{"Event":{"info":"OSINT - Saudi Arabia's 'Game of Thobes'","Tag":[{"colour":"#004646","exportable":true,"name":"type:OSINT"},{"colour":"#ffffff","exportable":true,"name":"tlp:white"}],"publish_timestamp":"0","timestamp":"1510922476","Object":[{"comment":"","template_uuid":"8ec8c911-ddbe-4f5b-895b-fbff70c42a60","uuid":"5a09ab2f-39b8-490c-84fb-4daf950d210f","sharing_group_id":"0","timestamp":"1510583087","description":"Microblog post like a Twitter tweet or a post on a Facebook wall.","template_version":"3","Attribute":[{"comment":"","category":"Other","uuid":"5a09ab2f-fb18-4691-ad33-4c74950d210f","timestamp":"1510583087","to_ids":false,"value":"\"Saudi Arabia's 'Game of Thobes'.doc\u05f3\" submitted from TR, CVE-2017-11826, \r\nC2: 45.76.106[.]149 , 45.76.36[.]243 , saudiedi.toh[.]info\r\n\r\nMore details in Raw Threat Intelligence:\r\n\r\n(link: https://docs.google.com/document/d/1_nEWAmec3bKBddv30UPXJMiN-F0Ojuhfsmvk6KpFq0Q/edit#heading=h.iixpbs2pcjjp) docs.google.com/document/d/1_n\u2026","disable_correlation":false,"object_relation":"post","type":"text"},{"comment":"","category":"Other","uuid":"5a09ab2f-e0cc-4dbb-a6f9-47e2950d210f","timestamp":"1510583087","to_ids":false,"value":"Twitter","disable_correlation":true,"object_relation":"type","type":"text"},{"comment":"","category":"External analysis","uuid":"5a09ab2f-db38-4066-9878-4865950d210f","timestamp":"1510583087","to_ids":true,"value":"https://mobile.twitter.com/ClearskySec/status/929998314002673666","disable_correlation":false,"object_relation":"link","type":"url"},{"comment":"","category":"Other","uuid":"5a09ab2f-13c0-4417-9869-42c4950d210f","timestamp":"1510583087","to_ids":false,"value":"2017/11/13","disable_correlation":false,"object_relation":"creation-date","type":"datetime"},{"comment":"","category":"Other","uuid":"5a09ab2f-9960-4d5f-a028-4b36950d210f","timestamp":"1510583087","to_ids":false,"value":"@ClearskySec","disable_correlation":false,"object_relation":"username","type":"text"}],"distribution":"5","meta-category":"misc","name":"microblog"},{"comment":"","template_uuid":"688c46fb-5edb-40a3-8273-1af7923e2215","uuid":"5a09abf7-7304-4831-b206-46b8950d210f","sharing_group_id":"0","timestamp":"1510583287","description":"File object describing a file with meta-information","template_version":"4","Attribute":[{"comment":"","category":"Payload delivery","uuid":"5a09abf7-76f0-4ca2-aa9c-4db4950d210f","timestamp":"1510583287","to_ids":true,"value":"aede654e77e92dbd77ca512e19f495b8","disable_correlation":false,"object_relation":"md5","type":"md5"},{"comment":"","category":"Payload delivery","uuid":"5a09abf7-952c-4203-934c-423d950d210f","timestamp":"1510583287","to_ids":true,"value":"2017-11-13 \u201cSaudi Arabia's 'Game of Thobes'.doc","disable_correlation":false,"object_relation":"filename","type":"filename"},{"comment":"","category":"Payload delivery","uuid":"5a09abf7-970c-4251-b73f-42d6950d210f","timestamp":"1510583287","to_ids":true,"value":"aed93c002574f25dabd1859f080203a2c8f332e92c80db9aa983316695d938d3","disable_correlation":false,"object_relation":"sha256","type":"sha256"},{"comment":"","category":"Payload delivery","uuid":"5a09abf7-cfc0-499a-8a40-4f86950d210f","timestamp":"1510583287","to_ids":true,"value":"d9fac68b6c49c485675d9141f375799d10572999","disable_correlation":false,"object_relation":"sha1","type":"sha1"}],"distribution":"5","meta-category":"file","name":"file"},{"comment":"","template_uuid":"688c46fb-5edb-40a3-8273-1af7923e2215","uuid":"5a09ad27-2430-434c-ad1b-47ea950d210f","sharing_group_id":"0","timestamp":"1510583591","description":"File object describing a file with meta-information","template_version":"4","Attribute":[{"comment":"","category":"Payload delivery","uuid":"5a09ad28-2694-4e83-a1a5-498e950d210f","timestamp":"1510583592","to_ids":true,"value":"b76f4c8c22b84600ac3cff64dadfaf8b","d
