2023-04-21 13:25:09 +00:00
{
"Event" : {
"analysis" : "0" ,
"date" : "2016-08-24" ,
"extends_uuid" : "" ,
"info" : "Malspam 2016-08-24 (.js in .zip) - campaign: \"Statement\"" ,
"publish_timestamp" : "1472049819" ,
"published" : true ,
"threat_level_id" : "3" ,
"timestamp" : "1472041325" ,
"uuid" : "57bd7251-390c-4ee2-accd-4f69950d210f" ,
"Orgc" : {
"name" : "CIRCL" ,
"uuid" : "55f6ea5e-2c60-40e5-964f-47a8950d210f"
} ,
"Tag" : [
{
"colour" : "#ffffff" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "tlp:white" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#3b7500" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "circl:incident-classification=\"malware\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
}
] ,
"Attribute" : [
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033405" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd727d-9290-486a-98df-496a950d210f" ,
"value" : "162.210.101.97"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033405" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd727d-7e00-42a3-8452-47de950d210f" ,
"value" : "162.210.101.98"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033405" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd727d-9e68-49ad-b6dd-4926950d210f" ,
"value" : "162.210.101.99"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033406" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd727e-7328-4bab-8830-4e5d950d210f" ,
"value" : "190.160.0.137"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033406" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd727e-dbc0-4025-9d3f-412d950d210f" ,
"value" : "192.254.232.12"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033406" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd727e-fb44-4219-b578-42c0950d210f" ,
"value" : "193.109.184.81"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033406" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd727e-783c-4af2-83af-4dd0950d210f" ,
"value" : "195.130.132.84"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033406" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd727e-fcc0-483b-801d-4b79950d210f" ,
"value" : "195.67.82.205"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033407" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd727f-4144-45c9-b5ca-4d87950d210f" ,
"value" : "208.71.106.43"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033407" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd727f-8e60-49e3-8399-40fe950d210f" ,
"value" : "208.71.106.45"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033407" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd727f-1d90-449d-9cf9-47f6950d210f" ,
"value" : "208.71.106.48"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033407" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd727f-739c-44b7-990f-43ee950d210f" ,
"value" : "208.71.106.49"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033407" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd727f-2758-4293-a59b-4e47950d210f" ,
"value" : "208.71.106.61"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033408" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7280-dbe0-46d3-90dd-45b6950d210f" ,
"value" : "209.235.144.9"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033408" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7280-1de8-47d6-a49b-42d7950d210f" ,
"value" : "212.40.179.104"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033408" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7280-0cfc-4c32-851e-4602950d210f" ,
"value" : "213.205.40.169"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033408" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7280-c824-4bd3-a312-402f950d210f" ,
"value" : "213.217.149.4"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033408" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7280-4060-4d28-a590-4521950d210f" ,
"value" : "213.229.74.92"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033409" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7281-5604-470b-b423-4a1b950d210f" ,
"value" : "217.97.216.17"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033409" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7281-6e78-4b55-9d64-4dc2950d210f" ,
"value" : "2cfdew.web.fc2.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033409" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7281-1d30-4b39-b7dd-4bb4950d210f" ,
"value" : "61.47.40.35"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033409" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7281-71f8-4f85-b4f0-4076950d210f" ,
"value" : "62.14.3.195"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033410" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7282-b2a4-4cd3-bb4f-44bc950d210f" ,
"value" : "62.149.142.134"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033410" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7282-1e78-4ff9-842f-401e950d210f" ,
"value" : "64.29.151.221"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033410" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7282-75e0-412b-b7ff-4c42950d210f" ,
"value" : "72.52.99.36"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033410" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7282-7e9c-418b-9c37-4cf5950d210f" ,
"value" : "80.150.6.138"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033410" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7282-2358-4e56-a0f3-4ff7950d210f" ,
"value" : "82.197.131.109"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033411" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7283-1128-4103-b981-4d8a950d210f" ,
"value" : "84.2.38.70"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033411" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7283-d294-49bf-b241-4826950d210f" ,
"value" : "85.248.42.103"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033411" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7283-43e0-4527-b834-474b950d210f" ,
"value" : "89.110.146.99"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033411" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7283-1744-4b0a-9c7b-4e4e950d210f" ,
"value" : "90.156.201.38"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033411" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7283-1d04-40cf-9bdf-4c2e950d210f" ,
"value" : "90.156.201.41"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033411" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7283-90c8-4525-a980-48e3950d210f" ,
"value" : "90.156.201.56"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033412" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7284-c9cc-44e1-bd5b-4876950d210f" ,
"value" : "91.223.89.200"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033412" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd7284-1f2c-45d4-aefb-4526950d210f" ,
"value" : "95.211.144.65"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033412" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7284-c758-4644-a4c9-4170950d210f" ,
"value" : "batsumito.web.fc2.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033412" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7284-9a14-4703-89e4-4627950d210f" ,
"value" : "bluechaos.dommel.be"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033412" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "57bd7284-776c-435f-89dd-43fb950d210f" ,
"value" : "bormanns-wetter.de"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033413" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "57bd7285-c64c-4dff-8098-490c950d210f" ,
"value" : "brothermalw.ws"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033413" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7285-eb5c-4d32-a064-4072950d210f" ,
"value" : "chrisbell.50webs.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033413" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "57bd7285-e47c-4ef1-86ce-43b5950d210f" ,
"value" : "deananddennys.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033413" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7285-3114-4d3d-9998-4188950d210f" ,
"value" : "deia500.50webs.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033413" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "57bd7285-e1b0-43b0-9aac-43c0950d210f" ,
"value" : "direttaauto.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033414" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "57bd7286-4328-4d49-8b2d-4b1e950d210f" ,
"value" : "djprestige.net"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033414" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7286-bab0-4a0c-9ae7-4216950d210f" ,
"value" : "goforbroke.web.fc2.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033414" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7286-83f0-40de-b36d-42ee950d210f" ,
"value" : "hirokuns06.web.fc2.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033414" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7286-2f7c-4e70-bf20-49ea950d210f" ,
"value" : "http://2cfdew.web.fc2.com/cibbtsx"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033414" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7286-b7fc-4e32-9915-47dc950d210f" ,
"value" : "http://batsumito.web.fc2.com/w3nbwrg"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033414" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7286-a060-4d89-a770-4f65950d210f" ,
"value" : "http://bluechaos.dommel.be/c37v3q"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033415" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7287-6c6c-4a39-8d30-406c950d210f" ,
"value" : "http://bormanns-wetter.de/gkkks"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033415" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7287-5b50-4369-8182-4391950d210f" ,
"value" : "http://brothermalw.ws/0b24a"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033415" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7287-ac3c-4cc2-9116-457d950d210f" ,
"value" : "http://chrisbell.50webs.com/9c7cw"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033415" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7287-6850-4a08-a694-4b72950d210f" ,
"value" : "http://deananddennys.com/hsbgg7"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033415" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7287-b264-4716-9959-4f93950d210f" ,
"value" : "http://deia500.50webs.com/epgvfl"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033416" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7288-1c48-4f42-9cbe-43bc950d210f" ,
"value" : "http://direttaauto.com/70ft8"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033416" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7288-ded4-46e9-ab7e-4e32950d210f" ,
"value" : "http://djprestige.net/86o7nou4"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033416" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7288-0e58-4059-91da-480b950d210f" ,
"value" : "http://goforbroke.web.fc2.com/taeucx"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033416" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7288-3bb0-4e39-b201-4b91950d210f" ,
"value" : "http://goforbroke.web.fc2.com/vzv03"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033416" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7288-6c8c-455b-94a1-4bee950d210f" ,
"value" : "http://hirokuns06.web.fc2.com/xmo6cxi9"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033417" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7289-356c-41c4-bf5d-496d950d210f" ,
"value" : "http://javierbaile.atspace.com/h3113"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033417" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7289-7820-44a3-ae09-4e98950d210f" ,
"value" : "http://karinschacht.addr.com/117uuf5h"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033417" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7289-39a0-4599-94ee-4b8b950d210f" ,
"value" : "http://leasing.ocipov.ru/volrzzm"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033417" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7289-d654-4bc7-ab0b-4dd9950d210f" ,
"value" : "http://masakipingpong.web.fc2.com/gaqqpehk"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033417" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd7289-f5f4-41ac-afb7-46dd950d210f" ,
"value" : "http://minots.atspace.com/mrfzkf"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033418" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728a-7594-4fba-8694-458b950d210f" ,
"value" : "http://naderu.web.fc2.com/l1y81i6"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033418" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728a-bc6c-48c8-ac33-426d950d210f" ,
"value" : "http://over.50webs.com/y1r0z1t"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033418" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728a-3724-4c7c-8d84-43b5950d210f" ,
"value" : "http://rejoincomp2.in/117uuf5h"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033418" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728a-79ac-4063-a76d-4111950d210f" ,
"value" : "http://rsit.cba.pl/x7aipb"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033418" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728a-6394-462c-92a8-4024950d210f" ,
"value" : "http://selectron.ch/~se_allgemein/p7fnf"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033419" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728b-a248-4b8b-bec5-4c4b950d210f" ,
"value" : "http://smilehomeutsumi504.web.fc2.com/by11k6r"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033419" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728b-d520-4fbb-8408-4dd0950d210f" ,
"value" : "http://sopranolady7.wang/14czb"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033419" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728b-a76c-40a8-ae23-433b950d210f" ,
"value" : "http://stigmata.org.uk/p4010h"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033419" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728b-6550-44fa-a23d-4b49950d210f" ,
"value" : "http://tetteco.web.fc2.com/izjgf"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033420" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728c-b8e4-4689-9bf5-41e4950d210f" ,
"value" : "http://ttd.co.th/~ttd.co.th/s78zc63"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033420" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728c-6974-490f-8fae-4ab8950d210f" ,
"value" : "http://vgweb.ru/mdjuzc"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033420" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728c-94f0-475f-89ed-4bca950d210f" ,
"value" : "http://wangmewang.name/1njm2"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033420" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728c-e61c-4d8c-94c9-42b0950d210f" ,
"value" : "http://webmail.vtr.net/~pablo.saldias/cfgzs2"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033420" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728c-1150-41f4-9f9e-4538950d210f" ,
"value" : "http://wishmaster.dommel.be/cfm2g"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033421" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728d-2ff8-4b06-bf9f-4d12950d210f" ,
"value" : "http://wm08g63hd.homepage.t-online.de/8kkap"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033421" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728d-3d08-4478-9939-45b3950d210f" ,
"value" : "http://www.archeoetnos.com/t7nv1"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033421" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728d-6ccc-41b2-9144-4d0c950d210f" ,
"value" : "http://www.bbfreeholidays.com/v3ixzfx"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033421" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728d-fe10-4dc9-863a-47a0950d210f" ,
"value" : "http://www.beck-kituzo.hu/14czb"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033421" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728d-6e98-4824-b83a-4d46950d210f" ,
"value" : "http://www.energetica.it/hznqd2sv"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033422" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728e-8bb8-41e2-8971-4daa950d210f" ,
"value" : "http://www.kardborren.se/8kdz07"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033422" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728e-5480-484d-8c42-43a0950d210f" ,
"value" : "http://www.lenkinetorty.szm.com/40dw9"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033422" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728e-d92c-4d72-80f9-45fe950d210f" ,
"value" : "http://www.pobierowo-jest-ok.neostrada.pl/w84mjk"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033422" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728e-4e9c-44e9-b3af-4ff2950d210f" ,
"value" : "http://www.shivartatoo.com/nuklyuql"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033422" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728e-64a8-47ea-9fbb-458f950d210f" ,
"value" : "http://www.smees.be/43d0mbs"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033422" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd728e-1800-492f-8e6f-47c1950d210f" ,
"value" : "http://www.yerridixielandband.jazztel.es/qo5u468"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033423" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd728f-5af0-48f2-9cda-4554950d210f" ,
"value" : "javierbaile.atspace.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033423" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd728f-3920-4f72-9d88-4fb7950d210f" ,
"value" : "karinschacht.addr.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033423" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd728f-a7b8-4f89-9f35-49e6950d210f" ,
"value" : "leasing.ocipov.ru"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033423" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd728f-10d0-4ccd-95c0-4565950d210f" ,
"value" : "masakipingpong.web.fc2.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033423" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd728f-9bc0-45ca-8b3a-4bd7950d210f" ,
"value" : "minots.atspace.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033424" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7290-5d64-40ff-81bc-41e4950d210f" ,
"value" : "naderu.web.fc2.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033424" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7290-8ce8-421d-8550-4dfb950d210f" ,
"value" : "over.50webs.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033424" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "57bd7290-7df4-45c2-a790-48e1950d210f" ,
"value" : "rejoincomp2.in"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033424" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7290-b5d8-46ee-a071-4c62950d210f" ,
"value" : "rsit.cba.pl"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033424" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "57bd7290-4810-46d1-9dac-4bf6950d210f" ,
"value" : "selectron.ch"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033424" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7290-36d4-47a1-8bcc-4b9f950d210f" ,
"value" : "smilehomeutsumi504.web.fc2.com"
} ,
{
"category" : "Payload delivery" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033425" ,
"to_ids" : true ,
"type" : "filename" ,
"uuid" : "57bd7291-93d4-4fa3-9f7e-4aae950d210f" ,
"value" : "sopranolady7.wang"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033425" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7291-d964-48e2-b584-41eb950d210f" ,
"value" : "stigmata.org.uk"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033425" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7291-ea1c-48e9-ac25-439c950d210f" ,
"value" : "tetteco.web.fc2.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033425" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7291-8bac-492b-9b97-4770950d210f" ,
"value" : "ttd.co.th"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033425" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "57bd7291-cf1c-4ece-bb7e-4275950d210f" ,
"value" : "vgweb.ru"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033426" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "57bd7292-3394-4ca2-aae1-4bc6950d210f" ,
"value" : "wangmewang.name"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033426" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7292-8898-4d94-a606-4e9e950d210f" ,
"value" : "webmail.vtr.net"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033426" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7292-f338-43bb-9fae-4841950d210f" ,
"value" : "wishmaster.dommel.be"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033426" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7292-ba80-4b32-90cd-4ab1950d210f" ,
"value" : "wm08g63hd.homepage.t-online.de"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033426" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7292-3890-4d28-8915-4a92950d210f" ,
"value" : "www.archeoetnos.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033426" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7292-4598-4c23-a4d9-4d2d950d210f" ,
"value" : "www.bbfreeholidays.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033427" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7293-a790-40a9-861b-4930950d210f" ,
"value" : "www.beck-kituzo.hu"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033427" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7293-e874-4746-ab7b-4a4f950d210f" ,
"value" : "www.energetica.it"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033427" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7293-1b68-46c1-ab68-4386950d210f" ,
"value" : "www.kardborren.se"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033427" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7293-be0c-48f0-abf0-4551950d210f" ,
"value" : "www.lenkinetorty.szm.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033427" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7293-1ed0-457c-bfe4-4d8b950d210f" ,
"value" : "www.pobierowo-jest-ok.neostrada.pl"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033428" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7294-fd74-49e4-96eb-45fb950d210f" ,
"value" : "www.shivartatoo.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033428" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7294-a744-4009-b7f3-48a2950d210f" ,
"value" : "www.smees.be"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033428" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd7294-e4f0-4814-ba14-4840950d210f" ,
"value" : "www.yerridixielandband.jazztel.es"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033633" ,
"to_ids" : false ,
"type" : "email-subject" ,
"uuid" : "57bd7361-1858-4a78-80c1-4252950d210f" ,
"value" : "Statement"
} ,
{
"category" : "Payload delivery" ,
"comment" : "email body" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472033775" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "57bd73ef-7ad8-45f2-9242-4666950d210f" ,
"value" : "Hi,\r\n\r\nThe monthly financial statement is attached within the email.\r\nPlease review it before processing.\r\n\r\n\r\n\r\nKing regards,\r\n{Firstname} {Lastname}\r\n\r\n(Topic-ID: {SOMETHINGRANDOM)"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040836" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd8f84-a288-4061-b4b6-4e2b950d210f" ,
"value" : "202.67.211.56"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040837" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd8f85-eefc-4ae7-b5aa-4724950d210f" ,
"value" : "213.180.150.17"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040837" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd8f85-ccd0-4d10-a028-4a90950d210f" ,
"value" : "90.156.201.19"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040837" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd8f85-f4a4-4ab7-93cb-4f8a950d210f" ,
"value" : "91.207.44.3"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040837" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd8f85-098c-4d3a-9997-43bc950d210f" ,
"value" : "92.240.253.2"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040837" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "57bd8f85-5f70-4e9b-9e24-46b8950d210f" ,
"value" : "95.211.80.4"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040838" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "57bd8f86-69f0-4e4f-90e0-42ac950d210f" ,
"value" : "biopocasie.sk"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040838" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd8f86-44dc-4abb-b07a-49fa950d210f" ,
"value" : "cyfrowemotywy.cba.pl"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040838" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd8f86-ac14-4c7c-ba8f-4db3950d210f" ,
"value" : "generator-diesel.com.ua"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040838" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd8f86-1200-4000-a389-4480950d210f" ,
"value" : "http://biopocasie.sk/93d37mak"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040838" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd8f86-a8e4-4e23-88d1-4334950d210f" ,
"value" : "http://cyfrowemotywy.cba.pl/wvllsuc"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040839" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd8f87-9370-4ea5-aa9b-4a88950d210f" ,
"value" : "http://generator-diesel.com.ua/g9rj4"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040839" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd8f87-d0b8-4c58-abe3-4055950d210f" ,
"value" : "http://idesign.com.hk/~webus/mcvepz5"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040839" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd8f87-b844-461c-a30d-40a1950d210f" ,
"value" : "http://karate-kleczew.republika.pl/r8mpvs"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040839" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd8f87-73e8-490e-a50d-4373950d210f" ,
"value" : "http://manuelt.atspace.com/th0dh8zk"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040839" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "57bd8f87-7e20-4ef9-9b9d-4435950d210f" ,
"value" : "http://salebe.web.fc2.com/alr5nk88"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040839" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd8f87-615c-46a8-9954-41af950d210f" ,
"value" : "idesign.com.hk"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040840" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd8f88-6c10-4498-99c8-4cba950d210f" ,
"value" : "karate-kleczew.republika.pl"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040840" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd8f88-ff50-4855-8be9-4a42950d210f" ,
"value" : "manuelt.atspace.com"
} ,
{
"category" : "Network activity" ,
"comment" : "download location" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472040840" ,
"to_ids" : true ,
"type" : "hostname" ,
"uuid" : "57bd8f88-a628-410c-983d-42e9950d210f" ,
"value" : "salebe.web.fc2.com"
} ,
{
"category" : "External analysis" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472041181" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "57bd90dd-9af8-4819-8580-4be3950d210f" ,
"value" : "Downloaded file is encrypted.\r\nAfter decryption (through the .js), it is executed:\r\n\r\n\"%WINDIR%\\system32\\rundll32.exe\" C:\\DOCUME~1\\ADMINI~1\\LOCALS~1\\Temp\\EQDKM1~1.DLL,qwerty 323"
} ,
{
"category" : "Payload type" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472041311" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "57bd915f-de6c-4545-bb49-4c6f950d210f" ,
"value" : "Zepto"
} ,
{
"category" : "Payload type" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1472041325" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "57bd916d-cee4-478f-bd27-4a80950d210f" ,
"value" : "Locky"
}
]
}
}
