117 lines
98 KiB
JSON
117 lines
98 KiB
JSON
|
{
|
||
|
|
"type": "bundle",
|
||
|
|
"id": "bundle--5b366652-b0a4-4faa-a58b-c6040acd0835",
|
||
|
|
"objects": [
|
||
|
|
{
|
||
|
|
"type": "identity",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "identity--5a68c02d-959c-4c8a-a571-0dcac0a8060a",
|
||
|
|
"created": "2018-06-29T17:17:09.000Z",
|
||
|
|
"modified": "2018-06-29T17:17:09.000Z",
|
||
|
|
"name": "Synovus Financial",
|
||
|
|
"identity_class": "organization"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "report",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "report--5b366652-b0a4-4faa-a58b-c6040acd0835",
|
||
|
|
"created_by_ref": "identity--5a68c02d-959c-4c8a-a571-0dcac0a8060a",
|
||
|
|
"created": "2018-06-29T17:17:09.000Z",
|
||
|
|
"modified": "2018-06-29T17:17:09.000Z",
|
||
|
|
"name": "Malicious Emails Outlook Themed",
|
||
|
|
"published": "2018-06-29T17:17:21Z",
|
||
|
|
"object_refs": [
|
||
|
|
"indicator--5b366660-f6d8-42dd-bf03-6da00acd0835",
|
||
|
|
"indicator--5b3666d7-69ac-4b08-9185-69b60acd0835",
|
||
|
|
"observed-data--5b366950-aaa8-4a3c-ab98-25690acd0835",
|
||
|
|
"file--5b366950-aaa8-4a3c-ab98-25690acd0835",
|
||
|
|
"artifact--5b366950-aaa8-4a3c-ab98-25690acd0835"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"Threat-Report",
|
||
|
|
"misp:tool=\"MISP-STIX-Converter\"",
|
||
|
|
"veris:action:social:variety=\"Phishing\"",
|
||
|
|
"veris:discovery_method=\"Int - NIDS\"",
|
||
|
|
"veris:attribute:confidentiality:data:variety=\"Credentials\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5b366660-f6d8-42dd-bf03-6da00acd0835",
|
||
|
|
"created_by_ref": "identity--5a68c02d-959c-4c8a-a571-0dcac0a8060a",
|
||
|
|
"created": "2018-06-29T17:03:33.000Z",
|
||
|
|
"modified": "2018-06-29T17:03:33.000Z",
|
||
|
|
"pattern": "[email-message:from_ref.value = 'a-huset.off@trollhattan.se']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2018-06-29T17:03:33Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Payload delivery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"email-src\"",
|
||
|
|
"misp:category=\"Payload delivery\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "indicator",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "indicator--5b3666d7-69ac-4b08-9185-69b60acd0835",
|
||
|
|
"created_by_ref": "identity--5a68c02d-959c-4c8a-a571-0dcac0a8060a",
|
||
|
|
"created": "2018-06-29T17:05:38.000Z",
|
||
|
|
"modified": "2018-06-29T17:05:38.000Z",
|
||
|
|
"pattern": "[url:value = 'https://outlookindex11000.weebly.com/']",
|
||
|
|
"pattern_type": "stix",
|
||
|
|
"pattern_version": "2.1",
|
||
|
|
"valid_from": "2018-06-29T17:05:38Z",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "misp-category",
|
||
|
|
"phase_name": "Network activity"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"url\"",
|
||
|
|
"misp:category=\"Network activity\"",
|
||
|
|
"misp:to_ids=\"True\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "observed-data",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "observed-data--5b366950-aaa8-4a3c-ab98-25690acd0835",
|
||
|
|
"created_by_ref": "identity--5a68c02d-959c-4c8a-a571-0dcac0a8060a",
|
||
|
|
"created": "2018-06-29T17:16:00.000Z",
|
||
|
|
"modified": "2018-06-29T17:16:00.000Z",
|
||
|
|
"first_observed": "2018-06-29T17:16:00Z",
|
||
|
|
"last_observed": "2018-06-29T17:16:00Z",
|
||
|
|
"number_observed": 1,
|
||
|
|
"object_refs": [
|
||
|
|
"file--5b366950-aaa8-4a3c-ab98-25690acd0835",
|
||
|
|
"artifact--5b366950-aaa8-4a3c-ab98-25690acd0835"
|
||
|
|
],
|
||
|
|
"labels": [
|
||
|
|
"misp:type=\"attachment\"",
|
||
|
|
"misp:category=\"Support Tool\""
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "file",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "file--5b366950-aaa8-4a3c-ab98-25690acd0835",
|
||
|
|
"name": "screenshot.jpg",
|
||
|
|
"content_ref": "artifact--5b366950-aaa8-4a3c-ab98-25690acd0835"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "artifact",
|
||
|
|
"spec_version": "2.1",
|
||
|
|
"id": "artifact--5b366950-aaa8-4a3c-ab98-25690acd0835",
|
||
|
|
"payload_bin": "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
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|