2023-04-21 13:25:09 +00:00
{
"Event" : {
"analysis" : "2" ,
"date" : "2019-03-16" ,
"extends_uuid" : "" ,
"info" : "OSINT - Spam Warns about Boeing 737 Max Crashes While Pushing Malware" ,
"publish_timestamp" : "1559825436" ,
"published" : true ,
"threat_level_id" : "3" ,
"timestamp" : "1559823829" ,
"uuid" : "5c8f9bb3-c244-4dba-89cb-4fdc950d210f" ,
"Orgc" : {
"name" : "CIRCL" ,
"uuid" : "55f6ea5e-2c60-40e5-964f-47a8950d210f"
} ,
"Tag" : [
{
"colour" : "#1d3900" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "circl:incident-classification=\"spam\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#004646" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "type:OSINT" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#0071c3" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "osint:lifetime=\"perpetual\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#0087e8" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "osint:certainty=\"50\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#ffffff" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "tlp:white" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#0088cc" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "misp-galaxy:android=\"Adwind\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#0088cc" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "misp-galaxy:malpedia=\"AdWind\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#0088cc" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "misp-galaxy:mitre-malware=\"jRAT - S0283\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#0088cc" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "misp-galaxy:rat=\"Adwind RAT\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#0088cc" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "misp-galaxy:rat=\"H-w0rm\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#0088cc" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "misp-galaxy:rat=\"H-worm\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
} ,
{
"colour" : "#0da200" ,
2023-05-19 09:05:37 +00:00
"local" : "0" ,
"name" : "misp-galaxy:tool=\"Adwind\"" ,
"relationship_type" : ""
2023-04-21 13:25:09 +00:00
}
] ,
"Attribute" : [
{
"category" : "External analysis" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1552915413" ,
"to_ids" : false ,
"type" : "link" ,
"uuid" : "5c8f9bd5-55cc-458e-8cbc-4a08950d210f" ,
"value" : "https://www.bleepingcomputer.com/news/security/spam-warns-about-boeing-737-max-crashes-while-pushing-malware/"
} ,
{
"category" : "External analysis" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1552915439" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5c8f9bef-6d90-475c-91bd-4309950d210f" ,
"value" : "A new malspam campaign is underway that is trying to utilize the tragic Boeing 737 Max crashes as a way to spread malware on a recipient's computer. These spam emails pretend to be leaked documents about imminent crashes that the sender states should be reviewed and shared with loved ones to warn them."
} ,
{
"category" : "External analysis" ,
"comment" : "" ,
"data" : " / 9 j / 4 A A Q S k Z J R g A B A Q A A A Q A B A A D / 2 w B D A A U D B A Q E A w U E B A Q F B Q U G B w w I B w c H B w 8 L C w k M E Q 8 S E h E P E R E T F h w X E x Q a F R E R G C E Y G h 0 d H x 8 f E x c i J C I e J B w e H x 7 / 2 w B D A Q U F B Q c G B w 4 I C A 4 e F B E U H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 7 / w g A R C A L H A / E D A S I A A h E B A x E B / 8 Q A G w A B A A I D A Q E A A A A A A A A A A A A A A A Q F A g M G A Q f / x A A Z A Q E B A Q E B A Q A A A A A A A A A A A A A A A Q I D B Q T / 2 g A M A w E A A h A D E A A A A f q 7 X B 1 z s m E X P S a r c S 0 Q 9 B Z u f x s 6 J W 1 h 0 q l l r P V 28 l K 2 I l 6 g R 1 t 1 b Y R k q 9 l W C t h S X 7 T z F v W q 3 d E x U + V b q u d G 5 Q Z 1 e O d s I s l T o s v V F E O o Q Y K 3 j J G L I Y s h i y G L I Y s h i y G L I Y s h i y G L I Y s h i y G L I Y s h i y G L I Y s h i y G L I Y s h i y G L I Y s h i y G L I Y s h i y G L I Y s h i y G L I Y s h i y G L I Y s h h 61 G 3 z m u j M 9 G r Y S P I 0 g y c 1 b l 4 C n r r 1 v l H h W r j u n 0 3 z e u E t + k W c 1 X d s X k d 3 U E 43 L s C 8 r J 6 E n I e d R I O F k d k O I 6 C 3 L z O 7 o B w t z 0 J K b m P o B e W g 9 u O X i 9 k T i e n 1 W h T 1 v V C n X B e X i d m O X j d i S o r e p K E A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A G M O 5 n I D U n o A n o A 27 o g 36 f B G u I B P Z 0 S X n c w S w w A a 6 O + r Y 827 t V e y t W Z n C s K w i 5 z Y s b t X l S W / m M O r r z 3 U R Y k v 2 N t F Z 1 d W k y N W l y 5 + 0 L W L r x N u 6 v n V K k Q 5 k A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A V f z v 6 N 809 L y / U f P 1 / I z x b p c t O j d q V 1 v T z e n N u 17 u X T H b E 2 F 19 G + Z f T f F 9 q Y P g 9 G G A A 1 V M X a q 22 W C D K X Y w h F g r s C 0 V m J a u b 2 l + 5 n K O k U E q r V F i F q q c i 0 Y 5 I C g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A g A A A A A A E w L D a x s a 1 e w Z q T T q l q 1 Z 5 I 2 V k 8 t V q u l c z r 6 p F N p v x Q 49 A S i q O 0 W 1 e F u k p M r k u x r W b G t L s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x s a x Y A r 8 d V Z F r j U V 9 X + / k r E 6 D X A y i b H 5 v O u h 2 V e m O g l c h o 0 7 b T V o s v I G B c 6 t U M u A g K A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B M B V 1 f U L O a t b A V 6 w S 0 M 2 x F e s B X r A U s q w F f 5 Y i v W A r / A C x F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A V 6 w F e s B X r A A Q t 9 Z K S S j 4 L L R 68 u G k b l Z 6 W S D r L J A k p u a S 7 m m G W T S N z S N z S N z T E L F p q C 9 a R u Q Z B u a f D e o N 9 X C l m R O V 3 h Z K 0 W S F C L p p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 5 p G 32 P k b l R Y m 32 D 4 T / I W 4 k e 1 E g t A c / z 3 T T O v z 4 V 1 p o + f t 7 y 3 Y 471 w U 3 q v N T k 4 n c b Y 5 S o 75 X F y e r 2 R x + / o f a o a j p L S O I w 7 X b b y N 9 M m R y 8 L q c 0 4 i R 1e6 q b l / o k S K W n 7 X a v I Q + 59 s 5 y Z 7 Y S V 0 T p o 61 t r t z m v n U 7 s s d Z 4 T P v M Z Y v J 9 x H S Y J Q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A P M c x z t v L E L R a D n u g 8 y O f t J m R K B T T Y U 0 A V d p Q R a a 4 + y y b u r d y z I s q p J v t N o j q H J R 67 X R y O S 9 m 52 Q l n r 56 O d n A 5 u r X u 5 v J Q r O 6 c F t j u H N x D r 3 H 7 K 6 x S X c A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A K 2 x 4 g 6 X K H W R 0 m H P S b L j d T Q p r q o v t b c 2 + m k m L Y 583 p O k s u X 6 g l A p p s K a A C v L B F 1E9 p 3 A i k p F l B o x J L z 0 A I 0 k I u J M 1 b R D m A R 5 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B h 7 k A A A A G W O R K B T T Y U 0 A 8 p L w V O d m S t 3 T C q m 2 H P V 3 Z I 42 D 9 A W 8 k 63 S n E 2 P V j g M + 8 H E 6 u 7 H A S + 0 H L x e y H E b O z V y 8 P t E c b d X C g g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B l j k S g U e 7 C O S 99 N X x 1 L i N t d k 52 S l y 4 z 1 e y c 9 B O v c t I s 6 F X J b F W 6 y 2 R N B Z M N 1 m D N L g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y M x g z G D M Y Z e 5 E o F N S X k 255 T o J Z a 6 f k K y R L R H g 2 x Y P k 8 n P y r X 0 0 Y S R E z k l w 0 S h h l 6 s 8 e p f H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j x 6 P H o 8 e j z L V k T Q Q Z 0 G c A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A R X k c s w Q d W 2 t i T u 5 G a d J W 0 E U 7 v V y c e u 7 m U N 8 g K A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B z M L p h N B B n V 9 g A A K + w A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A F B r 2 a z o w Q J 8 H G L B W W Y U 9 m b R Q A r Y s h Q r Y s h R j B L B B k x t N d b G u D F k V h Z t e y j D M A I E o 2 q e Y T C N E k 1 G 1 T 76 s V f i W S v x i y U d m S U K b R W y I l I E o 2 q 2 y A o A A A V 0 W I o h a 4 s R Q B W z o 2 K p V q h b E k t d P L e K 2 y A o A A A A r r E A A A E C J 6 L R p 0 x X L Y o 0 m i r t I C h G J K u s Q 17 A C g 17 N Z 0 Y I N L c z 45 n n f p A + S z P p y u P g d + T k q 7 s p k v z S 57 I f M 930 Z X z + d 2 S P l G 76 i r 5 t f d W T 5 L Y f S v J f n t b 9 V H J c 79 P H z / w B 78 f K J f 0 w f M u s 6 F X z z z 6 H 6 f L r z t U n E c t 9 g L 8 + p v r Q + R / V a + z s o f O j R U c r 9 B L 8 / w + h j 590 l 6 O Y o / o a z h e f + t J e D 39 q s + Y 7 f p O q a + U X v R W t n y 3 t e l J 871 / S E v F 1 H 0 r 0 + W 7 / p a v k / f W O 1 O e q O 8 S 8 n z v 0 4 f F + 569 X y / v r J H A 592 O W 2 d L H s q O I + r e S 8 x E 7 O r O O 1 f S f b P n 1 N 9 a S / K r P r p Z 8 / 6 H q F n z W v + t J e D m d g r j e d + q e R w v R 3 A 4 T n v r g 4 f P t R 8 z h / W F f J O q 7 D 1 P l 3 W d K l + U Z / U / S h 4 b 6 u s 4 a L 9 D S / K N n 1 N X z b 6 S A F B r 2 a z o w Q Z 0 G c A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A U G v Z r O j B B n Q a O O q 0 c R p O + 3 c X G O 33 c Q r t 1 Z y k d x q 42 o P q j k o l n c e Q O K l 7 v Z 81 l 19 F c J Y x 1 X n M R a 7 J w U 6 T r 4 l d z K / Q n M U t f Q V B 5 H Q a O Q r T v p X z T t 9 S 0 0 8 X H z f o W r l a 0 + g u b 9 r o 9 H C Z x 3 O 7 i P a 7 D d x V i n S O f g y 9 c 5 + n O y 3 f O L o 6 d w M 87 U + Y J 9 P c Z i v a u S k 10 i s p 46 v V y 1 a v e 58 d o u e y c 5 V T X d 58 R 7 c 9 j l w N h L 2 O i N x J 9 A 3 f P b C u y 85 y H H V b v n U 6 u z g 8 t n H c C g A A A A A A A A A A A A A A A A A A A K D X s 1 n R g g 4 Z z i i w 6 A U l b 1 o o 8 L 9 F W t B R R + l F R p v V R Y 9 k j k t / T K o 5 V k i s x t V Q Y l y I U G 7 R V a L x V X u n C g X 6 O e t 5 S q 2 B 0 I o 14 O e s 5 y K H O 7 F B B
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1552919359" ,
"to_ids" : false ,
"type" : "attachment" ,
"uuid" : "5c8fab3f-6100-477b-a7fa-443b950d210f" ,
"value" : "D1sqKsyU0AA0HeV.jpg:large.jpeg"
} ,
{
"category" : "Network activity" ,
"comment" : "C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1552920445" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5c8faf7d-0148-415c-a1d6-4f16950d210f" ,
"value" : "pm2bitcoin.com"
} ,
{
"category" : "Network activity" ,
"comment" : "C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1552920445" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5c8faf7d-f368-49fa-92e7-4198950d210f" ,
"value" : "brothersjoy.nl"
}
] ,
"Object" : [
{
"comment" : "" ,
"deleted" : false ,
"description" : "Microblog post like a Twitter tweet or a post on a Facebook wall." ,
"meta-category" : "misc" ,
"name" : "microblog" ,
"template_uuid" : "8ec8c911-ddbe-4f5b-895b-fbff70c42a60" ,
"template_version" : "5" ,
"timestamp" : "1552917017" ,
"uuid" : "5c8fa219-3e68-48d7-9fd3-446f950d210f" ,
"Attribute" : [
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "post" ,
"timestamp" : "1552917017" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5c8fa219-94cc-40c3-898e-44cb950d210f" ,
"value" : "Attackers are using topics regarding #Boeing 737 MAX 8 crash and seems an email account from @IsgecPresses has been abused to deliver the mails. The attachment is a JAR file which drops H-WORM RAT. C2: pm2bitcoin[.]com brothersjoy[.]nl https://www.virustotal.com/#/file/0d53ae6b78d37bff74cd6458624a9157b1a7d60d5722f9c4ebc83e5a7a058463/detection"
} ,
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : true ,
"object_relation" : "type" ,
"timestamp" : "1552917017" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5c8fa219-d24c-453d-a924-4ef6950d210f" ,
"value" : "Twitter"
} ,
{
"category" : "Network activity" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "url" ,
"timestamp" : "1552917017" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "5c8fa219-abdc-48b6-884f-4947950d210f" ,
"value" : "https://twitter.com/360TIC/status/1106524508612026369"
} ,
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "username-quoted" ,
"timestamp" : "1552917017" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5c8fa219-b210-4b04-afac-4687950d210f" ,
"value" : "@IsgecPresses"
} ,
{
"category" : "Network activity" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "link" ,
"timestamp" : "1552917017" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "5c8fa219-9454-4300-b649-42f0950d210f" ,
"value" : "https://t.co/qs6XhKMU3k"
} ,
{
"category" : "Network activity" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "link" ,
"timestamp" : "1552917017" ,
"to_ids" : true ,
"type" : "url" ,
"uuid" : "5c8fa219-be38-4ece-9e5b-4a2c950d210f" ,
"value" : "https://www.virustotal.com/#/file/0d53ae6b78d37bff74cd6458624a9157b1a7d60d5722f9c4ebc83e5a7a058463/detection"
} ,
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "creation-date" ,
"timestamp" : "1552917017" ,
"to_ids" : false ,
"type" : "datetime" ,
"uuid" : "5c8fa219-0d38-475c-b5b2-4eaf950d210f" ,
"value" : "2019-03-15T04:56:00"
} ,
{
"category" : "Other" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "username" ,
"timestamp" : "1552917017" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "5c8fa219-9164-4a70-9a22-449e950d210f" ,
"value" : "360TIC"
}
]
} ,
{
"comment" : "" ,
"deleted" : false ,
"description" : "Email object describing an email with meta-information" ,
"meta-category" : "network" ,
"name" : "email" ,
"template_uuid" : "a0c666e0-fc65-4be8-b48f-3423d788b552" ,
"template_version" : "13" ,
"timestamp" : "1552920733" ,
"uuid" : "5c8fb070-9b58-46d1-842d-4183950d210f" ,
"Attribute" : [
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : true ,
"object_relation" : "email-body" ,
"timestamp" : "1552920733" ,
"to_ids" : false ,
"type" : "email-body" ,
"uuid" : "5c8fb071-e6ec-44fa-bfda-4739950d210f" ,
"value" : "Greetings \r\n\r\nI believe you have heard about the latest crash Boeing 737 MAX 8 which happen on sunday 10 march 2019, All passengers and crew were killed in the accident\r\n\r\nEthiopian Airlines Flight ET302 from Addis Ababa, Ethiopia, to Nairobi, Kenya, crashed shortly after takeoff \r\n\r\nThe dead were of 35 different nationalities, including eight Americans.\r\n\r\nOn 29 October 2018, the Boeing 737 MAX 8 operating the route crashed into the Java Sea 12 minutes after takeoff.\r\n\r\nAll 189 passengers and crew were killed in the accident.\r\n\r\nnote: there was a leak information from Darkweb which listed all the airline companies that will go down soon.\r\n\r\nkindly notify your love ones about the informations on these file.\r\n \r\nRegards\r\n\r\nJoshua Berlinger \r\nprivate inteligent analyst"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "attachment" ,
"timestamp" : "1552920733" ,
"to_ids" : true ,
"type" : "email-attachment" ,
"uuid" : "5c8fb071-05e0-4443-9ac5-4e54950d210f" ,
"value" : "MP4_142019.jar"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "from" ,
"timestamp" : "1552920733" ,
"to_ids" : true ,
"type" : "email-src" ,
"uuid" : "5c8fb09d-07c8-4907-9a7e-4772950d210f" ,
"value" : "info@isgec.com"
} ,
{
"category" : "Payload delivery" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "subject" ,
"timestamp" : "1552920733" ,
"to_ids" : false ,
"type" : "email-subject" ,
"uuid" : "5c8fb09d-2308-4095-b6f1-4d9e950d210f" ,
"value" : "Fwd: Airlines plane crash Boeing 737 Max 8"
}
]
}
]
}
}
