323 lines
9.4 KiB
JSON
323 lines
9.4 KiB
JSON
|
{
|
||
|
"Event": {
|
||
|
"analysis": "2",
|
||
|
"date": "2016-02-02",
|
||
|
"extends_uuid": "",
|
||
|
"info": "OSINT phishing sites and php kits - February 2016 - Part 1 by TechHelpList",
|
||
|
"publish_timestamp": "1454402940",
|
||
|
"published": true,
|
||
|
"threat_level_id": "4",
|
||
|
"timestamp": "1454402927",
|
||
|
"uuid": "56b06cf0-ac30-4472-93dd-44ce950d210f",
|
||
|
"Orgc": {
|
||
|
"name": "CthulhuSPRL.be",
|
||
|
"uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f"
|
||
|
},
|
||
|
"Tag": [
|
||
|
{
|
||
|
"colour": "#004646",
|
||
|
"name": "type:OSINT"
|
||
|
},
|
||
|
{
|
||
|
"colour": "#ffffff",
|
||
|
"name": "tlp:white"
|
||
|
},
|
||
|
{
|
||
|
"colour": "#0c9100",
|
||
|
"name": "admiralty-scale:source-reliability=\"f\""
|
||
|
},
|
||
|
{
|
||
|
"colour": "#0fc000",
|
||
|
"name": "admiralty-scale:information-credibility=\"2\""
|
||
|
}
|
||
|
],
|
||
|
"Attribute": [
|
||
|
{
|
||
|
"category": "External analysis",
|
||
|
"comment": "Links",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402919",
|
||
|
"to_ids": false,
|
||
|
"type": "link",
|
||
|
"uuid": "56b06d67-3584-49a9-a1bf-426a950d210f",
|
||
|
"value": "https://techhelplist.com/pastes/1037-phishing-sites-and-php-kits-february-2016-part-1"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402919",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d67-c7a0-472d-aeab-4c21950d210f",
|
||
|
"value": "icloud-apple-ios91.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402919",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d67-8f6c-4ff0-bd93-4092950d210f",
|
||
|
"value": "icloud-appleid-photos.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402920",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d68-e890-4092-81b1-4827950d210f",
|
||
|
"value": "icloud-applend.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402920",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d68-4468-4212-b71e-4212950d210f",
|
||
|
"value": "icloud-lidt.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402920",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d68-b604-4314-bb2b-4175950d210f",
|
||
|
"value": "icloud-tyce.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402921",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d69-5030-4591-9cb4-4ddf950d210f",
|
||
|
"value": "icloud-yunid-apple.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402921",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d69-30fc-4a15-8fa1-4df0950d210f",
|
||
|
"value": "icloudidjh.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402921",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d69-d534-4130-80a6-48cb950d210f",
|
||
|
"value": "appie-find.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402922",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6a-684c-40e6-a4e2-4d42950d210f",
|
||
|
"value": "apple-bb.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402922",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6a-1798-42c0-8dad-4161950d210f",
|
||
|
"value": "apple-bu.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402922",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6a-99d4-43d1-a8b9-4235950d210f",
|
||
|
"value": "apple-gay.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402923",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6b-a894-4b36-88ec-4df8950d210f",
|
||
|
"value": "apple-iappleid.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402923",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6b-d5f8-469c-8c2c-45f8950d210f",
|
||
|
"value": "apple-icloud-can.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402923",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6b-a910-4c28-8b1f-4b5b950d210f",
|
||
|
"value": "apple-icloud-ns.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402924",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6c-d9cc-49c7-bb1b-45e1950d210f",
|
||
|
"value": "apple-icloud-safe.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402924",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6c-4be0-45aa-ad15-46b3950d210f",
|
||
|
"value": "apple-ip-sir.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402924",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6c-88f8-4d45-86f2-467f950d210f",
|
||
|
"value": "apple-iphonegps.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402925",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6d-e0a0-446c-bdd6-4ac5950d210f",
|
||
|
"value": "apple-lcnappe.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402925",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6d-8ac0-4042-9998-4e21950d210f",
|
||
|
"value": "apple-lidt.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402925",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6d-0f5c-4c4c-a367-497c950d210f",
|
||
|
"value": "apple-mor.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402925",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6d-d314-4562-a408-41f7950d210f",
|
||
|
"value": "apple-my-login.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402926",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6e-ff44-462c-8d4f-4620950d210f",
|
||
|
"value": "apple-sye.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402926",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6e-ffdc-4430-aeae-4c17950d210f",
|
||
|
"value": "apple-yet.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402926",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6e-ee30-472a-a427-44e0950d210f",
|
||
|
"value": "appleid-icloud-vip.com"
|
||
|
},
|
||
|
{
|
||
|
"category": "Network activity",
|
||
|
"comment": "Network IOCs",
|
||
|
"deleted": false,
|
||
|
"disable_correlation": false,
|
||
|
"timestamp": "1454402927",
|
||
|
"to_ids": true,
|
||
|
"type": "domain",
|
||
|
"uuid": "56b06d6f-cafc-48a0-9829-45dd950d210f",
|
||
|
"value": "itunes-lidt.com"
|
||
|
}
|
||
|
]
|
||
|
}
|
||
|
}
|