2023-04-21 13:25:09 +00:00
|
|
|
{
|
|
|
|
|
"Event": {
|
|
|
|
|
"analysis": "0",
|
|
|
|
|
"date": "2016-05-27",
|
|
|
|
|
"extends_uuid": "",
|
|
|
|
|
"info": "Malspam - 2016-05-27 - Locky - .docm",
|
|
|
|
|
"publish_timestamp": "1464597695",
|
|
|
|
|
"published": true,
|
|
|
|
|
"threat_level_id": "3",
|
|
|
|
|
"timestamp": "1464597609",
|
|
|
|
|
"uuid": "57482a58-58b0-42f8-bf2b-46b0950d210f",
|
|
|
|
|
"Orgc": {
|
|
|
|
|
"name": "CIRCL",
|
|
|
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
|
|
|
},
|
|
|
|
|
"Tag": [
|
|
|
|
|
{
|
|
|
|
|
"colour": "#ffffff",
|
2023-05-19 09:05:37 +00:00
|
|
|
"local": "0",
|
|
|
|
|
"name": "tlp:white",
|
|
|
|
|
"relationship_type": ""
|
2023-04-21 13:25:09 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#3b7500",
|
2023-05-19 09:05:37 +00:00
|
|
|
"local": "0",
|
|
|
|
|
"name": "circl:incident-classification=\"malware\"",
|
|
|
|
|
"relationship_type": ""
|
2023-04-21 13:25:09 +00:00
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347270",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a86-c7d8-41ee-834c-47f7950d210f",
|
|
|
|
|
"value": "http://acnek.com/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347271",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "domain",
|
|
|
|
|
"uuid": "57482a87-5964-4d8b-81ad-4e28950d210f",
|
|
|
|
|
"value": "acnek.com"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347271",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a87-0920-4a24-922b-422e950d210f",
|
|
|
|
|
"value": "160.153.90.134"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347272",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a88-c204-4999-b0cb-410a950d210f",
|
|
|
|
|
"value": "http://birlesimsucuklari.com/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347272",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "domain",
|
|
|
|
|
"uuid": "57482a88-4f5c-4f1a-ad24-48f5950d210f",
|
|
|
|
|
"value": "birlesimsucuklari.com"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347272",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a88-4b58-48e4-8d3d-43c7950d210f",
|
|
|
|
|
"value": "31.192.209.44"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347273",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a89-9264-4d25-b7d0-414a950d210f",
|
|
|
|
|
"value": "http://bridgeplacements.com/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347273",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "domain",
|
|
|
|
|
"uuid": "57482a89-afc4-4de3-aac6-44a2950d210f",
|
|
|
|
|
"value": "bridgeplacements.com"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347274",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a8a-98d0-46b5-9361-4559950d210f",
|
|
|
|
|
"value": "212.1.211.149"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347274",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a8a-d870-4a92-b4ba-4978950d210f",
|
|
|
|
|
"value": "http://cobrebactericida.org/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347274",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "domain",
|
|
|
|
|
"uuid": "57482a8a-d2a0-4922-b0bb-42b4950d210f",
|
|
|
|
|
"value": "cobrebactericida.org"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347275",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a8b-e26c-4876-b9af-4b43950d210f",
|
|
|
|
|
"value": "190.107.177.245"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347275",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a8b-868c-4788-b4db-4f2a950d210f",
|
|
|
|
|
"value": "http://ecpi.ro/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347276",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "domain",
|
|
|
|
|
"uuid": "57482a8c-a5b4-4acf-8e43-4da4950d210f",
|
|
|
|
|
"value": "ecpi.ro"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347276",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a8c-ef10-4f67-90a2-44f7950d210f",
|
|
|
|
|
"value": "89.42.223.64"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347277",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a8d-e930-44f0-897b-4708950d210f",
|
|
|
|
|
"value": "http://egadget.ru/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347277",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "domain",
|
|
|
|
|
"uuid": "57482a8d-fde8-450c-9e3a-47e4950d210f",
|
|
|
|
|
"value": "egadget.ru"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347277",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a8d-1100-4100-aed7-433a950d210f",
|
|
|
|
|
"value": "78.46.69.239"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347278",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a8e-6318-4c36-859a-4eaa950d210f",
|
|
|
|
|
"value": "http://iwebmediasavvy.com/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347278",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "domain",
|
|
|
|
|
"uuid": "57482a8e-37f4-4efe-a226-408e950d210f",
|
|
|
|
|
"value": "iwebmediasavvy.com"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347279",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a8f-e58c-4152-9908-4197950d210f",
|
|
|
|
|
"value": "63.77.93.12"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347279",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a8f-23d4-4331-abe7-40e8950d210f",
|
|
|
|
|
"value": "http://mtldesigns.ca/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347280",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "domain",
|
|
|
|
|
"uuid": "57482a90-8c70-4651-b9af-4c70950d210f",
|
|
|
|
|
"value": "mtldesigns.ca"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347280",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a90-49b0-47e1-9a5e-4cee950d210f",
|
|
|
|
|
"value": "23.229.153.132"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347280",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a90-8448-4209-9bda-4307950d210f",
|
|
|
|
|
"value": "http://projectodetalhe.pt/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347281",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "domain",
|
|
|
|
|
"uuid": "57482a91-e9ac-47b5-b012-4566950d210f",
|
|
|
|
|
"value": "projectodetalhe.pt"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347281",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a91-454c-41b8-8105-4f64950d210f",
|
|
|
|
|
"value": "50.87.30.230"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347281",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a91-b4cc-459a-acc1-4d4e950d210f",
|
|
|
|
|
"value": "http://wondervalley.in/98yh87nb6v"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347282",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "domain",
|
|
|
|
|
"uuid": "57482a92-a7d0-4347-bc53-4da3950d210f",
|
|
|
|
|
"value": "wondervalley.in"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347282",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a92-0a40-45ff-9610-4590950d210f",
|
|
|
|
|
"value": "166.62.10.183"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347282",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a92-22b0-4984-a8b3-4722950d210f",
|
|
|
|
|
"value": "http://www.asysa.cl/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347283",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "57482a93-26ac-40b9-906c-4ef8950d210f",
|
|
|
|
|
"value": "www.asysa.cl"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347283",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "domain",
|
|
|
|
|
"uuid": "57482a93-8178-473e-bc35-4790950d210f",
|
|
|
|
|
"value": "asysa.cl"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347284",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a94-e370-494e-989a-42a6950d210f",
|
|
|
|
|
"value": "186.67.227.204"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347284",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a94-2eac-47fe-8a88-4d91950d210f",
|
|
|
|
|
"value": "http://www.ding-a-ling-tel.com/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347284",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "57482a94-20f4-4767-bc21-4be5950d210f",
|
|
|
|
|
"value": "www.ding-a-ling-tel.com"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347285",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a95-7e18-483b-ae97-4fd1950d210f",
|
|
|
|
|
"value": "216.55.149.9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347285",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a95-9488-4c30-9511-4e3c950d210f",
|
|
|
|
|
"value": "http://www.geladas.com.br/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347285",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "57482a95-11c0-4e64-97b3-4eff950d210f",
|
|
|
|
|
"value": "www.geladas.com.br"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347286",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "57482a96-d5fc-4c46-9344-4326950d210f",
|
|
|
|
|
"value": "ns.geladas.com.br"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347286",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a96-53a0-45e9-9da4-4c78950d210f",
|
|
|
|
|
"value": "177.54.96.2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347286",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a96-b13c-471a-a6cc-4e2b950d210f",
|
|
|
|
|
"value": "http://www.noghrehpol.ir/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347287",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "57482a97-f18c-4ee3-bfd9-4b06950d210f",
|
|
|
|
|
"value": "www.noghrehpol.ir"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347287",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "domain",
|
|
|
|
|
"uuid": "57482a97-c3b0-4d56-a101-46e8950d210f",
|
|
|
|
|
"value": "noghrehpol.ir"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347287",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a97-10c8-4566-95bd-4052950d210f",
|
|
|
|
|
"value": "51.255.99.133"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347288",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "57482a98-5a48-4e7f-83f3-432f950d210f",
|
|
|
|
|
"value": "http://www.samrhamburg.com/98yh87nb6v4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347288",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "57482a98-f0e4-4aa9-90ba-400d950d210f",
|
|
|
|
|
"value": "www.samrhamburg.com"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "download location",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464347288",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "57482a98-602c-4d26-bd1c-489e950d210f",
|
|
|
|
|
"value": "149.115.19.219"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "PE (Locky)",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352660",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483f94-b720-48cf-9050-49f2950d210f",
|
|
|
|
|
"value": "98yh87nb6v4|7e208c0acf16ffec1989ae78f473d7a7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "PE (Locky)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352661",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483f95-1dcc-4c21-83ad-453e950d210f",
|
|
|
|
|
"value": "98yh87nb6v4|f3e8f7d07edad8dd851e1a05043ce3ae4c93b880"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "PE (Locky)",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352662",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483f96-5534-4554-b009-49da950d210f",
|
|
|
|
|
"value": "98yh87nb6v4|92fdae972ec4bbd0cd01ff139fc5c4f08f917ab1c052ea8aa4f1079580529821"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352720",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483fd0-0404-4620-8b51-469f950d210f",
|
|
|
|
|
"value": "INV021-078222.docm|6ce4876510013863118e31803ffb6d16"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352721",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483fd1-94fc-4373-9314-468b950d210f",
|
|
|
|
|
"value": "INV021-078222.docm|01b851267000db50caa3d0d9b526de6b5f4febf9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352722",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483fd2-1cb4-4a8e-a7eb-4dd4950d210f",
|
|
|
|
|
"value": "INV021-078222.docm|6addc33144833b74ef5f309e834275bc0d2550da1cbfc4e9a07b26216ffad3ea"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352723",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483fd3-0544-4b67-a371-4eb7950d210f",
|
|
|
|
|
"value": "INV0023-098083.docm|5c336800ed093547581d6993e88645c2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352724",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483fd4-f7d0-419d-85ef-400c950d210f",
|
|
|
|
|
"value": "INV0023-098083.docm|d40c3fdfe397ffb7947b672616d3d4140893e5bf"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352724",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483fd4-a014-4018-bacf-43e1950d210f",
|
|
|
|
|
"value": "INV0023-098083.docm|4b031c7a37702850862c0359f5dff7b9a8ae216f5c1f0ad0c96ed51b0c4f5d42"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352725",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483fd5-7cf8-4bf9-874e-49a7950d210f",
|
|
|
|
|
"value": "INV050-306305.docm|08ac4f56c5f4f4130d757211c5cf47c8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352726",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483fd6-5e14-43db-9220-436e950d210f",
|
|
|
|
|
"value": "INV050-306305.docm|dbe6a4ae9b24ad829ee6e3af17887cda27b55b80"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352727",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483fd7-8c28-4cb5-9702-4b3a950d210f",
|
|
|
|
|
"value": "INV050-306305.docm|8ae0778ed74af89797cb0efdc7e82603f027c695f465d56ee2221d21eb2d2cdc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352727",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483fd7-3774-4070-a5f8-47b8950d210f",
|
|
|
|
|
"value": "INV077-441751.docm|7c506d788b09be3197e41e1ea9a75084"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352728",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483fd8-0a1c-4c47-8208-41a8950d210f",
|
|
|
|
|
"value": "INV077-441751.docm|024f08a75345b93bfdc59870aa5e6bb1fd930458"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352729",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483fd9-f5ac-4080-9c4d-4477950d210f",
|
|
|
|
|
"value": "INV077-441751.docm|a3e89cad94f87155e74bd24fbaa34768c616b0dca962bbff4ec1017b382d16f7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352730",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483fda-3620-40d5-96b7-447d950d210f",
|
|
|
|
|
"value": "INV163-760470.docm|4e04fa818faffba940a1fc834af404c5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352731",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483fdb-b6b0-4cd6-80c9-4806950d210f",
|
|
|
|
|
"value": "INV163-760470.docm|8d24d24b6c85c5f68c51ed49dc4a665f76e028ee"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352732",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483fdc-1a78-4588-99af-49c5950d210f",
|
|
|
|
|
"value": "INV163-760470.docm|c88de4221d048a60098d081267dd84fd4d6dd14478f46fbbd64eedc37ab0e5e5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352732",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483fdc-04e4-4edb-9da9-412a950d210f",
|
|
|
|
|
"value": "INV0191-163818.docm|c023f97bc950fd7b20feba0da0a6b3bb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352733",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483fdd-7a3c-4413-9a4f-4030950d210f",
|
|
|
|
|
"value": "INV0191-163818.docm|5b922af95955e59a5981632f032b14edbe1f02d9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352734",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483fde-b74c-4586-80e7-4274950d210f",
|
|
|
|
|
"value": "INV0191-163818.docm|48e75a7c92fc81db1e6c6cde89f41f838990574e216aef388486aa6aef0a6f2e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352735",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483fdf-4bb8-4b8b-ab23-4c6f950d210f",
|
|
|
|
|
"value": "INV202-745896.docm|975a8a5a854392a953dfbc93e87b3fc1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352736",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483fe0-ff4c-4345-aa75-41d6950d210f",
|
|
|
|
|
"value": "INV202-745896.docm|1320e398e25be5919b480f32192eeaa07f8ab00f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352737",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483fe1-a28c-45e8-beda-4f49950d210f",
|
|
|
|
|
"value": "INV202-745896.docm|72d8a9ea189e1d2a5bd615c189d284e80132c04db16a82db84b90219770989fb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352738",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483fe2-3918-4aec-bc7c-4ed3950d210f",
|
|
|
|
|
"value": "INV0435-166722.docm|5321bebe42e1659ff864d317bb759f52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352738",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483fe2-3408-4f6e-95cf-46a1950d210f",
|
|
|
|
|
"value": "INV0435-166722.docm|de208ae49f4e4fb13e48a31c9cd45fece23e7e51"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352739",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483fe3-ba14-41e1-ab7b-42ab950d210f",
|
|
|
|
|
"value": "INV0435-166722.docm|e4bd7e8d174f4d4831e8e9356f13c62b8c78c7dfba7a7442de01792471d05585"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352740",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483fe4-8838-4a47-8f41-4b0d950d210f",
|
|
|
|
|
"value": "INV0504-964967.docm|79d9a30e8fec75adc64158c4f5ede92e"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352741",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483fe5-3678-48a6-a710-4b81950d210f",
|
|
|
|
|
"value": "INV0504-964967.docm|5437de18f1aa509823058fd55eb9e6c9ff9add51"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352742",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483fe6-0220-46c5-83e3-48fa950d210f",
|
|
|
|
|
"value": "INV0504-964967.docm|0372323bd479c6ff357e44eb608dc5cb3fed036b8e6691ae714fd672c09f3a71"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352743",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483fe7-15ec-4d39-8893-42af950d210f",
|
|
|
|
|
"value": "INV511-122608.docm|be0554f53af87b0fb6ad84a2125bd6ee"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352743",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483fe7-820c-4b64-9581-446e950d210f",
|
|
|
|
|
"value": "INV511-122608.docm|0244c461a7591baca7d00d445a57e992ede9d73d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352744",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483fe8-c3a4-4924-ae3f-483d950d210f",
|
|
|
|
|
"value": "INV511-122608.docm|558c27e16cd87573ae6ff44a7e8292a996bca249fa280ec2a424f00c0a783f5f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "UEsDBBQACQAIAONku0gcBynre7QAANm/AAAgABwAZWFjODRhN2QwNjI2NzA5ZWIwN2VhNmVjMDU5Y2UwYmVVVAkAA+k/SFfpP0hXdXgLAAEEIQAAAAQhAAAAw/DFdm7bsLIyCHK3YeUQ5gl70yjuGpI6syhMnpJx2fl9xrhxf/akAwGsBGKwXWM+TLw7OHwnNWqD+0ije89Sm31OC0q+TuT3zWaeGjvFI5Nz+0xWIiW2bfoL9sza99azZXrbX14k85R2qUK4VvoOl75j9ugfoUirRtoU6l8oeLaFSDhTiXmhtQYfjsNfJ4WQvCAjY3uMPLyvJ0AwsDjbjjqBQE5fuQBanr7U2SapJ/VquTtrji3HbfVqcISmo9QCGhMtM+YGX4MMs2wbPg+fHWAfY/tR+0wJWhjieLDC21gGWHNQ4gQp4h0q3KZb+f3l0ytjNUDXBUhA1/FxTAWlXq7DZO38XPwmCOQ7XBbgG7XngKSeAGso9oL3drDTCem5t1VydprXB8p36thXh4fSQYXVLNBpjS+/1vrQ590DOPr8LYWwLJ2D3oVN0Ik0kYTMa8LeVib65hosowxkVJqD3nus3TkmD145QPoerlO3/RzGGmdLyYkgSfAxF1I8QlDMt2YviHJeXmSqmwObhY9N44VtkKwzhfnqpQSxPQvHo7szzbliJianyavtvmTfblVykcGpcAK4XZQEl8I5FuBrDuigedcOQ6uKFTjWs3LYFn3FvRfyb+YUVwCyLysAWToB+0b0JKaKYxVa2r6wy7/ik89yONLJDXhAf+IDZHjra2Rq90xz0jGUw0lsDtX32tsyKydBU0KWQ4SdMUqerh4/vJhJrt0SGmfeBflxqdKYlxgEh55xF7f32Tdk0yGDvAB7XJd51SlO62SaZ5c5pkM+zj/MOhSXImv1xuOU8euvT1iqLN01oseVqdwSpaNMiX53hByHcK5xFaLU7fQDEIhpR42W7nJ4+6kDCJcAPr2NEs69wVXDqHc8R+jOGjLso6zc6GIhQV5R7vbdWTI1Jchd+XX42wwEjNM9s9OFKJs/PzHONdurfDm002i90575GLSsb+Mffizj0wWuOx0QXXjMoNFEd1m/slh/FdmAD24BDr+qPhzhEf1GmAM77Yv6PyKdtQBeidFKBNX4+u8xznI+2DH4pPNHR1y1FtYm64bnoazwq6YnmkLIJ/hg2U1dom9NtZgW1CL4QQcceHxD+uvdAMJqQkyWQ/bTl5A3TtHBYza5V+huCw1t1lVVXWl84q6t5n18QJAdRJ3JYbSImXPFLFpXChm+eIkrmlqKRnHkrQrPoN/0p698VPhlbFL87hx19JAfx0CjiOOi7QQpOgY4z1Je/wgWHd4J9sab94QUb2QZnYPkzvNFngxz+hzEF4R/EcxvxK5895b+bwnJWrkwc0ylP5eKqbx5YJ00x3nTQGpijerTviwCz8wKZw1/pK+piYq/UG4+cUpoKiaQH4YUfQJCQxcoHEWAilFQ+EfHOWRNVwG8zy8PeHMeEik+K+x6knY0xDhAw1xsw01fV5YJdAgEn1wU3UvnT0XS7a1NVvmWuc5XI4ZmbnkoZoxtS459p6xCvZqB8mNLBWtDN9ATedtVbave5az9dzaP3rjfBvq55LcIhkRNV1QCbshQ9F5VIrO6FscRQ+C8MmxpjIaIvuVpPyLiztvmWCMAOsfElDx3tCAN5yPH4Om8jYuN60SKnVmFLYP6OeZHJM2vUNIpyzjyPlXwg7EhLPoToCrFwNwFzHOYKduJL2Kn2i3leJzIQuCL9L/fyY1yXlaKe9EdewwhBwW2uDSrLe+yqODM75rp5ATlLodOIiOJ7fRPJduRROEvmLNEs1nNigvAk6s8ua2Iw5BHmhcuK0MxnICjxdFfFcbJ0xbN1aycvngtL0Cu+3bH2+ehi5O7LpIdboErXYQLxPyU/AJjbdLRXPCKtmpne96JXCocbnPjw/n1jD5Hpt70tczIPbqEshpO54R6MFKZrjcnLZ8b4oS3Mi4LuCrY1cMVAEbb9gtH84LC07vlXlMreNe77W32zjxIpqCrEUEItuYLHHYeFgAfci3CTDltTuYffRr9K2gSb1a4r+OuU4RuAoeRrK6vkdpqRRDyMEiC6iQPfwXOgAOLevzfoYLWSP1rEFl+20IjfkFQ3nijv+GGxsU0bFCaMkjSA8F76lcU5qQwCUyAXFY6ImRiTjmivVMMd6mSH3bus+lZ+ZSs/w73UyhI6LvckXA+5nIiyroEq8ZI+dlrRBjAa3vOx7bwMSdXZUCZaBiJLxCMdGzBn/xFIdAQu+kp2TBrwiEsQgeX3yA48C1jOEnawQa0flhLLtWiyivtlp6FTlTjW6nsyo5J5BkvvUr3z+n1A1P+7jI0SAfsX7Xt+z8JAaIi451Vo93Rop+9veEqyZbMQvWvsuEx96F84ImPLx6XUBDBpbAG2yYs1SB56WxKPK2v1WfS4qv0nj3jz6/1J1as8e1Wk8Cr6C0RatOfkBB/3LwzWOwXvjMHoDlIR3RCvp52Imu8JeAZC2109goMqyeEQQet8j9OZMhG9II4JZjgocoiaXKu4bKFLXSuXgWs6bX+pFnC52etwdHRxKFOM1OeOjaCz/o4eBJEqVR3qIGKzsgMSAJ7CRKMrRfKdPzqNAgXq343ccYtDpcsjYJ5UV8wO/0axz6fSdBQ0mXcOrN3L1Oy3CXa+qMBLzU19B64+zHk+VTVn4MCx5tmg5pdpIxhzRXLvAK3giOFrjSF6TM2tAMiJV6C4tU1dNXxNOvT6n7jZlpZb1BYXihGyJvKmbVfN2iqUfnllJ2UayBXjBTcH/1FofVwHm9/OkiKSgI4hIO3IV8aFpiLeWEo5NBIS/mrAyCW6HfDwG9rvVoWn0QPezsw95nzwPjxzVAbnSiNeT9uy7IK7jZZZKuwtPAkOdzmyqfUGg7dnc3/vDlueUiyUWbk4KQ55EIpg/MoWyLoHzOu1BmnmXxKY2Tg/24SvxBtgC35iSxKDPh6ayoTOigSS0D90whdr09XkdoV7qvvPxyI+EJU1gg645rNhxcB+g9Vfww8krh3FeAQAiBxXY6BvY+/DJ2x8nauN5PAHhQNSHGXCMYgq2PLKbCotHrHvTLYQHZlMqRilf/eHzXrVdlsK6HQl6cMFflfzDQWhmV9G6BI6NzCnqlt7TDCfhTRbwBgQT7kzhGpTb3b6sAKa5g+PTHHUwRvjiQrfbsEIGnevf3yMGw8DmVA84IYKYNSKL/eAeJAZmv9uUD+fdzPmCTmHTJf/XPB9fCCoZT6cT7ooUVJQW0W98krFaK5sCDKBEZ7xGVd5oZwIufAPBRcRnRBrccVFebShMq6U8e7Z3RI05FWGpXTx8VLIUNH39NyuuWShqILaGpkeowzqzGzjrw/HEqwnkdZn8Cj7yufMuf77K/ssqiu12K6I/VAuckA/GkMr+Rqd3M+ROsnMIyVN2bjLikF17xQgScEeldFr1MCONwQDunhu1GS/mss0AYmUPWbTU6vs7wAYZpPPO2BwMoMguWWoHbg9mYErZG9tcR7f6sszjCUp41JkuJYyO0f0wc+st10H/+PFEj17Wfy5v1kb77rWD2B7dC4irI5AKbpimCUk9x6rbkC7d/rPgqu+sNxFdbgg3DViMbKfuoZcPJ5M7Uw/mM9XprTqk+w1XhIXeKy+mYAI4EUvha+yFL5pXc3vS220W9NLJq2adPBnp+LfT2SIzuF5oQn7dZoHQw8Q2+sQVYzyopsU1qt4l9Kfm94HIpdNiqeIuMaZ862LfhXJ1ao+JkPv/rq4UTj0bnn/XbashjGBL9mF3Jy5VKldM3XAShdhn/lk6n7N5T+CBHEyO0EwJExWsqykSubGyq5EF6ChOstJQJ5m822JzwrjuPunbvkXnMKaz75CvO9sq7vDaHYKOw+80Pzev2LwyjH7TQ6sIKVBoTiEjI8IyajXUBK9iUyfdsTZh3yoEwq0h4SRAV8vK9UP4mGK9/OpAxnPMbOxDDCfMQuXyZI5HC0tXVVpX4zUcB0I1nWJ2dETW1Umi7E5z08VIVkT4CfNP30Ue8YmsNIEnT8n26MIg
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352745",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483fe9-5e48-49b0-bd4e-4271950d210f",
|
|
|
|
|
"value": "INV525-074222.docm|eac84a7d0626709eb07ea6ec059ce0be"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352746",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483fea-1f64-4acb-b364-484c950d210f",
|
|
|
|
|
"value": "INV525-074222.docm|523af45b142e4051f5ed19950465a833c14ec759"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352747",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483feb-50a0-4fe9-97cc-416c950d210f",
|
|
|
|
|
"value": "INV525-074222.docm|d56fa904159f2de32e8f9cdbd13e6b18acf4ef32550e895e2e725d6d8a924db9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352747",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483feb-142c-41b6-888d-4899950d210f",
|
|
|
|
|
"value": "INV00687-587472.docm|5d534181555f788eed33c01ddf81113d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352748",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483fec-9ae8-4038-8c7c-4c5e950d210f",
|
|
|
|
|
"value": "INV00687-587472.docm|1d0875cc86af25a6df996d354a07dd4759424ffa"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352749",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483fed-cffc-46a1-a93f-4fac950d210f",
|
|
|
|
|
"value": "INV00687-587472.docm|20a7525d6d4e4033d1d484351b1326ec1e15a44dc25471990a63b4937ef1bfbf"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352750",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483fee-ad10-4916-a530-46fd950d210f",
|
|
|
|
|
"value": "INV0703-736374.docm|e61a406b76b43f02ac81e6bb501aa937"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352751",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483fef-00e0-4430-a4a2-4661950d210f",
|
|
|
|
|
"value": "INV0703-736374.docm|c4a292481ed227f6da100a4f4e47518793dcb859"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352752",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483ff0-18e8-4366-b118-4f8d950d210f",
|
|
|
|
|
"value": "INV0703-736374.docm|8d6526ccf85e042c247a0a8046043d47971f8d48746159a07d72fbaae8707320"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "UEsDBBQACQAIAOdku0javrfuorQAANW/AAAgABwANWJmYWY0Mzc4NzQxYzEzZTY0YTk0YThiMTJjMTVmNTdVVAkAA/E/SFfxP0hXdXgLAAEEIQAAAAQhAAAADW8H2QT4/SQQgZoCNx8EH1qMaexCiZJEC2pMvp1PPWtoDuPnU+VqD7kvzr4mRag9QBe6TK8PwSp8OsZhd8xY5efo+lltfwsnn0JshPDxe1abkm6fwIKNwaDRBvqdZt3onHjGpJ9+uZcfyDpAE6GRXyTBCkl9Xsxqj75KsGMt12FekonKjt159QL5j0pU8QBTsl1oNk0pqpoHQgB/CYaiC/AltU/OxeBxWvBNQIkshU52/vnx9evP5Mt/geZTpyBc6E3sqk/GzNM1K8gn15BuVGBHnujg9xxM8eWu1d+w+0/fiSVwiBr2Me5wBPXp3pBgJgJSbFnlxK/u7quCL8Ef7nzWoVeHPYE0bbjHzP3lqzhbf89Kx7PwLzRhSIK1lC4k9nEHNmphDtcy6CK/gaGGt8SJVbwNBDAPuBc7zKsyhY4ChakOnBbxV398e+FUrJqF/DhD3NRBXvqcXNpfY0WHlgXaI9LUBw05ic/7DY3WjRfjNUugnN3QqSBlb4SsAJsvS44AaXNztt6+LqeWBE5Rcn3wgvZ3RyrapIbMG2YRPQqfbjmK3Sy4GtW9hF+VH3U7+RkqC+dGWY67bI/swBdIMAU3KpAxhJBpitiPCkko5gqNLS73DTKTRfaaHSOuBhFkUHEifGRb35mVyUwPjdfFv4C9CfBoMwgDFSYm/5yCBU4DLTON/dF2gxzkpEsPASHXmHkVgBbTv7bftTtNFuJZhzOPaburkTwRd8tgYIT/iF1I8g9bl6Uy4Ka5tcqoMJL/AdKQ0UySm47JlJNRMI98oVvKDoj/IIepit5CVhSntSEqO6flV0Ic2oir2dWmdPMq6atXFPZGI8SzgELO7Bks/DF7RNp19ti0wlCgqqVtFgkplP4Qv61/gHXCNavVrq/VZaE67V4MUVYBh83dxbs4ptV9Vsi5hlPINXVNrSoR15nht0bp8Zlacjb0T57P8xa09BV3raiAMJ2V2fUjxwlX6egaoE5uJm5Dj+BOziur54ti7xiaVtVD9mAMfKywJp6DNpEq52nwwUzhsxMqILEPXWWV3Pe6iusrTFRXGpxYtbQ0+uQX5OVJSfNJmdGesWzu1d0G2+nvZobs6RXrEC3XYaFflQRfrKtA2OT94JbQZzERr/H0ufV/E5yPa2PxZxAvXv9FON56lcwxPrfBNSIB5ZVlVmh28UKYdyVEjWZYskmcvG4hviFk7CjOppRHsYaPyABB4wXrn25TdlO3RZiUGwHrUftWe+LXieOWHrbnx4zc3ofhQnm1qYOwk6jghzKGjgN9RtTWk1rsrSJosW+m6DXexIIqze+t8y08y2DyUV5hBWFx+vjRmYxh0B4Ep31+AAF+ZZJpvh0cyWAKqp9EO2GJpMxuj9IMMRmQOTeH5kjtK6EcsnnmWcI30jN9ie7VAzdVxpQTDBsqvnUFyPEE4zxbIC1qwIJRJDsWEA8A5LZjf/hD/wpQR9xpcjoVC08b0oGL2o4gfqBJumbcbRI6ITyZW8yjMj4wY6zK7Yu4IX+uKeRZvbuFUHlmirj4kAEMLmdZWAxkJYjo3ot/XDHJ1g7iY83LrztODF4sh217jMERIKZJeXrud5F5CH4F0+HNyg4bfFvSRXeBSEN3xZhVOXjqEbYmlcYiVIJeKqGasB49li410DTD7XT70j/QHLn09/zZJOtYu8//jtAh7jaSI5ebJyqESwwIiuzjgWtNG1SO9dnV1c4V14WQHrCnytNgptX2irAb/4sqxzhKx6vMOCnYKvAybvvWEkZkZwFuiBIwuiE0xm4uUwZiI9iA1i+2h/3h8dLe1/2464w0atpKKzFPjqCYBuYnqkbn0DFzRY8YfcDill+ZhXw8iN7GN+BkSqOlzwrfzIOp68fnQkJdQaD0T67nbnTDXi/KXV6kXD5u3PIEwIolFOey/5OqlWVEAB5+Y1uM0bAP/kgSBWbsFLFbyyKZ1ngU9CRyzjFcfFVZjCPQFYzXlSuvB2GpkOlDT3l1gKgT4pGf9u7kx1RdJLNnfPQrF/rdsV9UEaGXAh9qfMJyAQgkJQjizf+bkhZcLLgS5OI4BGUGq6BBx1XczMCgRdmek1wOfYpWyxB7O/PBZj2Uc7ES73oYpnOCY6b+QIMJYVQURmdl13+aBrI90X5Y4GcMsFLF2YHhfcMKvrdIh00cLVsKdyPsmzx2dBM+fiQMt9oo5sPV2vHvBwO/0Os6k30KeYKsMU7yiJj7ASWKD1Qhg06iGrIjv5O/pcdaf5EkArbIx9meXow3ZCj6NebMiGRAUrkRubtvKsZWd6YaK+qvj93bTQ8dwIVpNW6HPMp+OScojcc1mFi3DDZflsFzxWJp3yiqQGDgZQQesFW5IfTiPk8Tg9sewqsDem2RLftE01GTxEB+qg18HVJUHWkPhwDn74xKLBL/A4nZd2dXZqFDzMefw7O49Ho5wBIHnebaeRIfNeiUXqcryjwgq+l6bIYhFsYf9uwV0uinMPeAxUsAy5A35Bf02ZzKwyqkACZt1AnMxhy4j1fpvEz3/3S4IQNqzPImQfy38ze8z6tVPNzGF3K2A3p74mS3uh8fxQc15FwmpzQHCrzJ6/nOb3JxFiCefyQ9LS5xee7alWYpib5YYhKsKwaMFkRE64SzCy0jSZNjtJpu6CazqoUJEf1Ew0ruu8RMgdaisp4U48q5QDPXhNXOz2/xw0C6K/ErfsnLTC78JTvRFDsFepUAkDiAgOQ02/IfxkevD50H5O0VZZvYabdrlR0KCYt+v+czAJq9fAjFsbfqj67exJwG+lWc3iu0uN+ULUdy4rEGrX/AFRk/khDXuUWb1F99vohIAo7cYdtdL25W4bzWnlwbiQyDXvAsMBUsDmEOWAmb9COMNP88HQWQGee23t77P5Wcp73wMeSjwOKhNucdMokp74Dz9c5lk/76JiD/x63uTiv4ZGzwUSQ2y1L+gqUKuZYVGSaW1HCB3apI9dJt1fcXg8VfPOMWxNUdxjtujrgy7OAHrK2KmIdRgREb4oI4vVodjqJ5pn9rsDxR2UTDLBB6t8f2h0m0i4Rby3VrF2b1IFuukOJUNVi+NxGo3f7El4UcjrHOAQuYS19d2/A0OftqemAFb3mba3Xo8uQtgJd/NfaMl1R0iQd0uvRRqKQECmDP8Jvp3DxvQGUABLvFlyHwB44MQOSSt6QPwcjZekM8hfNmx1yCQHrl158DlmVfSrgwyEY0QE/KXp69qsUZBhnYUDbF/yOgixLfVgJFPGFbsIWoD4C7s5TEUi28YzeHIbyXxHBFzf74/tu7J5RdpErbMc7aPncwss5k1GZmjBPodTTQk5UjiQObXCv7DpKsSvsLkd2QJ1KcRlkeGw2UxYb1AZaZR2BE/bOxf3PfSKN3VuhKumnwMCR/c0jqJajR2VU9Hpjd4ChUhNHYFy9NIxmcVI2aqMUF3kh0AhwG3lULSJ60HkHUuAfHm6e6oo1t14XH68yxGMu+NFECjhY5D4CGhiKMPG2SnRtK3yydm8H28v2KBfEkXUcFUPc7ruhOMHE4zuMb1YAMJh0P1YfN2LsivhJmcVrFPwJyTv3s/CjJqtP9Gu3mToHfYK3vzA1ydzxQN3mlcJmXeIMtk3LrC56eFJzCfUh7N2kydjw87H5PsWwoXcj7kck6tTzrSLPwULIZ1lLVQy3BoEDMVfm8hCwAgyh5PWkgGfQwKP9UDmGhEA+NwdpwFVuQX7irPAeA7QjmreQl/832Wn5v0fI7jBKKFmy+7JL3MgpHAnjpYEoOsZKOopWm2zp0VfyhyA5YOr8YWGzdqSyL8LXijzLL2SbGQ10Scyv83ou1u0CmIIqpc3jXr8BkilLFaSEvqHwBQorzkWNa74oIKRMKRBLN1S4jIC/2WE2FWhO/oAoRR94TDEfV023ittJcWME8qXKL80C2GTkPE8oszqxpPoZzbc49OsaLWPmwzkKdO6tq/BCETcKJv6X6z9OZOt
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352753",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483ff1-0188-4274-a928-4e3a950d210f",
|
|
|
|
|
"value": "INV00703-915326.docm|5bfaf4378741c13e64a94a8b12c15f57"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352753",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483ff1-b9e8-41f2-9fd7-46ef950d210f",
|
|
|
|
|
"value": "INV00703-915326.docm|6dad0daec370897924f75435fe16e300dbaa2fad"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352754",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483ff2-e2ec-45ac-81c5-4e29950d210f",
|
|
|
|
|
"value": "INV00703-915326.docm|d99333b191cd629a0ae2856bbc4cc5bbefb89aa820a9aee84dc6b2318c9cedfe"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352755",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483ff3-ff1c-4ee5-946a-43d7950d210f",
|
|
|
|
|
"value": "INV0904-272008.docm|7bb38dfc40cef756c0decceec7467681"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352756",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483ff4-2b1c-4f3f-ae39-45dd950d210f",
|
|
|
|
|
"value": "INV0904-272008.docm|1d1095061b6533906b364df772d6d8605dd1a10d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352756",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483ff4-59c0-46b7-8018-45df950d210f",
|
|
|
|
|
"value": "INV0904-272008.docm|1f1ca3be501f5ddd1ce63ff3ffe83638488f2717dc38b09e9590adf12dd81799"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352757",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483ff5-df4c-4463-a1ad-4af5950d210f",
|
|
|
|
|
"value": "INV1129-136635.docm|e8ed14cfb1c11b2ae916901f15196995"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352758",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483ff6-e100-4860-be01-4c73950d210f",
|
|
|
|
|
"value": "INV1129-136635.docm|2e7cbbeff6c4daff9caea8e9dbdf249c3b9eecb5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352759",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483ff7-88f0-405b-acfd-4eb4950d210f",
|
|
|
|
|
"value": "INV1129-136635.docm|728480a99bf6d4779bb71f44a272a00958b29cbbf67b9e4c07afcbdf7df39705"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "UEsDBBQACQAIAOpku0hl7fNHY7QAAJ6/AAAgABwAZTg0NWQ0NDk1MTFlMjc3Y2Y3YWZhM2FmMTc5YWViOThVVAkAA/c/SFf3P0hXdXgLAAEEIQAAAAQhAAAAzl7+0vQ97dFda0PczW4sApnW2Fg46xpTyWLXpLiiAJYLWnz63vf0kkwoANbtrjHLr2OxAf1dh7ptT/ED16ud6eH23MT0NoVAt17LkXlY1gUDLfjDLVzW+mtbmzzDiPCKgyyjcUDBcFfyVl+RuQkOlqkSXG4t3u+6Hx9pNVLvxpLEXLTyhqbGaly+xc9DhSdoc7qAmKF9Fqucn8GGdpC/FIU4nWBsAweoUhIhqpS2ftlZsgFNmwPrPJavZBY6a6Gu4o9vyFQwHLGKfC70O/6XytwyrtgFz//PL33HY9X5WeZp+I75KSzLzWIAzbBjlqNIH60RmvBuQPqvruceG+p5BOGxGi8HT9BoN+9AvFxTGoZo3b7zx93MoIH/Vi8zeigqm16QesoBbFAr8xcphAuthk2jFsDMldoXEstyQfZMoGgHZgJs4klOsntGbXRunk74s1J8eSbRxFPhwCA5VE5yemHmcBzc9fDPhGIx8LiAqdiyyc+htozBQxjgABRVKbzfO41R7B/vX9JgwS7iV0BCOdgYxTzVyzPLeMq+SakrONXyRhYU/eCIdUqWKDJZH4kgbDPW6Ztbdh8AwA6+Q8ads3Y8VEmVNXTkwTdRA0ItlsRbcJlU0sqczNuf+rHs1XoywJpH+wVEkpALodpbs2MjH6cORrhaSvotFG9hgt4XUaHANz040oV5dWRc0wWE4op5vxVLFaUjj0gz6oYMqkHReYEY9zcJHL2hVBHLnzUHNDrk74xDdbOo5X2de382+BBHky9CPuPDCesab0gvhrlFrEs9QovAmbMYVnwbeF4MMQH+WIZ6xg+GlEQUXyde6ngTcDWEfM5u+3YXKTrkkbVMs0sxwa+6+o0HgwP2pIaU4Z4OXvcFdmJlHAgaydWmNdOthIRbQqIXl+5h0jdHUTVHlEX0ns6tv/zytEVz+3dw1HBxv7Id2JotKwflM5wPzR4scDA12FftRZTu8L1BpRirLbYe/Cy/SWfJJG18O5HeRoDUfcs81UN3BQBi3D7cHOCozEquyKSkMgVfczRZfUAcO+dW/0X51h0+D6JKyX8Lrz2XCU1tFumEKbeXOaCSh0QLo2jpP3UHt4MB7mezqQVpvT7rl6XMIEEWi3MIyz3cFA7IJq5eK9DLMB0UjKS0/DaUeYtXH/WTDjC2TUM2/VgX0F+3HTKvVS5tbsu6MIrISpw3mQpA5YGvhEoOrmVChY30/ACOB8V7mgOJ+tFKvNmmouoxLtuMFicykma23TAtS+1siGcax+csTGenxpYwD51ye4pGXok3LuSLRdeWQE31hsSEoL9zeGIedPKsziTPdHOcQoT0pvnP+KgHqr+lxYqjZwPc+ikdbKhMY3PX9bujfq8edlst4EtjPk4hPY65P2/PeF4M0SVtT6I3yzRkxDYKHN0iUP8UDxk/diPxiOSBoTjvhFbE2QDAtW12ffACD1DmW8MIebKOq9BhcQA221k0Ocj3NfnK+RXA1cEYmtwTY8qJhOff94RnpO/+exPIKF3OCyswbtEF8gv343YSQ68i4ZmLcvzL+RiycOnaSIMga8zlHKCWnitjohkeeU/REZ2diJR/H+WyEPKpwXOkndy0ThXyR/YK+oPVbrrATq4gLkoPnU6NUCDVqrvTtjytBesASN+ou3hRMiU8IlKKzbkzZueF8x2cbnu2c0PCOg9PmFJtCDVoB+pi6vaNpfS+yorOhg1ySirqWux3YkhC/00MPGFfDoMITESWIBhouPcgW8qN4ZBSDik7emRSJht2Kv0v4TpoBZFZFLtmJLvmjRHw2xxtFsH0bVV1PnNM65vcXSd36FnmiZVKPb/omsz0wpmTsbxYEqCTzdfAvH6ckKXkPZslWW6/zn8Nr0SNYEWWAhVtxj8QIx4h9q4vUShBiyoQtuBgCKWW0dfmvzspifpjT9/o+R4MPNoF0XhIrvlHMEntcSnXsBjhy8Py9FUQAGzAu065nEHFwGvcpoVL6vkKjRCDtyNCsnCKaN+KUWBTv8HUfeSft9L91L+fBreiXoscYVvXnBMkHpQTgo9+cHswqIVt+pt7j+5F37v+eII6WMyIPeH+bEfM1tFgKtA8E3yLZ5tVysNbQwI3mg+VLvJf4RqZoThVVjbSb6qefZqYbbh9wZ3CXo/N9Ion12om0uscyfHz821VtsR5m4SC9+nlvqxpuuCQKq/cEsHnErFBt0YZ3tOrji8/VWixPNfGe9RMZeAlCoPyy1XTGk5z3cBb7c64tpJR+XEfL4ZUBiohiF8cIYl0SL7HeN4FdAUuJX+lFITNaa6RjeqZLHrMuXyMKPjIK773eox8WxUrRUaiQUf0bvZY2wVxjczAN2UJfD/0fchzJzhy8l4T0BbqykBpIyKjm+qNLm6QsnUcGuHhcmbMmeDPfN3QP4pM0HfKixrWVcHFyeXWWA8mouB5TGJUzE4PCKUbnYFDA+nFa24S83OwpJVHrOkt0iVnsfXMDG3M/1VhCiaLUzVhIkiPHvL+oozirx0mXm3hxDpb0IVE6XD71k4h9D45TnjQ15cxbgSjbe+Non0b+MLlf9ZzHPCKxzrbAjjoMSY6JHX+IJ4bAkWfR3d8cP5gLGRdfb0kaH6g/n6qMuEOLr6nh88EgGOKLg1avRjqdKqZbom48xEJoHscpFqARbG9yjXw3lasFCSnJkdVo3ZM8kxCWDAuioMdfyJeao8exFhZ99/T6zepFlWrbEmJb2frw2AnVsozyZ7eljlKe6NDRI8UeHpqlE9HfUaxasuDFVZUEhbPcPjl+q2jmFk+afiHYLwISthH2KlN3XhV8Wo3Z5bJdyx7ghr/zacDEyKQETobrR4W4T66Rx5OL5zmaQdq3cHic0+mwfH0jECy4slWoaJNJ/9C6elZ/i6Mi6Ki2hxhJaSop5fF+pUTyiRUPi+g45tHeYs/fnzk3A2RNxaFk0teyo0GaXFAUmHQC2qhi4Auc+BybhuEdgyTUNcOiKRCwvpN5xOEjXNFQ7+bqq9lKV84qkdjGNzJvfQCATDBDsG/cZRfnSjdcpkEbcmNTAE1em14xndvlLGx/3/Tfl36Aez122+yixDsIL0WHJkYJ8sPz3glel8Sd0iVdSSvaDLMyY73YgFQ6BsTo8x5u3ka/wgBMZstSbN/UROIJSjB1fOUa/H5FZtFx1hEvRrdlxOpYJpTqFRhRCR1fmUX8iku2uwHCoHiVLTklpaqzQxPhNFdkIUzEm8xSG0s+rzZLD73VVx1qceTMfhmCzZtO+HZ52QHQ11X0mSqqP9RAizgVOqnxEttKxdaNCDLsAmabuBYe6jyyPn/4VXOWPgT8t7i9xz9b/A7PxlsBZQGlQyuFhpb0k+ZRWTUqvcbEkEl+hHsfR6Yg/fGgvqJN3G4LnASCbIu2LhLeoL20WIg5m3BBlSVSRSK+FS1A1NM/77KpSId4vZtxmSu/SsVI8+4NeDoz9jKb44SV067S6wf5cBYBxZwEHjdWXXV22vAEiKfxbprkhVvXrYwLEDs04h4f4wAv2oC4RlsO9/sY2iwDJkEFZqYH+FMSMtmDqMfsaBcrmgt8g7QxNuFeVYazHoRFjN9vYQYyh6dOC6qL9bvJNvUItvdL6n7rkWvkpftXLMEeOJLT0Avn+Oepr8t8Hkw3qJiDrNxhXgwh52IE1fZSA7Ijs1RGr27lUEB0vDekC/ukFjk0Hbsy/PA+KnLBeRVKxyxQqEA48ER29wbkFoPXzuHcFzVsYMrKFu6CjGtdtMo6kpl3BVsLlbh0mHzW2YnjFTduvkSQyn30sKeOtKgXBSFSrTW33mN9DwNRLC6F+YHs56cCbla/JglLJHG40xEvT96q9yPgCJXjwwaPNZV5L6llW9IiiJoEy3nBOjuubRFZw9yU1kqT/HPPHWQGn2aI2/UE4j+P/vqYN4m5T3oc1iNvAEX2LIhdbDaFL2PU5zIovq/K8ySAAZ4Q67F0Gct4aICBF
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352759",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483ff7-b044-4389-a2e2-4dd5950d210f",
|
|
|
|
|
"value": "INV001253-846346.docm|e845d449511e277cf7afa3af179aeb98"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352760",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483ff8-eeb8-4c35-93d6-48a9950d210f",
|
|
|
|
|
"value": "INV001253-846346.docm|dca53493c309adbb670f1191b117db8874a8b3b8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352761",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483ff9-d508-4f9c-93ea-48fc950d210f",
|
|
|
|
|
"value": "INV001253-846346.docm|98ce05f7ebc0b1f9e06e06d66dddbaca15a211874e5a3131a9d5aaa510376cb4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352762",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483ffa-a378-4c6d-8b43-4347950d210f",
|
|
|
|
|
"value": "INV03000-868515.docm|4f01e56c44bddd2c913244d2bae3554b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352763",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483ffb-aa3c-48d3-8473-4246950d210f",
|
|
|
|
|
"value": "INV03000-868515.docm|559a7b305c2660fca8f8b69dcc733bb5a72741b4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352763",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483ffb-9ce0-4000-b0e7-4c24950d210f",
|
|
|
|
|
"value": "INV03000-868515.docm|30d0acc065e595e45ee41064f074988c6a9cbd4bd413f08320d4a96fea56abcb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352764",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483ffc-0ed0-48d8-a17e-435e950d210f",
|
|
|
|
|
"value": "INV04393-731719.docm|722e5d8bfb0f6832b21b2409b0826ef1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352765",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57483ffd-fca8-44eb-a475-483c950d210f",
|
|
|
|
|
"value": "INV04393-731719.docm|e465cf4b7379c211059588d791069a7d6ef08319"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352766",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57483ffe-2cbc-4a2d-a290-4eea950d210f",
|
|
|
|
|
"value": "INV04393-731719.docm|0dffe35b7aa8d4b0b7d1451afddcbd6feca84d04fd07ff51de56b24a5cc841f1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352767",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57483fff-96e8-4eb6-bc1f-4f17950d210f",
|
|
|
|
|
"value": "INV06849-376960.docm|79b6a6bb18597d12e1090546e6a87f44"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352768",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57484000-42f8-48b8-a24d-420c950d210f",
|
|
|
|
|
"value": "INV06849-376960.docm|ddc3df868b58be15287fb4b24a4e898bb3831f20"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352768",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57484000-9ddc-4969-978c-4d05950d210f",
|
|
|
|
|
"value": "INV06849-376960.docm|1352db709f051ec064159da77ec108b4ecf7c6650fb264289c2e78467f82b8e4"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352769",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57484001-7440-4edd-ae24-4565950d210f",
|
|
|
|
|
"value": "INV20025-560507.docm|9dda4ed6b70709bbe5051dd66d256ddf"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352770",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57484002-c7ec-4e41-975e-4c3c950d210f",
|
|
|
|
|
"value": "INV20025-560507.docm|3a0e1dfafeeedd7989a97e95df7d415897f584e9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352771",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57484003-841c-43da-8cff-4c2d950d210f",
|
|
|
|
|
"value": "INV20025-560507.docm|04d3c934df97253a15e8ee28df071d12a1719c8a06e98faf09415d20964204be"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352772",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57484004-9b68-4896-8d03-444c950d210f",
|
|
|
|
|
"value": "INV035807-387260.docm|fb5bfb682c69ea19b943cbdb70a33c77"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352773",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57484005-4380-4913-adf4-4c6f950d210f",
|
|
|
|
|
"value": "INV035807-387260.docm|b3a2b6dd7790d5bc369d23e155bbb1d38549a641"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352773",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57484005-8688-4b35-8d0e-408e950d210f",
|
|
|
|
|
"value": "INV035807-387260.docm|cbe4aedd64af7a19fa9e8922768f22a11d41e68f5d2f6cdb6ae168002d53f9e5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352774",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57484006-e784-496e-b36c-4b04950d210f",
|
|
|
|
|
"value": "INV42290-296414.docm|cb3a42593911eb69134d980e9fc5ad9d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352775",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57484007-d6e8-4d35-80b3-47cc950d210f",
|
|
|
|
|
"value": "INV42290-296414.docm|76669fda7cf7e6e0da4913442e93cf51de96e61b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352776",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57484008-4bcc-4b27-95ef-458e950d210f",
|
|
|
|
|
"value": "INV42290-296414.docm|f3d0ef26bd2a6523bb0967630428c2d7779e48a131919f465a73dc90ba6aaf8d"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352777",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57484009-5d3c-427b-a12d-410d950d210f",
|
|
|
|
|
"value": "INV061001-947617.docm|4a610088aba9b76b100a2bd6e7c4c9aa"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352778",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5748400a-20a4-4984-8602-4532950d210f",
|
|
|
|
|
"value": "INV061001-947617.docm|f4eac77e0ff9207402b4b6dfd917da26303eb9cf"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352779",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5748400b-701c-4497-b069-4fd1950d210f",
|
|
|
|
|
"value": "INV061001-947617.docm|20d918483fed47e6f9a3444a21ef1d4ea84e7b2da665e991f2ee65f8197a198f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352779",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5748400b-d8a4-43cf-9c5b-4212950d210f",
|
|
|
|
|
"value": "INV087661-487426.docm|8ee96184743ed2d74e3660c671ec7472"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352780",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5748400c-4e5c-4be2-851d-4b72950d210f",
|
|
|
|
|
"value": "INV087661-487426.docm|8d0c16405bb4428cc063f4f1fb9221fea60ff5a2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352781",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "5748400d-1074-48eb-a2da-4c77950d210f",
|
|
|
|
|
"value": "INV087661-487426.docm|36ac907b5f0d38ec28dea564f107885a9357bfdd06fcd74b75b5fa0ae1701b9b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352782",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "5748400e-3ed8-4b1c-8f49-4d8c950d210f",
|
|
|
|
|
"value": "INV100827-946148.docm|39e4d4e837c6ff460433216eb405a170"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352783",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "5748400f-7f08-457f-aeee-4cae950d210f",
|
|
|
|
|
"value": "INV100827-946148.docm|a503271dc1f4ee188f82c30a2f3528b91777a0e2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352784",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57484010-fff4-42df-9104-4ecc950d210f",
|
|
|
|
|
"value": "INV100827-946148.docm|a672e898dfed8eb1b29c46946553ee78cd5a57203240fec95101d9362329a6d8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352785",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57484011-0380-4e80-a60b-4cc1950d210f",
|
|
|
|
|
"value": "INV127744-282986.docm|1700a9716572d719b49e5afb73fcefd9"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352785",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57484011-e15c-4b8c-8b3a-48e5950d210f",
|
|
|
|
|
"value": "INV127744-282986.docm|ac33db08b419c10ee859aacdfbb05a5ef179a3c7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352786",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57484012-941c-4adb-9ae2-4a02950d210f",
|
|
|
|
|
"value": "INV127744-282986.docm|d3502ddcee1eddfd782747c7dfb53d8949b42d239a3d2878e5cf21b35a882ab1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352787",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57484013-be70-4f19-9933-42f1950d210f",
|
|
|
|
|
"value": "INV613804-822485.docm|638c880c8637cd530e00dd25336282b5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352788",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57484014-a6f8-4a8b-87f6-4b04950d210f",
|
|
|
|
|
"value": "INV613804-822485.docm|e6fa1a97f4deea6f387d1d0aaf759611e7f3dd25"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352789",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57484015-fcf0-4b3f-8196-4282950d210f",
|
|
|
|
|
"value": "INV613804-822485.docm|fca9a42586ec7c20f501d8c287bdde890ae1ed5ec5c71d88dd6996368ef3459b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352790",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "malware-sample",
|
|
|
|
|
"uuid": "57484016-b260-4849-b707-4282950d210f",
|
|
|
|
|
"value": "INV917249-900059.docm|9729af2c92f505dacd42166c1f1ee0c8"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352791",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha1",
|
|
|
|
|
"uuid": "57484017-f55c-4414-8332-43cc950d210f",
|
|
|
|
|
"value": "INV917249-900059.docm|829b5b11fb4257f9462d813f313009bac2d046ea"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "unique .docm sample",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464352791",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "filename|sha256",
|
|
|
|
|
"uuid": "57484017-f120-45d0-9a80-4620950d210f",
|
|
|
|
|
"value": "INV917249-900059.docm|eb9a56652f5c6c434722538660807dc2d3edb816e3e99ab15a17119ff018a02f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: eb9a56652f5c6c434722538660807dc2d3edb816e3e99ab15a17119ff018a02f",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597609",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc69-58c0-45f0-a9e0-47eb02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/eb9a56652f5c6c434722538660807dc2d3edb816e3e99ab15a17119ff018a02f/analysis/1464375384/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: d3502ddcee1eddfd782747c7dfb53d8949b42d239a3d2878e5cf21b35a882ab1",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597610",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6a-22f0-4a77-92e1-480e02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/d3502ddcee1eddfd782747c7dfb53d8949b42d239a3d2878e5cf21b35a882ab1/analysis/1464423302/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: a672e898dfed8eb1b29c46946553ee78cd5a57203240fec95101d9362329a6d8",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597610",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6a-f08c-4cd8-927f-4b9e02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/a672e898dfed8eb1b29c46946553ee78cd5a57203240fec95101d9362329a6d8/analysis/1464447088/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 36ac907b5f0d38ec28dea564f107885a9357bfdd06fcd74b75b5fa0ae1701b9b",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597610",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6a-2f5c-417d-9fa1-4d0402de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/36ac907b5f0d38ec28dea564f107885a9357bfdd06fcd74b75b5fa0ae1701b9b/analysis/1464385495/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 20d918483fed47e6f9a3444a21ef1d4ea84e7b2da665e991f2ee65f8197a198f",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597611",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6b-13f8-43b5-897b-462702de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/20d918483fed47e6f9a3444a21ef1d4ea84e7b2da665e991f2ee65f8197a198f/analysis/1464447063/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: f3d0ef26bd2a6523bb0967630428c2d7779e48a131919f465a73dc90ba6aaf8d",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597611",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6b-3280-4898-b254-44f202de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/f3d0ef26bd2a6523bb0967630428c2d7779e48a131919f465a73dc90ba6aaf8d/analysis/1464577631/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: cbe4aedd64af7a19fa9e8922768f22a11d41e68f5d2f6cdb6ae168002d53f9e5",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597612",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6c-1724-4c7f-ab40-4b4802de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/cbe4aedd64af7a19fa9e8922768f22a11d41e68f5d2f6cdb6ae168002d53f9e5/analysis/1464355806/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 04d3c934df97253a15e8ee28df071d12a1719c8a06e98faf09415d20964204be",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597612",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6c-d2c0-4219-8f06-4f2402de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/04d3c934df97253a15e8ee28df071d12a1719c8a06e98faf09415d20964204be/analysis/1464556392/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 1352db709f051ec064159da77ec108b4ecf7c6650fb264289c2e78467f82b8e4",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597612",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6c-e058-45df-9bf3-457d02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/1352db709f051ec064159da77ec108b4ecf7c6650fb264289c2e78467f82b8e4/analysis/1464345067/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 0dffe35b7aa8d4b0b7d1451afddcbd6feca84d04fd07ff51de56b24a5cc841f1",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597613",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6d-3f28-407c-b72c-4d4802de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/0dffe35b7aa8d4b0b7d1451afddcbd6feca84d04fd07ff51de56b24a5cc841f1/analysis/1464379507/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 30d0acc065e595e45ee41064f074988c6a9cbd4bd413f08320d4a96fea56abcb",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597613",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6d-6874-49c3-a1c7-410602de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/30d0acc065e595e45ee41064f074988c6a9cbd4bd413f08320d4a96fea56abcb/analysis/1464529027/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 98ce05f7ebc0b1f9e06e06d66dddbaca15a211874e5a3131a9d5aaa510376cb4",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597614",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6e-11f8-4f1e-9dc4-433902de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/98ce05f7ebc0b1f9e06e06d66dddbaca15a211874e5a3131a9d5aaa510376cb4/analysis/1464447078/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 728480a99bf6d4779bb71f44a272a00958b29cbbf67b9e4c07afcbdf7df39705",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597614",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6e-50f0-4b57-8f68-431502de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/728480a99bf6d4779bb71f44a272a00958b29cbbf67b9e4c07afcbdf7df39705/analysis/1464447028/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 1f1ca3be501f5ddd1ce63ff3ffe83638488f2717dc38b09e9590adf12dd81799",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597615",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6f-c96c-4ab6-84ba-4aa602de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/1f1ca3be501f5ddd1ce63ff3ffe83638488f2717dc38b09e9590adf12dd81799/analysis/1464423167/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: d99333b191cd629a0ae2856bbc4cc5bbefb89aa820a9aee84dc6b2318c9cedfe",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597615",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc6f-1280-4da6-a4d5-49c202de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/d99333b191cd629a0ae2856bbc4cc5bbefb89aa820a9aee84dc6b2318c9cedfe/analysis/1464505805/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 8d6526ccf85e042c247a0a8046043d47971f8d48746159a07d72fbaae8707320",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597616",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc70-54b0-4c67-b2db-40b402de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/8d6526ccf85e042c247a0a8046043d47971f8d48746159a07d72fbaae8707320/analysis/1464447154/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 20a7525d6d4e4033d1d484351b1326ec1e15a44dc25471990a63b4937ef1bfbf",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597616",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc70-964c-424d-a685-408b02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/20a7525d6d4e4033d1d484351b1326ec1e15a44dc25471990a63b4937ef1bfbf/analysis/1464339650/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: d56fa904159f2de32e8f9cdbd13e6b18acf4ef32550e895e2e725d6d8a924db9",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597617",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc71-1524-485e-9ed7-452502de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/d56fa904159f2de32e8f9cdbd13e6b18acf4ef32550e895e2e725d6d8a924db9/analysis/1464340387/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 558c27e16cd87573ae6ff44a7e8292a996bca249fa280ec2a424f00c0a783f5f",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597617",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc71-fd4c-4d23-9a6d-46d702de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/558c27e16cd87573ae6ff44a7e8292a996bca249fa280ec2a424f00c0a783f5f/analysis/1464377294/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 0372323bd479c6ff357e44eb608dc5cb3fed036b8e6691ae714fd672c09f3a71",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597617",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc71-3f6c-420a-b0f9-463202de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/0372323bd479c6ff357e44eb608dc5cb3fed036b8e6691ae714fd672c09f3a71/analysis/1464362395/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: e4bd7e8d174f4d4831e8e9356f13c62b8c78c7dfba7a7442de01792471d05585",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597618",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc72-74e4-4ce1-b2ff-489702de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/e4bd7e8d174f4d4831e8e9356f13c62b8c78c7dfba7a7442de01792471d05585/analysis/1464385874/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 72d8a9ea189e1d2a5bd615c189d284e80132c04db16a82db84b90219770989fb",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597618",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc72-d65c-405b-a544-475e02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/72d8a9ea189e1d2a5bd615c189d284e80132c04db16a82db84b90219770989fb/analysis/1464447149/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 48e75a7c92fc81db1e6c6cde89f41f838990574e216aef388486aa6aef0a6f2e",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597618",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc72-8968-42ac-9c89-47f802de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/48e75a7c92fc81db1e6c6cde89f41f838990574e216aef388486aa6aef0a6f2e/analysis/1464384337/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: c88de4221d048a60098d081267dd84fd4d6dd14478f46fbbd64eedc37ab0e5e5",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597618",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc72-588c-407b-8676-415f02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/c88de4221d048a60098d081267dd84fd4d6dd14478f46fbbd64eedc37ab0e5e5/analysis/1464380131/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: a3e89cad94f87155e74bd24fbaa34768c616b0dca962bbff4ec1017b382d16f7",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597618",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc72-7da0-4f87-8df2-46a402de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/a3e89cad94f87155e74bd24fbaa34768c616b0dca962bbff4ec1017b382d16f7/analysis/1464385471/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 8ae0778ed74af89797cb0efdc7e82603f027c695f465d56ee2221d21eb2d2cdc",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597619",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc73-f3d0-498a-aa54-43be02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/8ae0778ed74af89797cb0efdc7e82603f027c695f465d56ee2221d21eb2d2cdc/analysis/1464447043/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 4b031c7a37702850862c0359f5dff7b9a8ae216f5c1f0ad0c96ed51b0c4f5d42",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597619",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc73-4148-471c-95ea-485502de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/4b031c7a37702850862c0359f5dff7b9a8ae216f5c1f0ad0c96ed51b0c4f5d42/analysis/1464568804/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "unique .docm sample - Xchecked via VT: 6addc33144833b74ef5f309e834275bc0d2550da1cbfc4e9a07b26216ffad3ea",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597619",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc73-b010-45d6-8bd3-425e02de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/6addc33144833b74ef5f309e834275bc0d2550da1cbfc4e9a07b26216ffad3ea/analysis/1464446997/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "PE (Locky) - Xchecked via VT: 92fdae972ec4bbd0cd01ff139fc5c4f08f917ab1c052ea8aa4f1079580529821",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1464597620",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "574bfc74-70ac-4c2b-ab39-40c002de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/92fdae972ec4bbd0cd01ff139fc5c4f08f917ab1c052ea8aa4f1079580529821/analysis/1464587614/"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
