ2tpteuhajsvx4tjcwjlASxwko0Vx/gnwOjbl3UcDlrfZutuyFIofY+XtmHdblD/iXX/Em+bFrapbm6Qs/JK446RljJGnDLzv4jC3Umz0D+Ghc56nbLBfIh9JNUgs+q6bgjtsp6B+O/RKB6ELj+aS5sgNLMnCyl3z76yXCiq9HVX/RvkLj3Hm1apeDMHLKPhlsFe2qxUa7qjRbF7FMRGkf8BBIgJYXBXwJ3YRQAA9+vH6vpzQ1mZcjI7nx+gLBkYkF3tuhNpKM1QeS9xaWlUZ4p7Mg0pkNGehYxzHEEvXhhnOf9Bi485pumyyV3jkdqrX/GhQpyMd6pIjqR2fmsBE4jQcxPb9370TXxMycDRQpaF9thambKB9OCfud44CwgZJ6M75jel/hoQ5bUE1vKxmKMEexIKDb2bi5J02cut9E3XQOe194vgm5C/4TGvyXUZKG14Z/XNXMca/sQo7m0ZtcC5lHA3SXHZc4yqipeyjSd3FL4r0BoByMc25AYXyxptroVSQlavcOSGac83H8495YBdlkac87W+hH7Q/8DVNlo/hwHrE2mXi1Nw4VcO3883No6EXtqVx/F3j3l0a0OhiP3z73ve2TTfX3jbkbhRK+4R8sUxXDV64Yy1h4dcL3P9OVTkleqlFtaZj2x7GhNVpEHWJsASoAhb8gkJxZQmzq2SXbooUnZU3w2Bxf2NvXmotcv11Z4qyAq52MtwPnLvYfgG6RYCMNEy37K29d8XO+RWaAdOc5LDcvEjqZgIqPE4CzVPBssacIvhsog8TpD8iDfOo0ZfrjsrS5ek7Kch5QpXke+UGYd/Lz22r4ZStueiBuTjiuwoX0OiDka9qpVgT+M0q27DOENtea5ZnN4mndJn+9GOdy/SrVwfARY9JnLxWipxbMK1gU8iCH7AEwFdrnZVNPGLIftqlIqSohhpGrHQMlXghnp1okMuy5ZkgbPTAufPOQvYvKNSPfFjILrWeccPhWSuLzmbWYlvS9SPCtZdlUJWK6pc5RFoIB7FBz9BTUvJBeChmXPAcZEPuxGxBZAwSlUjFWvBUChyOhx1E4O2zZledMjtFnmkY8H31re5HyxOxrymRCGj9XukhHqS/Twl5zQKt0ZradJk5kNtk4q9TMoi/eTeicKOl1SqOquhrXF6b9OciTTjLWjzPgAirgNQtoo1tYsljaBT3UanXehKQ3abUhHOkYnXDsoEMsDPtVwQkhOx6Od+3qRrLbS7aaihW4T+D7QU/5mqXZ+IwAGA6V3SGkStPZjA/+/lJ1/y1TxZN89bY7yxZvHNguY5Z+A5dspyPza9hO5OakWd8Ah5QE3N0zJjwF3+s6EbHEWO7B25PPb/HD7GliXzJGT3hlbqFBjMxVqc5hzBig+TmNXWGkpmn0nOrUmkcxxrSsxYSVt7bkqGXtGOFN9ODEvaHTRx1UvNrKAxBLW5Tz6y4PQ6R/RQPFvqVGGdAXqFQ/Wk1EM+gm5CvFdsm3ofmG09dbfK34fZYYcApx6FxVhrHZFERkSEioDb5Cc9kqLopec73EcS/XR2/VVBV5fZweTwkD7RV/V/lEaRiFu5mDR3FxwcepuuJ9ZEvTbnUu19bsXOVjWZfr7Lt6kwPF64VddwhM7aXkuCVxmbVtC4Psr6iwNzBhjIvhhMR59CGx5Ubtm0RGv2kd/55Vhz9JHl2krpjBiHnym9c3TueebO42u+jw4gJtprel9aeO4PhFVmeJ9FypMsa1pAlZFzWytFzIErVK4z49oomDc3K7fUiGlbXoimiFkpt66ikGapJ1ZcnzoLxr3o6t6+wKfj28xSgjmIOS+Lg/rjGE9tPiaI9GpjrURyS7vG64CYdQA7pHm1e8hfAccIihwqZC6RGCgV0KfssutFcwA5sPyAS0Uv3664IGDy0AKLAgMHkDqxKB7o98kGYsbjORCY3ddKxhmfjkYZYuBFG5ZH8Pvx38IDeCTOr5ZnkORFA0UKz75joJdcrywcHEi6GknY556gOtmWJSbg1D6emw9DRrHjTk1OZpQW+hqcRYk
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253749",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd35-03a4-4741-8b3d-4c59950d210f",
|
|
|
|
|
"value": "Fax 49 22341580203.docm|20beb0a35df55abb9c068bffba1755a4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253750",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd36-18a0-49df-abf8-48f7950d210f",
|
|
|
|
|
"value": "Fax 49 22341580203.docm|a9e25a6894e82774f2d3aa34844ebb762d0fd0c1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253751",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd37-3ae8-4cad-aa36-48aa950d210f",
|
|
|
|
|
"value": "Fax 49 22341580203.docm|50430bccfa8d963d6856a84577ea02a974ef3543389b3335b62db24daef47aa7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253751",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd37-81dc-4d1d-821a-4973950d210f",
|
|
|
|
|
"value": "Fax 49 22343569389.docm|17e52302b309a12cbb36976ace57ee81"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253752",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd38-8e94-4a7f-b7c5-4cae950d210f",
|
|
|
|
|
"value": "Fax 49 22343569389.docm|8281fcc93dbe21fc1c00a931444a9911556214d1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253753",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd39-68dc-48bd-bdb2-4a9b950d210f",
|
|
|
|
|
"value": "Fax 49 22343569389.docm|7290f127f26fb9146edc60e6c139c20375181096c2c4c6802c1833d9d37246ac"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253753",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd39-f84c-4bd8-b1fd-4343950d210f",
|
|
|
|
|
"value": "Fax 49 22345740812.docm|3e4f0c7558719d0988231907612016c4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253754",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd3a-5d28-4cc2-bbd2-43eb950d210f",
|
|
|
|
|
"value": "Fax 49 22345740812.docm|84e66128554532db486c46ae2e7fff4214686754"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253755",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd3b-3520-4679-827a-4c11950d210f",
|
|
|
|
|
"value": "Fax 49 22345740812.docm|908b8c492a68604dac564e5471a6fc77834f0773e98c5fe1765c244c103c3633"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "UEsDBBQACQAIAChJukgLRKEZfL0AAMLIAAAgABwAZWM3MmI2OGFmZWMwMjU0NzYyNjE0MjM3MGMwMTI5ZmZVVAkAAzy9Rlc8vUZXdXgLAAEEIQAAAAQhAAAA+rLOkx6A7Do+N4L1qDeUBJz0jobstDBqUJU3oZyxUKGs/LlwawBeH2lOHfz3rEb/LDH59+iInOV9fl04blrJwPrKWzztA7hKOV0L6Qa5rHtYRYw3ynyqqkOTy+l9GxMI7v49Pebpzk/NKgqITfEXYsjyeO/06BP8nDDwH8MDKYgMDcYmvp63cnQb16sAyrMCwusHHSBQKHYALbhGRN4j3byBXzJufE6aZ/NTnTE49GVckJ/LoRdap4SfO1s6OE35D1IFnRs75tlkRLF4EbQHkibAn0RVyMpWjvAnty+AfbbHozSf9df6BRM6w1JiOFdqTQmrepCb/s+xj499EkgV6zkYc6kAO8blOhL/XBUU6IFpfUdccrkS3YAnfV5m0XHIcy7Fwe1dGrDBRvq5iOspGaw4tEx1lKQYZKNanvZ8S/Es5nQyHI/t69vbKB1z8+1CA8TfNzaDUROaekTk0O2pHH0HoBGveC1NxX/c8bGxT5BZboB0w1djrC8BgQZvre5GQsvFriyD3WH49wiuJ80CtGJgmuu8RkopZgsWsJEBkjP8JySyulmJCruF1D3GdrrBRbrSEA2Y6tZWW6y5jNNNq/mKSZwm7/UMnolxyHNUK5RFoQo/0thFEpoGwPianRKJLNHRS59BfNRoAVkROhG4NHWXYqhtuqiUkmne0Fc5rYDk42yvqNa/nVamk/jiMmvPgWonKeTgsrmIaNp1DfiMVNWoO8mMtu1CqWaqqXUSlP+/sV6eJmphuFusAaeMyhDGfg3jwYXQx+NWnwzTvqSOihoWXzphxKTaa/02j1yDlNFbG1r4q7Ize7WgbI8YYCQS9x+xA04gsP7hoQYodpD0ZHe4r2+QstoBKAlxq2KSdKd7GOYUSnD7z450UE/R2xSmfONcs49oSNQpzK1LzHMBWdpe1LAAqkFe+cDI6RpOLE02Gye2clbYGmXO19EH4aGoDaYF1yqmX5cgf5PnfMpGACK7CGyR+oI72aOff/xWv4bER1DovCPlzj1u9DYGmSOVjSatzO7EmTj709V4mLQzt+/zmu2Igd8JWW04FDK7SLH3CgzJ71whX4o1SznyF3A4sX0ckDj6oNf61GkqSj888713yHLIXk1dEwGCrRVrUzCgic4pmwW8PD4RYOrl6yMGxwFV14FHYBIIr59zyx4AbQK41n5rQFASfxeengIfF/53A095Q4Dl/ra3Iq8JquhkJUHr6gPZv4VNG8k3yGVyYvgnS4A7hQGClmk+KkL0v3jn8+3HueWAeeaohkAQO5tVYXB5qqwvMPvIcK9pI69JR5gVHNEdEHZSjOWG/bnItcTQFGasFu7pROuS2IScPczXzOMw1i+DocppKUERb98rbnf/Bu1aA4mjJveZE1HZ82bWLQOTqrXs1D0oqzuHTfyygkjPklX1ni7m0rmFaLjyxzUntDy9MX4BWHeG+64PNwh6i8u5muZkHjxGazR6Bysv5NUuCGoS7IVKu61cFRQJ0rSi/GO722Eg1zt7oPEESkpGhCr342TkjgTYfLaHigFeLV4AYEaSkGPPpe39XT1N/fOy/5yw6ZkepyKdHZdNz/ygIOYqnwdPZhN9zwFF8CB3H2tZBIyx2C0UZe4IBTFGmftrKHpEi2liynY5K2jEwEWTkabc5p+N1Nyf/951rkKjF0jyVkKDhk3iHGEli7UYyXAVRYbwTTa3XiIgGtE5QA8T+G5GtwtNwTFgVRXFmDCqRCtkOBI3PrMY4euonNnJtp2h4huHPmuztx9Zp/4CZtVgwO8acKc9nClWbEsocPJATFRR4XyT+gsxOMEd+lYu5kNLWwbnW6kIoEXYbztcBTnWZxqMqrX5t5lnB6Qqc3bncCZvNTgmT6mJGfL4+/rw/XO3z+JvDUigD7wUm9aC4isL+4mOTPXQZkOFo6naWLOHCsjPday/NqUhgZc9KQ7xULVAu4edeTWstQfPzjNi+ORKoanYwaI7pzuVLZXDlb4P4RFNiIb2r9OXQuBqtU0EUed8peCVMYQoyfcZpEUJEyCLsesr50oIKbOlnnahD2cHlTDi0Jl9RALoj+ptZIfcDeB24B1cTdFy3Vlsh8Aojn8HfrIhbRpMmd8mDcWe/vGfzD1JFKc7/tIION30udTVkHcBSUvzN8OPrDjUl/w7bcdbWxOa4twFC++eBeh3NORV6m0pVjWfhPmzVs+jmpch3xXGSLlDY2U1oI7Uzl6hKfD7BYe9hWEeRaNDr20cIMgYgkGtXVnIupb/+POK1TE0FN4hWtd7ERPIdfNdDmh9wd5FhnFCckgZgF3KIvq++V1kv9Bq64LWoxMS4Wk1CkI9S2+tV3MPg1F8aaQE21qidUkTIqcsdp+h8TQ7998esGpqDo3bRKxzGrPUe1fKqv37g577pQo0KtiB8e+CJDPIlj1B5lzf7KoYtP51ecBkXMhA4cRnzIaRi/Bm8ZCh82uu21l4SFjUqwKfMyI/ktji+D//Ktj2nfAqwVAPnLakLYD0InT696ScvIR/QZAMi9agg3ioDIrZfeP/V3vEf2XQQKo/wmoRNEa5dkYphOYShZOukqGOqVAXciNiQDi44jPoNPHiWPu0EEYqAlfrP/iF9QdGCiyQbqP19FIxsLcyTTFz7n5QfLEz9tjQYphCNfwJdlQXoIZXo2NQCLf/nzvBRbjLxq18qtVo3zJQVPDYBWIuYqSinjXgRiOaZGWfnHXi0rjtuCsZQPUbLPJYOujJEpSiwES/0JKNp+tMtFvaSZAqHmJM2/vSKCnhz3amsKCmeGMiWZF4aHmkxbGSHIdKbl4OOzxvxww6ZzBbM+tBxgE86ruxSjq3KryQzbwNg/dIMIwecJoL87WKjGBsgska20DNPTulqTAiCgOUAD+yIN36jjzW4SuiFo0aUl0bKqFkaIYpiChUPZPCwm8v/68bNYifAkWi6Bq8kYBf9hgk8MljeTNtgzJzWV2I7ed7dV1G8ULIp3mG9K9w8//hqhARUS7E+n4F8WcagVZbzj501im4HnunhnME3Jk7obFpapy0B+BQSW34OfpXBUU859LjfpEXsdBJguOOQiTeUM9lFJLD32ebk/zytwaRo9/lq2HofYmuHmOfF9IZdYeHC3tsGshJkVFGV6dVXoixiRtmpf0mMj8HgwyOpEOi1rVbFGdhvyR1Y+ZT6PUcPnm6AWdCXK8Qhqd5mKaE+n6ludMIntYgKpvIsNy2AQ6owXChgCYi/oMdHw8BgtMXyLeuSnEFE6S1Djdr+tbzA73g3K7fuHPaMbAIUxqkbNxC7dYLv5Jivg3oYH7eNjcaWLAOT+sWJ5vneVYzjtA+abv6vGxpBIBN0+/8NDfm4xMD+7VmF3olCFftFgL1QdEbgjH1zfeH2CYuc/MUy3bXYJjtdUJmrad9oAVc+Fyyp5O43La9XfhR8cSKPjIlTP3M+zBDTK2Dlh77h8lgQ1ub5PpclByEdQICEBqzYNY3X38FZmaqwH7wetJGtOSK2lPq57krywmJwRDXeBw2n34vmPR7DkVdJ2rzQBQ4xeVtSmoZTlj2cKyUtf5yV7MgcmHNnSIm+R9hThexhFcu08NwKxbDpA8qoZ/8GW0vdwSnKcWcLxrYL2s/vpBr6IQPvCaK00oR4+oPbti9tIvE4yOZpEf9su72Gc9EHEuWchlJUa9tweSylf8UeqGFCZJUkM1SUUJTChvCCpSi1rbQfOaICeg+d1+CdcTgiFkG27ow+ISXHUcaI4iR7qr9ZHOZux90GeoSinqtCKxHXAx/iRCYxUGpe2rleGq/WCw5hm1mDPwVBTbMAfGZmdseD93Bs23jXGOCkNG5DBjEgNhqfcBUBCKmDWwI9tve9VfA4NdgDZmb9jhqs3F6NQzfXEvJSrZvo04uBseHb8DrJoj4q99x1xTk8yKIMWS3YX8ZmeO0BDTqe+xt3OQwj2so3eJIePkXr4J3awJkY5ix0P4Q1+vt19
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253756",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd3c-e844-4bb2-b4c5-4ab9950d210f",
|
|
|
|
|
"value": "Fax 49 22346477813.docm|ec72b68afec02547626142370c0129ff"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253756",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd3c-3738-43aa-9bdb-4527950d210f",
|
|
|
|
|
"value": "Fax 49 22346477813.docm|05234bc81bf76e7a2eddff1acaf23135e74ac37b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253757",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd3d-89fc-47ef-b27b-4598950d210f",
|
|
|
|
|
"value": "Fax 49 22346477813.docm|b30a8e1b0141959f6261ce95a2b73fc309e40b927d27eb13605902ce9b431e55"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253758",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd3e-918c-4cf1-9d7f-4f36950d210f",
|
|
|
|
|
"value": "Fax 49 22347233501.docm|d3affe309d5e9a11f3bb8ff8cf0393ca"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253759",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd3f-9304-4cdc-a71a-4b0a950d210f",
|
|
|
|
|
"value": "Fax 49 22347233501.docm|9c9d049c7a35570ba948755f9b40e5bdbd932e6b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253760",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd40-0da8-4094-8787-4045950d210f",
|
|
|
|
|
"value": "Fax 49 22347233501.docm|f6fd890e9d573af18f43c45cc6ae08e65f399f2291c12582605181872c5d7cc4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253760",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd40-ba10-43ee-a9e2-4f65950d210f",
|
|
|
|
|
"value": "Fax 49 22372988096.docm|1087a3a9d6790a29030d96dd17170c37"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253761",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd41-bc58-48e3-b9f5-41e2950d210f",
|
|
|
|
|
"value": "Fax 49 22372988096.docm|9cb93e7ca1f70399c88adba3451a034528484ce5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253762",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd42-0668-4290-bf73-4cb1950d210f",
|
|
|
|
|
"value": "Fax 49 22372988096.docm|6c74af8d90b2b2f5e594d8f33ad5c1bdb33162939baff8754e4f5a9e4bca1455"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253763",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd43-380c-4d4f-b3f9-4c42950d210f",
|
|
|
|
|
"value": "Fax 49 22374128486.docm|34cde89ab094cca6a5ec92a88a6e7c9e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253763",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd43-2854-4ed3-9d45-43c2950d210f",
|
|
|
|
|
"value": "Fax 49 22374128486.docm|7ee06fa3736a7ea04e645a4e44e72aea694e984b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253764",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd44-513c-4eac-bd28-4513950d210f",
|
|
|
|
|
"value": "Fax 49 22374128486.docm|deee8c98e7266b347820fad468433fa8be6471bb617d6c02f7a9578619188683"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253765",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5746bd45-16ac-4354-abeb-484e950d210f",
|
|
|
|
|
"value": "Fax 49 22392535780.docm|f5f5ceb2e56ebe379d9a8cf9e001d28c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253765",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5746bd45-7f98-4382-ba2b-41c4950d210f",
|
|
|
|
|
"value": "Fax 49 22392535780.docm|7ffc1462cc00948c5f3bb8124927423e553a9b3a"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464253766",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5746bd46-63d0-4ac1-8f8a-4872950d210f",
|
|
|
|
|
"value": "Fax 49 22392535780.docm|03ea8ddb69c6012398aab5e5f71684b00175fd920e54706ac00e4ff5f9e4d684"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "downloaded file (PE) - Xchecked via VT: 46e46963b3bfbe43fb37118f86e8e236b1c0317770e5fba46f94081f29c000c7",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256483",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e3-07f4-4a9e-b458-4d5902de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/46e46963b3bfbe43fb37118f86e8e236b1c0317770e5fba46f94081f29c000c7/analysis/1464252824/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 88d0f2ae65940a03bb02f5a12751847fe73bba9dc0a5bdab124f6b44ad0e85c0",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256484",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e4-9e20-46df-b43c-484202de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/88d0f2ae65940a03bb02f5a12751847fe73bba9dc0a5bdab124f6b44ad0e85c0/analysis/1464254059/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: f52e4bf8f5a10f8f592b661013b6b07bb1d44d0a8bf3231d7c0f985fd9be27b1",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256484",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e4-26a0-4b1d-a84b-4a8602de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/f52e4bf8f5a10f8f592b661013b6b07bb1d44d0a8bf3231d7c0f985fd9be27b1/analysis/1464255560/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 9eea5ec0ea8a1ee731d6f315d9e9af7a34f38b647dde1f2ba5b6cebe40f9c1fd",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256485",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e5-2a84-46f0-a081-444f02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/9eea5ec0ea8a1ee731d6f315d9e9af7a34f38b647dde1f2ba5b6cebe40f9c1fd/analysis/1464254843/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: f9a154f86f86675109680c60bd54d0f2e2a3b9950da7cc0b75de8e8c6153d06e",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256485",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e5-b010-4ec3-8296-4b3002de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/f9a154f86f86675109680c60bd54d0f2e2a3b9950da7cc0b75de8e8c6153d06e/analysis/1464254028/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 66ee6ce70b76b5cb92cc7c59594f34bc98bd2ce050e16d7af9651dc4978addaf",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256485",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e5-d3f0-4f93-9ed2-440f02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/66ee6ce70b76b5cb92cc7c59594f34bc98bd2ce050e16d7af9651dc4978addaf/analysis/1464254068/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 2a50b837922cefe6cd9c5fc5f788a47791f11c5bd204192ce42dd7800155cf0f",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256486",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e6-9e48-4435-97bb-425c02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/2a50b837922cefe6cd9c5fc5f788a47791f11c5bd204192ce42dd7800155cf0f/analysis/1464254037/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 3f40366ba8fd7ea59c28fd2f51cef4787db7bb23f0fa866c7f27e0e15aed233d",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256486",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e6-a17c-4704-b489-427f02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/3f40366ba8fd7ea59c28fd2f51cef4787db7bb23f0fa866c7f27e0e15aed233d/analysis/1464254094/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: ca189c585409839a2e9053316ccba3e05df5390708baca861a0ce3f6ea79331c",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256486",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e6-4ef8-4f56-a343-429702de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/ca189c585409839a2e9053316ccba3e05df5390708baca861a0ce3f6ea79331c/analysis/1464255110/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 50430bccfa8d963d6856a84577ea02a974ef3543389b3335b62db24daef47aa7",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256487",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e7-e4e8-4690-bfe6-408e02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/50430bccfa8d963d6856a84577ea02a974ef3543389b3335b62db24daef47aa7/analysis/1464255051/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 7290f127f26fb9146edc60e6c139c20375181096c2c4c6802c1833d9d37246ac",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256487",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e7-2b2c-4d9d-a8b0-458d02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/7290f127f26fb9146edc60e6c139c20375181096c2c4c6802c1833d9d37246ac/analysis/1464254035/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 908b8c492a68604dac564e5471a6fc77834f0773e98c5fe1765c244c103c3633",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256487",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e7-0c50-46d1-9e3f-496c02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/908b8c492a68604dac564e5471a6fc77834f0773e98c5fe1765c244c103c3633/analysis/1464254085/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: b30a8e1b0141959f6261ce95a2b73fc309e40b927d27eb13605902ce9b431e55",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256488",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e8-1934-4ffe-9445-4e2c02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/b30a8e1b0141959f6261ce95a2b73fc309e40b927d27eb13605902ce9b431e55/analysis/1464254981/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: f6fd890e9d573af18f43c45cc6ae08e65f399f2291c12582605181872c5d7cc4",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256488",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e8-bfb4-4aed-9804-459a02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/f6fd890e9d573af18f43c45cc6ae08e65f399f2291c12582605181872c5d7cc4/analysis/1464254051/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 6c74af8d90b2b2f5e594d8f33ad5c1bdb33162939baff8754e4f5a9e4bca1455",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256488",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e8-2a54-4ca8-8fbc-477802de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/6c74af8d90b2b2f5e594d8f33ad5c1bdb33162939baff8754e4f5a9e4bca1455/analysis/1464255743/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: deee8c98e7266b347820fad468433fa8be6471bb617d6c02f7a9578619188683",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256489",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e9-01e8-4532-ad10-455702de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/deee8c98e7266b347820fad468433fa8be6471bb617d6c02f7a9578619188683/analysis/1464254052/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 03ea8ddb69c6012398aab5e5f71684b00175fd920e54706ac00e4ff5f9e4d684",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464256489",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5746c7e9-2d88-4f0c-933c-4b7102de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/03ea8ddb69c6012398aab5e5f71684b00175fd920e54706ac00e4ff5f9e4d684/analysis/1464255512/"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
