4200 lines
1.7 MiB
JSON
4200 lines
1.7 MiB
JSON
|
{
|
||
|
|
"Event": {
|
||
|
|
"analysis": "0",
|
||
|
|
"date": "2024-09-06",
|
||
|
|
"extends_uuid": "",
|
||
|
|
"info": "AA24-249A: Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure",
|
||
|
|
"publish_timestamp": "1725608976",
|
||
|
|
"published": true,
|
||
|
|
"threat_level_id": "3",
|
||
|
|
"timestamp": "1725608935",
|
||
|
|
"uuid": "d67bfbe0-e01d-4e2e-8a56-214805d85aee",
|
||
|
|
"Orgc": {
|
||
|
|
"name": "CIRCL",
|
||
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
||
|
|
},
|
||
|
|
"Tag": [
|
||
|
|
{
|
||
|
|
"colour": "#ffffff",
|
||
|
|
"local": false,
|
||
|
|
"name": "tlp:white",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#95dce6",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"7e6945c5-7f3b-55f6-bcb7-fa324c6bdaed\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#f47803",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"cfbd0546-fbbe-50bc-9839-f5942a2351aa\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#b5e81e",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"5831810d-b580-5f7a-a1e7-faed4d1a563f\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#454ba2",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"486b67c5-001e-5f63-a107-32fc8a0241d3\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#1780f6",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"8853f41e-8f72-5458-ab93-952f356cfe5a\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#4373d7",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"e50f5d5e-71ea-562f-a620-81b1959d12bf\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#8f4bfa",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"0dfcaefb-2c4e-5c91-a456-1f99d838489c\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#fe49ff",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"29a2e23c-a528-5a0b-9951-62f952c61a41\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#a424e2",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"72daa13a-e9e7-5e55-b00e-33bd4b388780\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#7e0469",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"f5c5bb0a-b069-5007-81ce-a5237603e5d2\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#e6c438",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"fcee58e5-5ecd-59dd-b6f3-a2ca3773d319\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#484fb1",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"5204f946-8433-5ec8-9191-7befc4fabd19\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#ee4feb",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"e3483879-54f7-577e-bc58-ff095f52940a\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#b56d6a",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"9ee6c31a-4150-5379-b985-e326e66af3ca\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#e7a5a9",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"e6927ba4-7209-5b63-a292-b0debffe25ee\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#ff90df",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"9c5bce7a-fd1d-5dce-8baf-50b158ddd0ef\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#1cf4fb",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"d4702430-9466-5d8a-8c61-df2dda91d764\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#f68ba9",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"b3d2e49a-5e0d-5874-abe5-7056de875f42\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#0db1c8",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"ddbb1e82-5ec2-58f6-a798-21a99cdd86bc\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#1da9a4",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"819ae972-e7cb-50fa-951f-39f313782283\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#ec9b97",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"6c1fac21-26db-5cfa-b85b-b35035980c89\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#45c4d9",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"ffdadad3-c8d6-58e2-b167-f7d519a773d2\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#3d7941",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"ebcb5766-2582-57d4-abdb-217f7d3cf6bf\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#a6879d",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"65b221c8-e332-5ee8-9690-df517ca14b0e\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#c082a7",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"a4c3c998-327a-5e05-8a71-274d32a0fc61\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#28ae17",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"8cc97e25-1098-5b49-a89a-b227ac8acfb6\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#3afb42",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"deaa17ef-2126-59f8-bfda-8ad576e9f255\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#c39305",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"02af8157-334a-5ad7-95da-71d2da89b995\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#d74e07",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"5e84e7dc-47d0-5cbf-a650-10b7f0cfba02\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#a516b0",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:stix-2.1-attack-pattern=\"ee63b40a-73ae-5655-a319-f550fe7da87e\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#004646",
|
||
|
|
"local": false,
|
||
|
|
"name": "type:OSINT",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#0071c3",
|
||
|
|
"local": false,
|
||
|
|
"name": "osint:lifetime=\"perpetual\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#0087e8",
|
||
|
|
"local": false,
|
||
|
|
"name": "osint:certainty=\"50\"",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#ffffff",
|
||
|
|
"local": false,
|
||
|
|
"name": "tlp:clear",
|
||
|
|
"relationship_type": ""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#0088cc",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:country=\"russia\"",
|
||
|
|
"relationship_type": "attributed-to"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#0088cc",
|
||
|
|
"local": false,
|
||
|
|
"name": "misp-galaxy:intelligence-agency=\"GRU (Russian Federation)\"",
|
||
|
|
"relationship_type": "attributed-to"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "e4d79d5b-0f18-4425-aaff-8ad4a76965bc",
|
||
|
|
"value": "59da31da4db1aa5f9a5c7c0c151422c8"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "d200de3d-892b-4cc5-acb7-5b9483a87558",
|
||
|
|
"value": "ddec2d79f460a881849037336ba8968f"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "dbd63fee-b773-44e2-8f5d-a86bc605c493",
|
||
|
|
"value": "64b9feeccf6c183b9f7138f8fc53acbb"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "79464528-6363-47d6-b916-2acad6b1967b",
|
||
|
|
"value": "993f01861aff306df44e6475f7886f37"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "aae7a7d1-0efc-4214-879c-c5bb0ae26af6",
|
||
|
|
"value": "143594597130e301499e5940a5fb798a"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "ef02798e-12ab-4998-b06f-a5560e7e5a66",
|
||
|
|
"value": "6a4fca88ee36fecc5113e188cc39d25c"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "16387805-2b0f-437f-8626-6b9288d077c4",
|
||
|
|
"value": "56e0446a6d7175a0d09110bc483ddbed"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "84fee704-e245-4bc0-8367-3f595c80492a",
|
||
|
|
"value": "2128361d8aaae1225d50c9add32006a1"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "ebd1e153-de64-4b1e-bf20-2a905d976b9b",
|
||
|
|
"value": "b32e14a9b7de6c92cd16758fa6e23346"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "6263e5f1-8aab-4ca8-9964-37153d0d835f",
|
||
|
|
"value": "7fe7f33d9b5dbdf3d032d2a10e39f283"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "42d0545e-8f58-4e14-b422-ce7a4814fab5",
|
||
|
|
"value": "f34f60375bebad861a35b7c4bb0fa1c8"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "d78f253e-bcc2-465f-99e4-edb709de3f08",
|
||
|
|
"value": "cd62d4a178705b2b90a8babd8613df93"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "2c737bec-16c5-4941-8fcb-abaff31fe732",
|
||
|
|
"value": "e1a15bc13157134f542cd9c55c742460"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "b4d30160-f19c-4e65-97d5-31ddb50abc3e",
|
||
|
|
"value": "791a81f31a8e7090a7d5417451e09efa"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "ee69c3df-c937-4d55-9262-08ce29a20a7a",
|
||
|
|
"value": "a1b509254a0a1daa7e00d279ec974461"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "2fefe355-31cb-4629-86d1-25c8bf649a09",
|
||
|
|
"value": "5c9e2195d10375b746b6717fdb47b5b9"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "5b9125b1-5e5d-4979-8db7-640dd0edb400",
|
||
|
|
"value": "aecb57e20d2c0b0d9fece2cbcbcc3459"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "7bcfbc3a-4c9c-4ff7-b386-3675e604872f",
|
||
|
|
"value": "80f0ee332a452172533ad8863bb3bc63"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "1ed0174d-a046-449f-8cf5-f2adb538c862",
|
||
|
|
"value": "2b39eab325906b0a3ab7e584c3d67349"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "65d74122-9806-4072-a07b-a782cdb29920",
|
||
|
|
"value": "b7c1a8d39f46eaf52be90e24565dd6b0"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "86043c21-e0ec-4aa4-9776-38d6d3f54dd9",
|
||
|
|
"value": "d06761b2cff86035a4838110ed6ab622"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "5c37afeb-578f-492b-977b-21fd0ed1ce14",
|
||
|
|
"value": "d40195a444526eafb0db56d95bf8655d"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "0125fa07-459a-4303-94e7-c6a3ab0fa616",
|
||
|
|
"value": "7234da8ceafbe6586469f18c03cc1832"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "76983bd5-1263-43f1-948f-dbbc1c68f993",
|
||
|
|
"value": "1c85c0d044ac837e8939564afac1eb32"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "8ebbd796-e691-4a77-91ad-ed23578798de",
|
||
|
|
"value": "58e879213d81333b628434ba4aeb2751"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "4492d66f-71f9-4c8c-8db1-d15c409e6537",
|
||
|
|
"value": "562c337b8caca330da2ea6ae07ee5db6"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "f3a3f4f1-c776-4ce4-b6d3-215710582bd0",
|
||
|
|
"value": "422437f326b8dbe30cc5f103bde31f26"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "cee06014-e20d-4604-acdf-70f064ccb078",
|
||
|
|
"value": "d034fe4c71b16b6d331886c24fef2751"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "url",
|
||
|
|
"uuid": "f16ba0e3-9c09-4381-9528-53ed7ac15119",
|
||
|
|
"value": "https://cdn.discordapp.com/attachments/945968593030496269/945970446149509130/Client.exe"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "url",
|
||
|
|
"uuid": "c782c58f-0860-416e-990f-eb3966dff5fd",
|
||
|
|
"value": "https://cdn.discordapp.com/attachments/888408190625128461/895633952247799858/n.lashevychdirekcy.atom.gov.ua.zip"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "url",
|
||
|
|
"uuid": "341b14db-37e3-4597-9e20-94cd26e8b5e6",
|
||
|
|
"value": "dns.test658324901domain.me"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "84b269d9-399b-4b56-a0ec-8fa36b910b64",
|
||
|
|
"value": "81.17.24.130"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "url",
|
||
|
|
"uuid": "1396ca9d-4c4c-4fa1-9ccf-284c5dc1b2af",
|
||
|
|
"value": "https://nssm.cc"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "url",
|
||
|
|
"uuid": "e3cd4b8b-8cdd-4ecd-89ea-656a80d02eb0",
|
||
|
|
"value": "https://3proxy.ru"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "3b86b9fd-1252-4562-b03d-2e04d1962a87",
|
||
|
|
"value": "194.26.29.251"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "b34015c1-842a-4239-a9cb-b93c5b618627",
|
||
|
|
"value": "194.26.29.84"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "cb9275b4-9e07-4908-a02b-20ff23ecf33a",
|
||
|
|
"value": "185.245.85.251"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "65c5ef28-1e3b-44b4-bb6f-40352dd6e48a",
|
||
|
|
"value": "185.245.84.227"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "84f3dd6b-9f19-44c1-af63-b3df7315de9e",
|
||
|
|
"value": "179.43.189.218"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "028cae65-31c0-4e35-bc5f-fc44a06a8fdc",
|
||
|
|
"value": "179.43.187.47"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "971ea537-49b9-47f7-aa3c-4b069e937f48",
|
||
|
|
"value": "179.43.175.108"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "75afcfa4-d56f-4a6d-83b4-20998a206056",
|
||
|
|
"value": "179.43.175.38"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "5f5d6811-6362-46b9-a72c-a3feabede57c",
|
||
|
|
"value": "179.43.162.55"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "6f44b2f1-dec4-4eec-89b5-3c605f3be0cb",
|
||
|
|
"value": "179.43.133.202"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "ea33e6fe-d2db-488b-ae4e-21f0bb3d854b",
|
||
|
|
"value": "154.21.20.82"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "d4a14fa6-d863-4409-ba49-d9fd8307aa89",
|
||
|
|
"value": "112.132.218.45"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "5ea01eea-27f2-4594-abee-672ad5e38b05",
|
||
|
|
"value": "112.51.253.153"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "49995268-a9b5-4296-a1e1-ed68bf2e4789",
|
||
|
|
"value": "90.131.156.107"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "80e9623d-7e43-46a7-84b8-9e0ee4b5af82",
|
||
|
|
"value": "79.124.8.66"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "e00d7787-021c-44df-8be8-37b0031f260e",
|
||
|
|
"value": "46.101.242.222"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "22cf353b-1896-4d8d-8ca5-ead2e033dfb2",
|
||
|
|
"value": "5.226.139.66"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "a33130bd-3ad2-4697-9890-4e2be951c1e9",
|
||
|
|
"value": "1cac5c0cb8801e8730447023270d8d56"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "d889113d-a8d0-470b-a609-3bec93bae1e6",
|
||
|
|
"value": "a9c9c0be8eca3b575c24da0fcf1af1a9"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "f7388f34-1830-407b-9353-1e49540add16",
|
||
|
|
"value": "af277ae0fbf6cc20f887696ea4756d46"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "b8839abb-9d28-4697-af69-48d67e96a5d2",
|
||
|
|
"value": "9d7ab8b0aa669125d9a5adc4f46c56f3"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "cccef14a-c480-4a0d-8d68-f3a15d300380",
|
||
|
|
"value": "755dac7edd17fbf5b5c449dd06c02e14"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "87d9dc0e-3a5d-491b-9578-22cb9c0d0edf",
|
||
|
|
"value": "251f3a4757d9e4de0499cc30c0bc00a9"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "f92297f3-d860-402a-9435-d71a88b58a5b",
|
||
|
|
"value": "28d571ddb5c04d065dfe1be9604663ba"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "b7bcc0a9-e052-4b49-88a3-6bc2774ee335",
|
||
|
|
"value": "ca43a241042b5fcc305393765ae18e69"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "a3e81f0d-e045-49a7-8ebc-2ce9531cc720",
|
||
|
|
"value": "1e22d64f263e8ea4b2d37dcd9b7c3012"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "a67cf1aa-6079-42a5-bd77-49ee050c3216",
|
||
|
|
"value": "b0d0a23766fa64ece9315f37b28bb4c0"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "1d61dad5-71e8-4ee1-b8d4-cda09c070039",
|
||
|
|
"value": "94bf96b76c2a092de8962496ce35deaf"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "173119ee-711b-4cf5-8615-bde343ecaca4",
|
||
|
|
"value": "4e9c55c6fe25d61ca4394de794546fab"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "e724aa55-de70-4c7a-a791-c34479314cae",
|
||
|
|
"value": "3ccf799ff208981349cee4fb1a1cf88c"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "85c8f694-4185-4627-a6c7-be965878edae",
|
||
|
|
"value": "96964aed18f65a7acae632f358a093f6"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "29abf48c-a628-4d19-939a-5bbae672d694",
|
||
|
|
"value": "09a2d85e809d36bff82bd5ab773980a3"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "c18cde77-f736-44cd-a2a4-a7f44807b3c1",
|
||
|
|
"value": "5eaa7e812733a5c8cda734fab2f752d5"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "048b7124-c527-41e7-9edd-4ff1263c3b6e",
|
||
|
|
"value": "569c1d31f4c7ec7701d8e4e51b59fe85"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "6986a8fc-f8ea-4e3b-8dbc-0ab19b4f160a",
|
||
|
|
"value": "246f31c86bbbe7f65c0126cf4a1a947a"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "dcb5c48c-4b54-463a-9f79-d588a08caf0c",
|
||
|
|
"value": "0a2affa6d895baab087b84e93145da35"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "df45d9b1-6794-4745-a364-99267de3c6fe",
|
||
|
|
"value": "3fe96ff4a5ef0f5346ce645a2a893597"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "17d4d0c8-2671-47e2-94ad-94e15f94059f",
|
||
|
|
"value": "540ee8e39150c539fea582b0e77be7b0"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "fc3fa43a-0d9d-4bbc-b4e2-6d1bd71fcfca",
|
||
|
|
"value": "d43446b4a22a597b93b559821ee5ac9b"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "4fb60f8b-6d92-460e-8846-42fe50019713",
|
||
|
|
"value": "69e58c5ee69f5e5e8a58f4afdd59adfe"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "916dea47-465e-4b18-a2b8-a643f35d6a67",
|
||
|
|
"value": "dea3ae8225913dd98148fc86cfc3bcbe"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "086d9462-83c2-4c34-8311-83d6507395a1",
|
||
|
|
"value": "246d9f9831b125ea7e6ef21bc4c8a0ca"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "fa73a2df-eecf-4e1b-8a8a-09ef22be8e57",
|
||
|
|
"value": "e21fe98cc8866c0eeecf3549ebcec751"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "fec4f9e8-a4fb-4fa6-9d1b-ca779679dbd5",
|
||
|
|
"value": "41871fef433d7b4b89fd226fe3a1a2c0"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "8d54312e-2c13-47ab-be31-4e0fd42f16b5",
|
||
|
|
"value": "9f11e915be5c0d02a3130329cf032a28"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "09ddd38b-27b8-4873-b641-2b654cf35544",
|
||
|
|
"value": "03af632aa6f87bf9dd4364ee3b612cbb"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "c05d7456-72fd-4ff2-9137-311ac5783fde",
|
||
|
|
"value": "d0b00a6c83ce810ec2763af17e8ab1c4"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "27063176-a2bc-46c7-89db-b01e662c1345",
|
||
|
|
"value": "77aa3f342a0d69fda67c853bcc004d48"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "6f2c8464-bab4-4722-a4a3-16e24117cc76",
|
||
|
|
"value": "5d063eecd894d3d523875bc82ef6f319"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "954cfc41-4031-4460-9684-51c22d935c54",
|
||
|
|
"value": "9935a86108e3ae3f72cd15817601dcc6"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "7def6d2a-4598-4cc0-8790-4e691fb831b4",
|
||
|
|
"value": "552d9b79cc544fc6c3e8aa204dd00811"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "f397e000-7d05-46da-9d70-a9f65bedea34",
|
||
|
|
"value": "ad0ca738aa6c987e4ee1a87ff2b8acd5"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "2461f554-82c8-44fd-a6fa-ffd565d733f1",
|
||
|
|
"value": "4c19aeecbfca13b8a199703d8b8284b9"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "0273104b-e0fb-47c4-a8f5-7355b57565b3",
|
||
|
|
"value": "cee5acbfef7e76f52f40b8ae95199c50"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "ac14c670-634c-4229-8b13-bd572a0ab45a",
|
||
|
|
"value": "54a9fa9eb337a3b5ca7b0fa4553e439d"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "c461aadf-2b11-4405-982c-86a150531bab",
|
||
|
|
"value": "95cf2a5a24b0d33d621bb8995d5826bc"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "7e326bdf-0224-486d-ab78-884139b8ce1a",
|
||
|
|
"value": "343b140977b3f9b227e7e5f82b0fadb5"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "9872cc0c-af66-43de-aad8-7064de07d04c",
|
||
|
|
"value": "981160dee6cd25fb181e54eca7ff7c22"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "650062ce-3490-43e1-b9f8-5d60e67bd3cd",
|
||
|
|
"value": "6c152774f6894407075e6f0a2859bbae"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "b3c044da-a5e6-4ce0-8ac3-c340e514da10",
|
||
|
|
"value": "6859fe5a3eead00a563cd93efcc6ea96"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "ce239e3d-2f3c-44b7-b043-66aa37545096",
|
||
|
|
"value": "99305ce01cc2d0f58cd226efb2de893f"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "ce9ea643-0fab-4e2d-94ba-98779dcb1d00",
|
||
|
|
"value": "d6b41747cb035c4c2b08790cd57f0626"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "a7fa2017-94cf-4a95-9d16-27b3468397d5",
|
||
|
|
"value": "6e1394938c2fecad2d4f5b3bcf357ec0"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "17ddd8b4-7f8a-46ea-9458-a99cd57319ed",
|
||
|
|
"value": "de276cf07ccffa18d7ffc35281bca910"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "e3867e98-784e-4976-ab3c-384fe37733ee",
|
||
|
|
"value": "7d3b529db1bd896d9fd877b85cafdc64"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "7281a17b-0e66-4e00-9718-800a9d8da6ec",
|
||
|
|
"value": "9b2924c727aa3a061906321a66c9050c"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "4092fbde-df88-478a-8fcc-57457c8276b8",
|
||
|
|
"value": "2b2509c6ee46d6327f2f1c9a75122d15"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "0ff224fc-f3ca-4e3b-aa4e-b82da3fd79da",
|
||
|
|
"value": "32db8abce1618e60441f5c7cf4be0d22"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "e4139b31-64f7-47a5-86fb-b419398b5c5c",
|
||
|
|
"value": "332b7f6662e28e3577bd1b269904b940"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "3909e442-be38-4e98-919b-88b537e093e2",
|
||
|
|
"value": "1934e2ebc64d41e37ef53ea0c075e974"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "d6d0ba98-fac8-4dc4-bc41-c5e01e406ec5",
|
||
|
|
"value": "0e6374042b33d78329149a6189a7cb46"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "30081114-c827-4109-affd-c60971086205",
|
||
|
|
"value": "cc4a9db6f250114e26d8d9ba6ab46bc9"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "563718cb-9d8f-4ab0-b8ec-0022d77ba1a0",
|
||
|
|
"value": "da4d81f9ef3b25ea09f34481d923dd9d"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "4b7bae0d-8f8e-4675-aca7-a3f770f0a18e",
|
||
|
|
"value": "77675a24040f10c85112d9a219d5f1c7"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "1dfee9f0-6557-41eb-ac11-3eb882ac2813",
|
||
|
|
"value": "85afdef18d65b0518d709a5a324ea57a"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "4bde370f-bef8-475b-9879-b46e524038c2",
|
||
|
|
"value": "e2cc52273d56ed66c800a726760c1ed0"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "e59e8107-1983-4286-beba-928290528ba3",
|
||
|
|
"value": "a5494ffd9efb7c3df59c527076a05e62"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "078b5b12-8036-4216-8cf3-5dc5542f4ded",
|
||
|
|
"value": "0dc5ac12f7690db15c99eaabc11b129c"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "3460cfae-957a-4aa3-be2d-5090bc8b66b0",
|
||
|
|
"value": "9657c2ef6ed5229740b125df9ca6c915"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "63dd4894-a056-4a7b-9bb4-a69c9d4d3d17",
|
||
|
|
"value": "673586594242d99ab02118595e457297"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "2bbfc56d-3da3-41aa-b4de-e37f373efd7c",
|
||
|
|
"value": "8a2ba7f9cb6f65edf65dbe579907551e"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "83fc4d37-b08a-4961-a44e-484c93534f69",
|
||
|
|
"value": "af85885a74cfe099676af542dcdc5741"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "1b29c353-0228-4fda-9b4d-aa3bfe56b035",
|
||
|
|
"value": "c265188fdadddb648629e8060601dca7"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "791096f0-6cb0-4766-9b0d-477f781bb317",
|
||
|
|
"value": "683546b9171a1ea284a96d1b45d1d823"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "1c82a716-832f-4f03-8f77-ca3f86a25d99",
|
||
|
|
"value": "3bcff990faacbebb8fb470dfe03e2543"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "57ac15b9-249c-4ac9-8d7d-e5a4eab46174",
|
||
|
|
"value": "47f4534da421daf8089cf34d53f6bb6e"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "747f670a-4ba9-4cd5-8680-3607b8a33f5b",
|
||
|
|
"value": "d8c04ecd646a1f8537a59f63518ef3c6"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "e6977878-8f62-4141-9116-d444a6f68586",
|
||
|
|
"value": "601c12596dfea84c2113ae5ee59a52ec"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "9fc03b83-56d7-4d98-af98-6a89d240d102",
|
||
|
|
"value": "fa97dbe84ce7717b754795fa89f13dce"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "0f8d37d1-c54e-4514-a5a8-39ccd34f9ea3",
|
||
|
|
"value": "2e035360971a817b854d7d5a2b008717"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "ae01811a-2cc8-4b54-8f5f-bc3d0638f023",
|
||
|
|
"value": "875f9200b49db08c33962b0a6bd05ab9"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "01860414-eb4f-4d89-9ece-ef1d85b56658",
|
||
|
|
"value": "f8ffd1eab6223e31b15d0fd6c3c0472e"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "5ed49f3c-2c7e-4c3d-b9d8-1d05d2f1a91f",
|
||
|
|
"value": "0adc2530cf348c0a3d53a680291a3d67"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "05bb2494-eb7a-4ada-b948-5fa896837b35",
|
||
|
|
"value": "d973210977957209f255b58eb1715b12"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "0ffeaa0a-b3d5-427a-813e-66c279b94a1f",
|
||
|
|
"value": "7e0c42d33921a89724424f17c97037bd"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "4df248e4-c491-48a4-8294-9be67e4b30c0",
|
||
|
|
"value": "e4634ef9bfe7b598b857ad997445b239"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "6f9ef797-bf7b-4ac1-89f6-98adb0ea6918",
|
||
|
|
"value": "911c7e82f32f78577dcd725a7adb114d"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "0c45962b-3242-4bcb-821d-4b8c663d8404",
|
||
|
|
"value": "5c3b0040e2dece6e17093ae607b79044"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "bd1c2ee1-8c63-4867-a85e-03d59045fcb6",
|
||
|
|
"value": "fc418fdda06ce5982153766dcefb71d9"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "fb7a494a-a0f1-4a77-9f41-f12a5600b607",
|
||
|
|
"value": "9152c9de57b5647ee4ab3dff551dc8dd"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "f4fd2e9c-4700-41ac-ba00-f8971fab3117",
|
||
|
|
"value": "5b884f15dc9b072d7bbad9ec2b249f38"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "012d93e3-ae29-4e61-bd55-2c38a33dbcd8",
|
||
|
|
"value": "ffa68749aa3fc6495e2c49b01d964339"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "d82de68b-4555-48d7-832f-6fb0dbaaed83",
|
||
|
|
"value": "1220b580cef1bf22351e271773945d20"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "ff08bc0b-86c5-48dd-a6ba-886aa7e26f47",
|
||
|
|
"value": "8cfef66b390f08bdbfd940922cf51650"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "4ab89aa2-eb6e-4ca7-aa45-4ead9f893679",
|
||
|
|
"value": "a66b3b22a3619f739b197d0d443b700c"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "7d517f54-eda9-480e-8c63-bd959eff0b1c",
|
||
|
|
"value": "032f5642d4fb2fdd74e6f20a13c57746"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "08bb0f87-cdda-429b-8e10-eadca0bdf8e2",
|
||
|
|
"value": "c9d1677f4f89b95b41591b23a1dc1a63"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "b9301e51-88a0-4b3b-9ced-381fd33f331c",
|
||
|
|
"value": "fba76f4eb2e7a2eb17193bebe290a198"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "b6b22511-4344-4605-8be6-e98cdc9475e1",
|
||
|
|
"value": "0e03103e8110785156105946e48ea9e0"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "fb19330e-2a03-4e57-8424-9ad5c6bbcfe2",
|
||
|
|
"value": "8d3d4d702ba6b4be2766a41bfe5ff76e"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "31e51fad-79ef-4cca-b31a-108b889c546c",
|
||
|
|
"value": "2b5f159f022109a8de1bc5dd9e3138a0"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "f55dd154-c819-48e8-af95-8a3a6c598158",
|
||
|
|
"value": "19cb20c4e7dbfe15c1aa284752d0fecb"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "adf7457f-75a7-4c70-bf38-32a5f17b28c7",
|
||
|
|
"value": "4bce4831b1dd71f19c55b3e3b5e99856"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "9735b359-67a2-4921-8f4e-0bef0a83ce73",
|
||
|
|
"value": "eef2363744345741e09fe5380eeb4df3"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "83cd5ade-209c-41a5-bb19-33768efe19e6",
|
||
|
|
"value": "f4f4e55a00d2f3a433c9e5624285ac1c"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "72febe90-22b8-432b-b825-bbb840ebe07d",
|
||
|
|
"value": "df4f856f783d23fb01af1e0e64bc0e20"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "273d289e-3124-4d8f-91f8-a0ea37b5d744",
|
||
|
|
"value": "7a70d5fbbafe3454b76e3ad2f009618f"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "1207700c-abca-4f4b-bdcc-4e1761913214",
|
||
|
|
"value": "4d8343c40be53d6521244fe74393d937"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "0419067d-ad28-4706-a017-25969d67328f",
|
||
|
|
"value": "de1bf141976776becd376a0dac400df6"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "0580b905-8022-41ae-a4f2-bbb3f9ef83b9",
|
||
|
|
"value": "2ca6bcf16ee4293a771a1cf7b7b9ee49"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "8602ba8f-7158-42a5-a629-32d0ed3c27ef",
|
||
|
|
"value": "a905d620717f75751aa94ceb88995dbc"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "316a71af-6b75-46e2-ba77-6801f2cb6497",
|
||
|
|
"value": "955e4c198ee58e40fe92cb74ceefdf00"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "5d516549-e05f-44c5-8f51-837c53229eff",
|
||
|
|
"value": "5f4df6dd8e644d59eaf182e500b5e7bf"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "ac4dc844-a4ed-4d31-a196-8e2e28e86c02",
|
||
|
|
"value": "8633bd2bbbb5da22c3f8751150186c42"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "66ddfef2-0de7-4469-97ef-90be5dd1aa61",
|
||
|
|
"value": "08dfebc04eb61c9a6d87b6524c1c0f2e"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "aad8c2fa-b5b6-45e7-a954-2426db987af9",
|
||
|
|
"value": "f73d203bdf924658fd6edf3444c93a50"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "c44b0a77-8d94-4b6b-9863-7607b65237ab",
|
||
|
|
"value": "7f84263fd24f783ff72d5ae91011b558"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "a467682b-8390-4502-9cc4-70bb332e569b",
|
||
|
|
"value": "4074798a621232dc448b65db7b1fdd66"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "7ebda806-74e0-49e0-9746-0dee98c9ca2a",
|
||
|
|
"value": "179.43.142.42"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "15777c0e-1b11-40ca-a3da-e9eec41e0946",
|
||
|
|
"value": "interlinks.top"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2019-03-01T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "95c78c9a-98e1-4cb1-9a4a-45956d3c5628",
|
||
|
|
"value": "179.43.176.60"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2021-04-01T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "891b311d-58c1-4e90-b329-35de69333ddb",
|
||
|
|
"value": "7c8cb5598e724d34384cce7402b11f0e"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2021-04-01T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "debcfe37-043c-44b7-b86b-ecc0ce889d5f",
|
||
|
|
"value": "78c855a088924e92a7f60d661c3d1845"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "url",
|
||
|
|
"uuid": "2c18b530-e166-4f99-bf0f-3805b95608ea",
|
||
|
|
"value": "https://cdn.discordapp.com/attachments/928503440139771947/930108637681184768/Tbopbh.jpg"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2014-11-22T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "1f657c53-754c-4adb-945b-78f39060d8de",
|
||
|
|
"value": "3237.site"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2014-11-22T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "e805eda5-9ebd-4523-864b-0af05828b1c9",
|
||
|
|
"value": "smm2021.net"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2014-11-22T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "58497591-5993-4c93-8fc5-1173daf43782",
|
||
|
|
"value": "111.111.111.111"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2020-03-28T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "1b21652a-6f34-43bc-9b61-334826b22f5b",
|
||
|
|
"value": "45.141.87.11"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "b740d5a1-9153-45c8-81f2-0950d39d6a14",
|
||
|
|
"value": "194.26.29.95"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2020-08-02T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "7199a781-3a71-4301-ad10-407b5e9fbaa7",
|
||
|
|
"value": "194.26.29.98"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2021-05-01T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "6dab9927-451f-46cb-a5a3-876f381ae1e4",
|
||
|
|
"value": "nssm.cc"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2019-08-07T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "ip-dst",
|
||
|
|
"uuid": "32933f91-47f8-4ffe-8b4b-1452040c87e9",
|
||
|
|
"value": "62.173.140.223"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Network activity",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"first_seen": "2014-05-23T00:00:00+00:00",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "domain",
|
||
|
|
"uuid": "ce473a0c-acf3-497b-bf35-cf534a1b69fa",
|
||
|
|
"value": "3proxy.ru"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"Object": [
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "2d170d33-aca2-4cfe-94a5-7fb0182c71e5",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "1145c31d-cf18-447f-841e-8880a4630c48",
|
||
|
|
"value": "f772f5c65d65412f61ef5f2660e33ceb"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "899ac0a1-0c31-4997-bf84-16994f002585",
|
||
|
|
"value": "892be61f0cf68425e42efda9aa31f0e14bc963b5"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "fb0414a3-b69c-4261-9b6f-09e52ed40d47",
|
||
|
|
"value": "eab7c6ef336c0fe2e0d15e2ccfe851f7ee172bdc14cee2d25e1c245e9034279d"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "e582ce35-ccd7-4582-9d2e-cd953c3e6090",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "74e76dce-f0c0-4bf3-b0a0-76972711d4e4",
|
||
|
|
"value": "afbb9459d4a0f60d7ffb3b3532d11bc2"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "42659e20-dfea-4682-83a0-a22a63fce195",
|
||
|
|
"value": "91f7690be7d36bde7537193987610848289e0f56"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "47e13147-a592-4ac5-8d2b-4d131dc163b0",
|
||
|
|
"value": "3c02aeeb57d3c64feae109f50a89774111a443142859891bae4fb2f469fa0466"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "841c42e7-de66-49c8-ac04-141fe28d21bf",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "0f211751-7f12-43ca-b169-29e5f2416cac",
|
||
|
|
"value": "29d83f29c0b0a0b7499e71e7d5cb713f"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "d24b3c8a-be50-4acf-b5a6-b347673c792c",
|
||
|
|
"value": "d33f12dbcdd427c527a8285fd9ab0c848051288b"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "2ab200fa-ab40-4d19-9300-232162c245a2",
|
||
|
|
"value": "fd4a5398e55beacb2315687a75af5aa15b776b5d36b9800a1792ede3955616c2"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "4dfa7787-900b-4c3b-aa03-1a5be6c44375",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "1ffc7619-5a45-4d9b-adc5-afa070d2da98",
|
||
|
|
"value": "9b1191f1ceddf312b0d609cd929c6631"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "cece8da3-fa6b-40a2-a4a2-a9b195ab67b6",
|
||
|
|
"value": "0dd61a16c625c49ffefaf4ce24cabf9a074028a06640d9bbb804f735ff56dfa3"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "d56d107e-abf2-4a7f-ba35-0c8d6f8330df",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "42b2cde0-76b3-461f-afbe-4637927bcf28",
|
||
|
|
"value": "de85ca91e1e8100a619de1c25112f1a5"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "195f346e-efc1-419e-978d-c41cfd78269c",
|
||
|
|
"value": "d2d96f0d819abd771617e806994effc180c7438c"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "15a9d527-e1fb-4a7b-9859-1b7c244aabf7",
|
||
|
|
"value": "489ab4819830d231c3fc3572c5386cad9d18773a8121373ea8174de981cc9166"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2014-11-22T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "bf03694c-665a-4145-930e-7c218915ae22",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "4f8d0a09-d436-4536-af71-b4b95c1baa28",
|
||
|
|
"value": "5a537673c34933fc854fbfb65477a686"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "24bc3a8f-b2d6-4738-9f51-b996bc1775d3",
|
||
|
|
"value": "7070b7e9d537c96a2218b3907b05af2d7378661c"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "c787d283-c370-4a8f-9e3c-6f481d59e47a",
|
||
|
|
"value": "35feefe6bd2b982cb1a5d4c1d094e8665c51752d0a6f7e3cae546d770c280f3a"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "060ea156-0eb5-4f95-ac8d-7b2502fb92e7",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "929c8c74-187b-458b-ad58-de1d2b512a00",
|
||
|
|
"value": "764f691b2168e8b3b6f9fb6582e2f819"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "e6ee1dce-5e08-4fd6-a348-b646ca440c32",
|
||
|
|
"value": "aa79afbf82b06cda268664b7c83900d8f7a33e0f0071facba0b3d8f7a68ce56a"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "99b93ad5-38af-4534-a43a-f0f48080386d",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "f6052137-b1d7-4f82-a817-2e0734b97e25",
|
||
|
|
"value": "eac0ae655d344c25ff467a929790885c"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "59d11ded-3e2b-405b-9f4e-d533853ee929",
|
||
|
|
"value": "b9e64b58d7746cb1d3bed20405ef34d097af08c809d8dad10b9296b0bebb2b0b"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "ad9882f2-73a8-4ee8-9933-01c00d70c9a1",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608636",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "d89ea224-e763-4ae5-ab37-88c8d69b303d",
|
||
|
|
"value": "6154760e602bd71192d93f72fbdb486e"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "abbe1878-0367-4ed1-a2da-d81c7dffa552",
|
||
|
|
"value": "50566fdea2f4b8a3466427f9c6798dabe2587823"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "e20545a3-30db-4464-8774-7f21ef5f01b2",
|
||
|
|
"value": "bc2e7451995e188f50581efb2b564dfbc5b593f57f7b52072eeba235a0861670"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "c8c23229-d10f-45d9-80b4-30691f49e9b0",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "18afa792-5c71-4faf-9216-46233ad10675",
|
||
|
|
"value": "394e056cb6cb732dfd5e0d45d3dae938"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "218c44ce-5413-45b9-86d8-57355d0ab6e8",
|
||
|
|
"value": "731dab83ef1d02203db64fbefbe59f3791db1e21"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "dbe409f7-fba7-4557-967a-f10bdf9c1bf2",
|
||
|
|
"value": "aa212493331277dd28a8b9b2f535c7b719ff9c6d4ccad121fd0a59dcb78697d9"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "e49afa4e-ab00-4def-b732-bd8b77301f9c",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "aebb8790-d113-46ea-8b73-450b5ac20ef0",
|
||
|
|
"value": "dd2431b1f858b4ca14a4ea05fb8c4a06"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "840ad4fb-3f1e-4568-a8cb-a3b09af44516",
|
||
|
|
"value": "c3181fd7cb463893fc73974acc0016605d90ef6c"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "3c0bd56e-99e5-4870-be0c-fa65de6e04ea",
|
||
|
|
"value": "a05f2999844495bffb3405b1db2d1927e5237e61d71edb599a5fa64e3e575856"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "ad79ab5b-e77e-400b-9903-7c37dbd711ad",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "2657530c-f634-42b5-8e89-15a37584b798",
|
||
|
|
"value": "58dc7c9577ff90a046359ca255c0c9f4"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "4c9271bd-b0b2-4724-b89c-7a17deaf2982",
|
||
|
|
"value": "f6acdc16c695c3c219116aea3d585efedcafdab5"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "8c2ee362-9cab-4a8a-8833-eca91265bf2f",
|
||
|
|
"value": "d3a80ce2fded8144d347ee0b42c18ff6ad8cb386c3a2fc884ef2348afe7633c9"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "c53c4b11-22d8-45f8-abdb-62a102dfd0f3",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "b5e7dc48-3d3f-498b-b797-bce8dd06b381",
|
||
|
|
"value": "869742fb9db71fdb66f00528fe2966ec"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "bf1ac1b3-77b1-4890-923d-05c93a276b40",
|
||
|
|
"value": "db370ee79d9b4bd44e07f425d7b06beffc8bdded"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "c6dea386-4199-4f17-9c8b-607e633a362c",
|
||
|
|
"value": "7f8d4a36d05b60f0dd986a3bbde1be34b10a2d80297d1ae28d3fdaaa914fb8bf"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "9356204e-b184-489e-ac87-2ad76d12f9bf",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "a7b0e44b-f987-4531-891f-7cb89a59bc39",
|
||
|
|
"value": "9345425cf07b4c39a80cd8540e08bfde"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "e7ca273e-df2c-4bef-ab09-21df265d31b6",
|
||
|
|
"value": "2e113050a81bbd0774db7e86fad4abd44e5b6ec2"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "86c43392-33e6-46db-b94a-9d98da7d2187",
|
||
|
|
"value": "4ff07f308da5b18f4a71ef09eea3f3c968683c93e8aa55d3f03975207e3b19ce"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "6a89f90e-176f-48f2-9b00-07d7ca24890d",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "053ec90f-15f8-4cc1-9e23-31c0464f8694",
|
||
|
|
"value": "9c695be3703194fdb71c212a0832bcf3"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "35714a5a-bd13-444d-a265-5f9accdd03e0",
|
||
|
|
"value": "88c76d31b046227d82f94db87697b25e482eb398"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "dcbb427b-f578-46bd-99b0-a28c8e31cb86",
|
||
|
|
"value": "3de02a782987b4463e02dda90df57a06fb0022eb8840a17c4c812631705ebf7c"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "a489adfe-a6b6-4890-8f35-ca25c35c82d4",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "19c67e44-68d3-4ff3-81d4-da89c7e9a047",
|
||
|
|
"value": "9606b4720a0e73ef1f00505a11aab2f7"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "c51dc75d-094e-4d9e-a872-17726f187e44",
|
||
|
|
"value": "27c176bbd3e254d5e46ccb865d29c8c166ba4a9f"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "89823894-f9bc-46ca-a1c1-d41e7a9a5f71",
|
||
|
|
"value": "a5833236a73c66add109c8b53adda6f998bf92d63955fa06787d66d670d7889e"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "981b34f3-18cd-49a6-af3f-8b91618ae731",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "899b1238-2f8a-448c-b3a0-b89b751bd144",
|
||
|
|
"value": "d33f608f561096be24cba91797e0da2f"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "2b981029-713d-4297-b580-3300de38873d",
|
||
|
|
"value": "90fa56e79765d27d35706d028d32dc5be7efb623"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "bed100aa-62a3-43c2-8486-6fcfb2a8728d",
|
||
|
|
"value": "c27a3b0ffaba2258d66d595c5478f12ee8a107cd590132a4a72d8bfdaf486fc1"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "a3a725cb-3205-4867-a8b1-44f3106cb138",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "2fb4494a-9ea0-4229-95f8-6de3dca9ec7f",
|
||
|
|
"value": "dc795cb9290b1bc0b7fb1ce9d6ae7c93"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "2bdc7edc-668f-414a-a216-a48b1cc4f64c",
|
||
|
|
"value": "5fbd9bd73040d7a2cac0fc21d2fe29ebe57fb597"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "0aa8e327-ee5b-4c37-9df8-c2863f023d83",
|
||
|
|
"value": "887936dc1db271c6970ca78f25c4eb62d3816761b675db2cf4a46645c98a5fd9"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "d74d9dae-1d82-43fb-9a61-00b8153938fe",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "7b6421b0-46af-4e0d-aacb-23ec3ff31beb",
|
||
|
|
"value": "b85538f665fdb6c8d9a74f2df7369832"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "c8c592e9-89fd-4bbe-bfea-837065beb7a9",
|
||
|
|
"value": "fb83899dc633c59a8473a3048c9aacce7e1bf8d8"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "0bee47b5-2375-472e-a37e-0540ce9d8bde",
|
||
|
|
"value": "b72e8c0e4291e85ad683d6dcba449f18eacd31e8e5395c7064dcb05077db4a06"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "b0cd44ba-3d9f-425c-8bf2-3ec7efe6bb5d",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "86931e7e-757f-49f9-bef1-b18fbae0352b",
|
||
|
|
"value": "618d62dd95fd9aeb855fe2ef1403dce5"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "22c9560e-e90b-477e-a3af-c50881b61d5e",
|
||
|
|
"value": "b5e3e65cd6b09b17d4819a1379dde7db3e33813b"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "bb4901eb-df9d-4048-9155-71a5f3cc3d18",
|
||
|
|
"value": "fae14137605c6a173eaca1e89ad92961e6cb2b66b924087f2f109c0ab38a0d71"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2014-11-22T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "994089df-40d9-4ca1-b834-6d05829cf31b",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "2039feea-e99b-4426-9728-892cc52ad5bb",
|
||
|
|
"value": "3907c7fbd4148395284d8e6e3c1dba5d"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "24ecb640-363a-4c1e-8dd3-d6a36a0bd527",
|
||
|
|
"value": "a67205dc84ec29eb71bb259b19c1a1783865c0fc"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "481222ad-45da-40cf-8afd-ca56b987aeb8",
|
||
|
|
"value": "34ca75a8c190f20b8a7596afeb255f2228cb2467bd210b2637965b61ac7ea907"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2021-04-01T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "fea555f1-2e49-4c87-9005-9493f4e46d82",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "filename",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "filename",
|
||
|
|
"uuid": "25a66b0f-5601-419c-9ee7-d3a1d8b75799",
|
||
|
|
"value": "Ofewufeiy.dll"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Other",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "size-in-bytes",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "size-in-bytes",
|
||
|
|
"uuid": "730076c5-4859-426a-84ac-283e91889d2f",
|
||
|
|
"value": "438272"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "3ec5d5af-b305-4518-89b2-e1e1d8ab0ad3",
|
||
|
|
"value": "8744cec7547b1e73705c10a264e28e08"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "208c1b3d-7294-4acb-bd1e-c944422f7124",
|
||
|
|
"value": "d4851eb90fc4ba627b6ce633c40852b963a1b555"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "8ea3c2be-d48c-4f58-b18e-5147ca0b47a5",
|
||
|
|
"value": "b7b76f3fe12e12b8d1d34dcd1a53ab18223ec10a5a7549b2db4cde5d84c8970d"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-01T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "1d29024b-9099-443c-af91-3b831562902e",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "filename",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "filename",
|
||
|
|
"uuid": "f2d2e432-8c12-4596-a5a0-e41dee7e1953",
|
||
|
|
"value": "de1f9d1f0336ddcff832ad3900acd2f1"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "bccd5921-ca7b-467a-807b-5eef56d8e68b",
|
||
|
|
"value": "de1f9d1f0336ddcff832ad3900acd2f1"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "c5c60708-1b48-4c91-9325-814137a5fae6",
|
||
|
|
"value": "7631b43feb02fb8dc97401e82a1ec5c7d970a055"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "640a66df-af59-42ab-997d-aa144ab6c821",
|
||
|
|
"value": "2880f3c707dff1de85e6b9a7e7154648e2e1df535647c0917e8fb4ea0fe9fd20"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-01T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "5c918e3d-fca0-4cbd-8327-a7968237a2c3",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "filename",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "filename",
|
||
|
|
"uuid": "4702ef5d-3a71-4fa4-b3d5-53f7dbd60733",
|
||
|
|
"value": "de1f9d1f0336ddcff832ad3900acd2f1_reversed_974e7c0b3660fbf18f29eac059f85ac0"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Other",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "size-in-bytes",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "size-in-bytes",
|
||
|
|
"uuid": "9d1172b7-278b-48e9-9746-667fedc6968c",
|
||
|
|
"value": "1772032"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "20518434-d0ce-4b36-8993-a3cd81bd68d6",
|
||
|
|
"value": "974e7c0b3660fbf18f29eac059f85ac0"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "026e82c2-9b6f-48a7-b99d-dcfc289573e8",
|
||
|
|
"value": "80abdc5c36eb4a2745783e6590a13d92497c8513"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "8d33ef54-8ef3-4523-9429-7e27fcead89c",
|
||
|
|
"value": "163932f1d39d2ae140bcf89aee6d514f65902ce8b4d46c7061c1cc94eb2a25b2"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "6971d11f-4641-4a6f-9d6d-cc032f5fdeb9",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "236914ad-cd0a-4f28-906c-25e5f0e97830",
|
||
|
|
"value": "17fc12902f4769af3a9271eb4e2dacce"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "6f1906ae-b8e1-41be-95c8-852daf76feee",
|
||
|
|
"value": "9a4a1581cc3971579574f837e110f3bd6d529dab"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "4b335126-105a-4bc8-ac59-7e18969bfc07",
|
||
|
|
"value": "29ae7b30ed8394c509c561f6117ea671ec412da50d435099756bbb257fafb10b"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "7c18bc0c-21c4-44b4-b89b-4280be7eec4e",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "efbc8374-62c7-4d20-9fd2-153506d19b91",
|
||
|
|
"value": "6eed4ee0cc57126e9a096ab9905f471c"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "3c7774bb-fa68-4a1a-963f-9332d499b09a",
|
||
|
|
"value": "4f06d376648def0bb8a325e70046a5030d2cb1d1"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "f967219a-a43c-4032-aee9-26159aeeca6d",
|
||
|
|
"value": "db5a204a34969f60fe4a653f51d64eee024dbf018edea334e8b3df780eda846f"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2014-11-22T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "82f83bb1-8e40-4ec0-83f0-5bc9c3aa476d",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "filename",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "filename",
|
||
|
|
"uuid": "8db2ff24-45c3-40b7-bf6d-3fb885e5772b",
|
||
|
|
"value": "Frkmlkdkdubkznbkmcf.dll"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Other",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "size-in-bytes",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "size-in-bytes",
|
||
|
|
"uuid": "64a4e3c6-6a8d-4be1-8f50-182951313e93",
|
||
|
|
"value": "280064"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "590dc3d8-0239-42d0-8a40-91c5aed64896",
|
||
|
|
"value": "e61518ae9454a563b8f842286bbdb87b"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "d5641ec3-5a50-49ee-8ed4-346fdc8e01d8",
|
||
|
|
"value": "82d29b52e35e7938e7ee610c04ea9daaf5e08e90"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "7d2c0fa3-cbae-42ef-a491-c1ba96210c93",
|
||
|
|
"value": "9ef7dbd3da51332a78eff19146d21c82957821e464e8133e9594a07d716d892d"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2022-01-13T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "dfcf55fb-9c49-4cad-99b3-86ebad50f186",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "filename",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "filename",
|
||
|
|
"uuid": "6acaf25e-9278-4f76-ad83-e7a3323359e8",
|
||
|
|
"value": "Tbopbh.jpg"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Other",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "size-in-bytes",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "size-in-bytes",
|
||
|
|
"uuid": "cdc87026-c331-4781-93d0-d12c842f4947",
|
||
|
|
"value": "280064"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608637",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "4fb4e39a-c6d1-43fb-9a09-dc60511efb39",
|
||
|
|
"value": "b3370eb3c5ef6c536195b3bea0120929"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "60cc6faa-2682-4d8a-a040-9ceacc88f2ef",
|
||
|
|
"value": "b2d863fc444b99c479859ad7f012b840f896172e"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "9b9ba050-4a15-499e-a6a1-02d9a43da28f",
|
||
|
|
"value": "923eb77b3c9e11d6c56052318c119c1a22d11ab71675e6b95d05eeb73d1accd6"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2014-11-22T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "ae8445df-cd98-49d6-bb60-3f2dd3def234",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "filename",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "filename",
|
||
|
|
"uuid": "7ee96603-9135-4627-9213-a9e671c1ca16",
|
||
|
|
"value": "stage2.exe"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "filename",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "filename",
|
||
|
|
"uuid": "5812ee45-e9e8-41b0-b7a5-a2a152153d90",
|
||
|
|
"value": "Tbopbh.exe"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "filename",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "filename",
|
||
|
|
"uuid": "f54978b7-7524-41a8-a08b-1fff05cedc98",
|
||
|
|
"value": "stage2.exe; Tbopbh.exe"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "b1e6f127-f762-4630-9e56-f5055f2d2c1e",
|
||
|
|
"value": "14c8482f302b5e81e3fa1b18a509289d"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "3ec43202-3415-465a-a03a-19bb7bc99930",
|
||
|
|
"value": "16525cb2fd86dce842107eb1ba6174b23f188537"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "bb03676d-e4ae-4869-9e7a-b4b41447e9a6",
|
||
|
|
"value": "dcbbae5a1c61dbbbb7dcd6dc5dd1eb1169f5329958d38b58c3fd9384081c9b78"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2014-11-22T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "1768da67-e65f-4bad-8744-12a90e2e3300",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "filename",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "filename",
|
||
|
|
"uuid": "2db5b3c3-f34a-4b39-b7d8-ccb808a0d56f",
|
||
|
|
"value": "stage1.exe"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "47e59484-8db0-421a-a578-35eb43a9cd39",
|
||
|
|
"value": "5d5c99a08a7d927346ca2dafa7973fc1"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "7dddee2c-b2e5-4972-bd6b-f8c5fe55f1b1",
|
||
|
|
"value": "189166d382c73c242ba45889d57980548d4ba37e"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "8ca810c7-55cc-4748-963b-6f5d8ad84aac",
|
||
|
|
"value": "a196c6b8ffcb97ffb276d04f354696e2391311db3841ae16c8c9f56f36a38e92"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "File object describing a file with meta-information",
|
||
|
|
"first_seen": "2021-04-01T00:00:00+00:00",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "file",
|
||
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
||
|
|
"template_version": "24",
|
||
|
|
"timestamp": "1725540162",
|
||
|
|
"uuid": "7b213df7-fb1f-4ab2-8d90-b3ca6b6f94a6",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "md5",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "md5",
|
||
|
|
"uuid": "91e0bb66-74f2-42bb-baf9-1dec39929c8c",
|
||
|
|
"value": "896e0f54fc67d72d94b40d7885f10c51"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha1",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha1",
|
||
|
|
"uuid": "74787e8d-cea7-4701-ae41-a8d90ea3877e",
|
||
|
|
"value": "5d60c8507ac9b840a13ffdf19e3315a3e14de66a"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "sha256",
|
||
|
|
"timestamp": "1725608638",
|
||
|
|
"to_ids": true,
|
||
|
|
"type": "sha256",
|
||
|
|
"uuid": "9a08fed1-b17e-4eaf-bbe5-1c9efdf623da",
|
||
|
|
"value": "5e0f28bd2d49b73e96a87f5c20283ebe030f4bb39b3107d4d68015dce862991d"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "Object describing the original file used to import data in MISP.",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "original-imported-file",
|
||
|
|
"template_uuid": "4cd560e9-2cfe-40a1-9964-7b2e797ecac5",
|
||
|
|
"template_version": "2",
|
||
|
|
"timestamp": "1725608681",
|
||
|
|
"uuid": "c015fd65-073d-4519-bb64-d652be3f1d97",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "External analysis",
|
||
|
|
"comment": "",
|
||
|
|
"data": "ewogICAgInR5cGUiOiAiYnVuZGxlIiwKICAgICJpZCI6ICJidW5kbGUtLTA1ZTFjNTQ2LWYwMDMtNDE4Mi04NDA4LWUwMzI0ZjM2OGQ4YiIsCiAgICAib2JqZWN0cyI6IFsKICAgICAgICB7CiAgICAgICAgICAgICJpZCI6ICJsb2NhdGlvbi0tMjVhOWVjNDQtOTYzMy00OTJmLTgyOGYtNTliNDcxODkxOTdiIiwKICAgICAgICAgICAgInNwZWNfdmVyc2lvbiI6ICIyLjEiLAogICAgICAgICAgICAidHlwZSI6ICJsb2NhdGlvbiIsCiAgICAgICAgICAgICJjb3VudHJ5IjogIlVTIiwKICAgICAgICAgICAgImFkbWluaXN0cmF0aXZlX2FyZWEiOiAiVVMtREMiLAogICAgICAgICAgICAiY3JlYXRlZCI6ICIyMDI0LTA5LTA1VDEyOjQyOjQyLjAwMFoiLAogICAgICAgICAgICAibW9kaWZpZWQiOiAiMjAyNC0wOS0wNVQxMjo0Mjo0Mi4wMDBaIiwKICAgICAgICAgICAgImNyZWF0ZWRfYnlfcmVmIjogImlkZW50aXR5LS1iM2JjYTNjMi0xZjNkLTRiNTQtYjQ0Zi1kYWM0MmMzYThmMDEiLAogICAgICAgICAgICAib2JqZWN0X21hcmtpbmdfcmVmcyI6IFsKICAgICAgICAgICAgICAgICJtYXJraW5nLWRlZmluaXRpb24tLTYxM2YyZTI2LTQwN2QtNDhjNy05ZWNhLWI4ZTkxZGY5OWRjOSIKICAgICAgICAgICAgXQogICAgICAgIH0sCiAgICAgICAgewogICAgICAgICAgICAiaWQiOiAiYXR0YWNrLXBhdHRlcm4tLWRkMGZlYzAyLWNjNWYtNDVhYy1hYjk1LTFjNmIxZmZlYWJkMyIsCiAgICAgICAgICAgICJ0eXBlIjogImF0dGFjay1wYXR0ZXJuIiwKICAgICAgICAgICAgImNyZWF0ZWQiOiAiMjAyNC0wOS0wNVQxMjo0Mjo0Mi4wMDBaIiwKICAgICAgICAgICAgIm1vZGlmaWVkIjogIjIwMjQtMDktMDVUMTI6NDI6NDIuMDAwWiIsCiAgICAgICAgICAgICJzcGVjX3ZlcnNpb24iOiAiMi4xIiwKICAgICAgICAgICAgImNyZWF0ZWRfYnlfcmVmIjogImlkZW50aXR5LS1iM2JjYTNjMi0xZjNkLTRiNTQtYjQ0Zi1kYWM0MmMzYThmMDEiLAogICAgICAgICAgICAibmFtZSI6ICJBY3RpdmUgU2Nhbm5pbmciLAogICAgICAgICAgICAib2JqZWN0X21hcmtpbmdfcmVmcyI6IFsKICAgICAgICAgICAgICAgICJtYXJraW5nLWRlZmluaXRpb24tLTYxM2YyZTI2LTQwN2QtNDhjNy05ZWNhLWI4ZTkxZGY5OWRjOSIKICAgICAgICAgICAgXSwKICAgICAgICAgICAgImV4dGVybmFsX3JlZmVyZW5jZXMiOiBbCiAgICAgICAgICAgICAgICB7CiAgICAgICAgICAgICAgICAgICAgImV4dGVybmFsX2lkIjogIlQxNTk1IiwKICAgICAgICAgICAgICAgICAgICAic291cmNlX25hbWUiOiAibWl0cmUtYXR0YWNrIiwKICAgICAgICAgICAgICAgICAgICAidXJsIjogImh0dHBzOi8vYXR0YWNrLm1pdHJlLm9yZy90ZWNobmlxdWVzL1QxNTk1IgogICAgICAgICAgICAgICAgfQogICAgICAgICAgICBdCiAgICAgICAgfSwKICAgICAgICB7CiAgICAgICAgICAgICJpZCI6ICJhdHRhY2stcGF0dGVybi0tYmU0ODIyOTgtNWI5Yy00MDkwLTk1ZmItMDI2MzI5M2U3OTcxIiwKICAgICAgICAgICAgInR5cGUiOiAiYXR0YWNrLXBhdHRlcm4iLAogICAgICAgICAgICAiY3JlYXRlZCI6ICIyMDI0LTA5LTA1VDEyOjQyOjQyLjAwMFoiLAogICAgICAgICAgICAibW9kaWZpZWQiOiAiMjAyNC0wOS0wNVQxMjo0Mjo0Mi4wMDBaIiwKICAgICAgICAgICAgInNwZWNfdmVyc2lvbiI6ICIyLjEiLAogICAgICAgICAgICAiY3JlYXRlZF9ieV9yZWYiOiAiaWRlbnRpdHktLWIzYmNhM2MyLTFmM2QtNGI1NC1iNDRmLWRhYzQyYzNhOGYwMSIsCiAgICAgICAgICAgICJuYW1lIjogIkFjdGl2ZSBTY2FubmluZzogU2Nhbm5pbmcgSVAgQmxvY2tzIiwKICAgICAgICAgICAgIm9iamVjdF9tYXJraW5nX3JlZnMiOiBbCiAgICAgICAgICAgICAgICAibWFya2luZy1kZWZpbml0aW9uLS02MTNmMmUyNi00MDdkLTQ4YzctOWVjYS1iOGU5MWRmOTlkYzkiCiAgICAgICAgICAgIF0sCiAgICAgICAgICAgICJleHRlcm5hbF9yZWZlcmVuY2VzIjogWwogICAgICAgICAgICAgICAgewogICAgICAgICAgICAgICAgICAgICJleHRlcm5hbF9pZCI6ICJUMTU5NS4wMDEiLAogICAgICAgICAgICAgICAgICAgICJzb3VyY2VfbmFtZSI6ICJtaXRyZS1hdHRhY2siLAogICAgICAgICAgICAgICAgICAgICJ1cmwiOiAiaHR0cHM6Ly9hdHRhY2subWl0cmUub3JnL3RlY2huaXF1ZXMvVDE1OTUvMDAxIgogICAgICAgICAgICAgICAgfQogICAgICAgICAgICBdCiAgICAgICAgfSwKICAgICAgICB7CiAgICAgICAgICAgICJpZCI6ICJhdHRhY2stcGF0dGVybi0tNmY3N2YwNTgtOTJiNi00M2E0LTgwMTctZjA3MWY5ZGQ4ZTc4IiwKICAgICAgICAgICAgInR5cGUiOiAiYXR0YWNrLXBhdHRlcm4iLAogICAgICAgICAgICAiY3JlYXRlZCI6ICIyMDI0LTA5LTA1VDEyOjQyOjQyLjAwMFoiLAogICAgICAgICAgICAibW9kaWZpZWQiOiAiMjAyNC0wOS0wNVQxMjo0Mjo0Mi4wMDBaIiwKICAgICAgICAgICAgInNwZWNfdmVyc2lvbiI6ICIyLjEiLAogICAgICAgICAgICAiY3JlYXRlZF9ieV9yZWYiOiAiaWRlbnRpdHktLWIzYmNhM2MyLTFmM2QtNGI1NC1iNDRmLWRhYzQyYzNhOGYwMSIsCiAgICAgICAgICAgICJuYW1lIjogIkFjdGl2ZSBTY2FubmluZzogVnVsbmVyYWJpbGl0eSBTY2FubmluZyIsCiAgICAgICAgICAgICJvYmplY3RfbWFya2luZ19yZWZzIjogWwogICAgICAgICAgICAgICAgIm1hcmtpbmctZGVmaW5pdGlvbi0tNjEzZjJlMjYtNDA3ZC00OGM3LTllY2EtYjhlOTFkZjk5ZGM5IgogICAgICAgICAgICBdLAogICAgICAgICAgICAiZXh0ZXJuYWxfcmVmZXJlbmNlcyI6IFsKICAgICAgICAgICAgICAgIHsKICAgICAgICAgICAgICAgICAgICAiZXh0ZXJuYWxfaWQiOiAiVDE1OTUuMDAyIiwKICAgICAgICAgICAgICAgICAgICAic291cmNlX25hbWUiOiAibWl0cmUtYXR0YWNrIiwKICAgICAgICAgICAgICAgICAgICAidXJsIjogImh0dHBzOi8vYXR0YWNrLm1pdHJlLm9yZy90ZWNobmlxdWVzL1QxNTk1LzAwMiIKICAgICAgICAgICAgICAgIH0KICAgICAgICAgICAgXQogICAgICAgIH0sCiAgICAgICAgewogICAgICAgICAgICAiaWQiOiAiYXR0YWNrLXBhdHRlcm4tLWViM2
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "imported-sample",
|
||
|
|
"timestamp": "1725608681",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "attachment",
|
||
|
|
"uuid": "ed2d4f7d-7a83-430d-ae23-b577eb3c8765",
|
||
|
|
"value": "AA24-249A-Russian-Military-Cyber-Actors-Target-US-and-Global-Critical-Infrastructure.stix_.json"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Other",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "format",
|
||
|
|
"timestamp": "1725608681",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "text",
|
||
|
|
"uuid": "872f2361-c641-4db0-a671-53f6f45f91f5",
|
||
|
|
"value": "2.1"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "Report object to describe a report along with its metadata.",
|
||
|
|
"meta-category": "misc",
|
||
|
|
"name": "report",
|
||
|
|
"template_uuid": "70a68471-df22-4e3f-aa1a-5a3be19f82df",
|
||
|
|
"template_version": "8",
|
||
|
|
"timestamp": "1725608768",
|
||
|
|
"uuid": "c81a4e0d-b5d6-4779-9299-a85efdb5c03f",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "External analysis",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "link",
|
||
|
|
"timestamp": "1725608768",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "link",
|
||
|
|
"uuid": "5ddcb4a7-2610-457b-aa83-2707a391faa8",
|
||
|
|
"value": "https://www.cisa.gov/sites/default/files/2024-09/aa24-249a-russian-military-cyber-actors-target-us-and-global-critical-infrastructure.pdf"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Other",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "summary",
|
||
|
|
"timestamp": "1725608768",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "text",
|
||
|
|
"uuid": "05e1f9b0-d784-40b7-a7be-3274ad23c51e",
|
||
|
|
"value": "Russian Military Cyber Actors Target US and Global Critical Infrastructure"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Other",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "type",
|
||
|
|
"timestamp": "1725608768",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "text",
|
||
|
|
"uuid": "9e961ccb-2c9b-4e5b-8092-09ae661ed9ca",
|
||
|
|
"value": "Alert"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "External analysis",
|
||
|
|
"comment": "",
|
||
|
|
"data": "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
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "report-file",
|
||
|
|
"timestamp": "1725608768",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "attachment",
|
||
|
|
"uuid": "0c4ae0c2-61a9-458b-b85e-075dbc54f90f",
|
||
|
|
"value": "aa24-249a-russian-military-cyber-actors-target-us-and-global-critical-infrastructure.pdf"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"description": "Report object to describe a report along with its metadata.",
|
||
|
|
"meta-category": "misc",
|
||
|
|
"name": "report",
|
||
|
|
"template_uuid": "70a68471-df22-4e3f-aa1a-5a3be19f82df",
|
||
|
|
"template_version": "8",
|
||
|
|
"timestamp": "1725608825",
|
||
|
|
"uuid": "ef754d1a-1b71-471b-b4c8-c7b200dc0fb7",
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "External analysis",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "link",
|
||
|
|
"timestamp": "1725608826",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "link",
|
||
|
|
"uuid": "e46251d4-652a-4100-94d0-ff204026f66c",
|
||
|
|
"value": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-249a"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Other",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "summary",
|
||
|
|
"timestamp": "1725608826",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "text",
|
||
|
|
"uuid": "1ca91bb5-3f5f-497b-bf19-8f55d72c1cf4",
|
||
|
|
"value": "The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and National Security Agency (NSA) assess that cyber actors affiliated with the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center (Unit 29155) are responsible for computer network operations against global targets for the purposes of espionage, sabotage, and reputational harm since at least 2020. GRU Unit 29155 cyber actors began deploying the destructive WhisperGate malware against multiple Ukrainian victim organizations as early as January 13, 2022. These cyber actors are separate from other known and more established GRU-affiliated cyber groups, such as Unit 26165 and Unit 74455."
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Other",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"object_relation": "title",
|
||
|
|
"timestamp": "1725608826",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "text",
|
||
|
|
"uuid": "fdf0898d-d55e-4744-a92b-2bb4ae57c8cb",
|
||
|
|
"value": "Russian Military Cyber Actors Target US and Global Critical Infrastructure"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "Other",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": true,
|
||
|
|
"object_relation": "type",
|
||
|
|
"timestamp": "1725608826",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "text",
|
||
|
|
"uuid": "2eadb775-b12f-40a0-bd72-6a8909d957ef",
|
||
|
|
"value": "Alert"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|