55 lines
1.4 KiB
JSON
55 lines
1.4 KiB
JSON
|
{
|
||
|
|
"Event": {
|
||
|
|
"analysis": "2",
|
||
|
|
"date": "2018-06-05",
|
||
|
|
"extends_uuid": "",
|
||
|
|
"info": "#TrickBot banker updates to group_tag \"\"tt0002\" version \"1000206\"",
|
||
|
|
"publish_timestamp": "1528219683",
|
||
|
|
"published": true,
|
||
|
|
"threat_level_id": "2",
|
||
|
|
"timestamp": "1528204849",
|
||
|
|
"uuid": "5b167b4f-5038-42e4-9a45-dfd00acd0835",
|
||
|
|
"Orgc": {
|
||
|
|
"name": "Synovus Financial",
|
||
|
|
"uuid": "5a68c02d-959c-4c8a-a571-0dcac0a8060a"
|
||
|
|
},
|
||
|
|
"Tag": [
|
||
|
|
{
|
||
|
|
"colour": "#ffffff",
|
||
|
|
"name": "tlp:white"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#0088cc",
|
||
|
|
"name": "misp-galaxy:tool=\"Trick Bot\""
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"colour": "#003860",
|
||
|
|
"name": "osint:source-type=\"pastie-website\""
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"category": "External analysis",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1528204808",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "link",
|
||
|
|
"uuid": "5b168e08-0d88-4b58-bef0-da4c0acd0835",
|
||
|
|
"value": "https://twitter.com/VK_Intel/status/1003641498389352454"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"category": "External analysis",
|
||
|
|
"comment": "",
|
||
|
|
"deleted": false,
|
||
|
|
"disable_correlation": false,
|
||
|
|
"timestamp": "1528204834",
|
||
|
|
"to_ids": false,
|
||
|
|
"type": "link",
|
||
|
|
"uuid": "5b168e22-dd50-4039-915c-def70acd0835",
|
||
|
|
"value": "https://pastebin.com/JM2Fd81G"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|