2023-04-21 13:25:09 +00:00
|
|
|
{
|
2023-12-14 14:30:15 +00:00
|
|
|
"Event": {
|
|
|
|
|
"analysis": "0",
|
|
|
|
|
"date": "2018-08-15",
|
|
|
|
|
"extends_uuid": "",
|
|
|
|
|
"info": "OSINT - \u00e8\u201a\u0161\u00e8\u201e\u2018\u00e8\u2122\u00ab\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00ef\u00bc\u02c6APT-C-35\u00ef\u00bc\u2030\u00e7\u00a7\u00bb\u00e5\u0160\u00a8\u00e7\u00ab\u00af\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e6\u00b4\u00bb\u00e5\u0160\u00a8\u00e6\u008f\u00ad\u00e9\u0153\u00b2",
|
|
|
|
|
"publish_timestamp": "1534358242",
|
|
|
|
|
"published": true,
|
|
|
|
|
"threat_level_id": "3",
|
|
|
|
|
"timestamp": "1534358234",
|
|
|
|
|
"uuid": "5b746d63-8c10-46b5-8c1a-49ec02de0b81",
|
|
|
|
|
"Orgc": {
|
|
|
|
|
"name": "CIRCL",
|
|
|
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
|
|
|
},
|
|
|
|
|
"Tag": [
|
|
|
|
|
{
|
|
|
|
|
"colour": "#ffffff",
|
2024-04-05 12:15:17 +00:00
|
|
|
"local": false,
|
2023-12-14 14:30:15 +00:00
|
|
|
"name": "tlp:white",
|
|
|
|
|
"relationship_type": ""
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#0088cc",
|
2024-04-05 12:15:17 +00:00
|
|
|
"local": false,
|
2023-12-14 14:30:15 +00:00
|
|
|
"name": "misp-galaxy:threat-actor=\"APT-C-35\"",
|
|
|
|
|
"relationship_type": ""
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534356900",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5b746da4-59a8-4ef5-80df-d1f902de0b81",
|
|
|
|
|
"value": "https://ti.360.net/blog/articles/analysis-of-donot-andriod-sample/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534356929",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "5b746dc1-7888-45bd-8cc2-44c102de0b81",
|
|
|
|
|
"value": "\u00e4\u00bc\u00a0\u00e7\u00bb\u0178\u00e7\u0161\u201eAPT\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e4\u00b8\u00bb\u00e8\u00a6\u0081\u00e6\u02dc\u00af\u00e9\u2019\u02c6\u00e5\u00af\u00b9PC\u00e7\u00ab\u00af\u00e8\u00bf\u203a\u00e8\u00a1\u0152\u00ef\u00bc\u0152\u00e8\u20ac\u0152\u00e9\u0161\u008f\u00e7\u009d\u20ac\u00e6\u2122\u00ba\u00e8\u0192\u00bd\u00e6\u2030\u2039\u00e6\u0153\u00ba\u00e5\u2019\u0152\u00e7\u00a7\u00bb\u00e5\u0160\u00a8\u00e7\u00bd\u2018\u00e7\u00bb\u0153\u00e5\u0153\u00a8\u00e4\u00b8\u2013\u00e7\u2022\u0152\u00e8\u0152\u0192\u00e5\u203a\u00b4\u00e5\u2020\u2026\u00e7\u0161\u201e\u00e6\u2122\u00ae\u00e5\u008f\u0160\u00e5\u008f\u2018\u00e5\u00b1\u2022\u00ef\u00bc\u0152\u00e8\u00b6\u0160\u00e6\u009d\u00a5\u00e8\u00b6\u0160\u00e5\u00a4\u0161\u00e9\u00bb\u2018\u00e5\u00ae\u00a2\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00e7\u0161\u201e\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e7\u203a\u00ae\u00e6\u00a0\u2021\u00e4\u00b9\u0178\u00e8\u00bf\u2026\u00e9\u20ac\u0178\u00e8\u201d\u201c\u00e5\u00bb\u00b6\u00e5\u02c6\u00b0\u00e7\u00a7\u00bb\u00e5\u0160\u00a8\u00e7\u00ab\u00af\u00ef\u00bc\u0152\u00e7\u201d\u0161\u00e8\u2021\u00b3\u00e5\u2021\u00ba\u00e7\u017d\u00b0\u00e5\u2021\u00ba\u00e5\u2019\u0152PC\u00e7\u00ab\u00af\u00e7\u00bb\u201c\u00e5\u0090\u02c6\u00e7\u0161\u201e\u00e8\u00b6\u2039\u00e5\u0160\u00bf\u00e3\u20ac\u201a\u00e8\u00bf\u2018\u00e5\u2021\u00a0\u00e5\u00b9\u00b4\u00e8\u00a2\u00ab\u00e5\u203a\u00bd\u00e5\u2020\u2026\u00e5\u00a4\u2013\u00e5\u00ae\u2030\u00e5\u2026\u00a8\u00e5\u017d\u201a\u00e5\u2022\u2020\u00e9\u2122\u2020\u00e7\u00bb\u00ad\u00e6\u0160\u00ab\u00e9\u0153\u00b2\u00e7\u0161\u201eFancy Bear\u00e3\u20ac\u0081Lazarus\u00e3\u20ac\u0081Operation Manul\u00e3\u20ac\u0081\u00e6\u2018\u00a9\u00e8\u00af\u0192\u00e8\u008d\u2030\u00e3\u20ac\u0081\u00e9\u00bb\u201e\u00e9\u2021\u2018\u00e9\u00bc\u00a0\u00e7\u00ad\u2030\u00e5\u00a4\u0161\u00e4\u00b8\u00aa\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00e6\u2014\u00a0\u00e7\u2013\u2018\u00e5\u008d\u00b0\u00e8\u00af\u0081\u00e4\u00ba\u2020\u00e8\u00bf\u2122\u00e7\u201a\u00b9\u00e3\u20ac\u201a\u00e8\u00bf\u2018\u00e6\u0153\u0178\u00ef\u00bc\u0152360\u00e7\u0192\u00bd\u00e7\u0081\u00ab\u00e5\u00ae\u017e\u00e9\u00aa\u0152\u00e5\u00ae\u00a4\u00e5\u008f\u2018\u00e7\u017d\u00b0\u00e8\u201a\u0161\u00e8\u201e\u2018\u00e8\u2122\u00ab\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00ef\u00bc\u02c6APT-C-35\u00ef\u00bc\u2030\u00e6\u0153\u20ac\u00e6\u2013\u00b0\u00e7\u0161\u201e\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e5\u00b7\u00b2\u00e6\u0160\u0160\u00e7\u00a7\u00bb\u00e5\u0160\u00a8\u00e7\u00ab\u00af\u00e4\u00b9\u0178\u00e5\u0160\u00a0\u00e5\u2026\u00a5\u00e5\u02c6\u00b0\u00e5\u2026\u00b6\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e7\u203a\u00ae\u00e6\u00a0\u2021\u00e4\u00b8\u00ad\u00e3\u20ac\u201a\r\n\r\n\u00e8\u201a\u0161\u00e8\u201e\u2018\u00e8\u2122\u00ab\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00ef\u00bc\u02c6APT-C-35, \u00e5\u0090\u017d\u00e6\u2013\u2021\u00e7\u00bb\u0178\u00e7\u00a7\u00b0\u00e8\u201a\u0161\u00e8\u201e\u2018\u00e8\u2122\u00ab\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00ef\u00bc\u2030\u00ef\u00bc\u0152\u00e5\u008f\u02c6\u00e7\u00a7\u00b0Donot\u00ef\u00bc\u0152\u00e6\u02dc\u00af\u00e4\u00b8\u20ac\u00e4\u00b8\u00aa\u00e9\u2019\u02c6\u00e5\u00af\u00b9\u00e5\u2026\u2039\u00e4\u00bb\u20ac\u00e7\u00b1\u00b3\u00e5\u00b0\u201d\u00e5\u0153\u00b0\u00e5\u0152\u00ba\u00e7\u203a\u00b8\u00e5\u2026\u00b3\u00e5\u203a\u00bd\u00e5\u00ae\u00b6\u00e7\u0161\u201e\u00e6\u201d\u00bf\u00e5\u00ba\u0153\u00e6\u0153\u00ba\u00e6\u017e\u201e\u00e7\u00ad\u2030\u00e9\u00a2\u2020\u00e5\u0178\u0178\u00e8\u00bf\u203a\u00e8\u00a1\u0152\u00e7\u00bd\u2018\u00e7\u00bb\u0153\u00e9\u2014\u00b4\u00e8\u00b0\u008d\u00e6\u00b4\u00bb\u00e5\u0160\u00a8\u00ef\u00bc\u0152\u00e4\u00bb\u00a5\u00e7\u00aa\u0192\u00e5\u008f\u2013\u00e6\u2022\u008f\u00e6\u201e\u0178\u00e4\u00bf\u00a1\u00e6\u0081\u00af\u00e4\u00b8\u00ba\u00e4\u00b8\u00bb\u00e7\u0161\u201e\u00e6\u201d\u00bb\u00e5\u2021\u00bb\u00e7\u00bb\u201e\u00e7\u00bb\u2021\u00e3\u20ac\u201a\u00e8\u00af\u00a5\u00e7\u00bb\u201e\u00e7\u
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534356995",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e03-43d4-4b3b-86ba-4a5002de0b81",
|
|
|
|
|
"value": "4efdbdcb3c341f86c4ff40764cd6468f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534356996",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e04-c9e0-4a22-a659-46e402de0b81",
|
|
|
|
|
"value": "89b04c7e0b896a30d09a138b6bc3e828"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534356996",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e04-7310-4d3f-a486-490e02de0b81",
|
|
|
|
|
"value": "a1827a948b5d14fb79c87e8d9ec74082"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534356997",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e05-1a38-46f6-bb9a-4a1c02de0b81",
|
|
|
|
|
"value": "7a2b1c70213ad493a053a1e252c00a54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534356997",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e05-43b8-4199-8f50-40b002de0b81",
|
|
|
|
|
"value": "fc385c0f00313ad3ba08576a28ca9b66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534356997",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e05-e1a8-421d-998a-496502de0b81",
|
|
|
|
|
"value": "843e633b026c43b63b938effa4a36228"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534356998",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e06-b2fc-4514-b893-443d02de0b81",
|
|
|
|
|
"value": "b7e6a740d8f1229142b5cebb1c22b8b1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534356998",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e06-7868-4079-b200-417602de0b81",
|
|
|
|
|
"value": "c2da8cc0725558304dfd2a59386373f7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534356999",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e07-be70-4961-8ea9-452d02de0b81",
|
|
|
|
|
"value": "99ce8b2a17f7961a6b88ba0a7e037b5a"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534356999",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e07-fcc0-4802-9062-425102de0b81",
|
|
|
|
|
"value": "1b3693237173c8b7ee2942b69812eb47"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534356999",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e07-b26c-4a13-ad6b-4e1a02de0b81",
|
|
|
|
|
"value": "7b00d9246335fd3fbb2cac2f2fe9354b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357000",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e08-1ec8-42b3-a0ad-481f02de0b81",
|
|
|
|
|
"value": "2a1de3eefb43479bfbc53f677902c993"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357000",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e08-a2b4-487b-90cf-4d5e02de0b81",
|
|
|
|
|
"value": "74aa0abb618f9b898aa293cdbd499a4b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357001",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e09-7cfc-4df6-96f3-450602de0b81",
|
|
|
|
|
"value": "92d79d7a27966ea4668e347fe9a97c62"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357001",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e09-b750-4f9f-ba62-4e3c02de0b81",
|
|
|
|
|
"value": "ca9bc074668bb04552610ee835a0e9cf"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357002",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e0a-77cc-41f9-8731-4fc202de0b81",
|
|
|
|
|
"value": "28d30f19e96200bcf5067d5fd3b69439"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357002",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e0a-0428-4b49-9a3f-4d5102de0b81",
|
|
|
|
|
"value": "be4117d154339e7469d7cbabf7d36dd1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357003",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e0b-6f64-4b38-b926-495702de0b81",
|
|
|
|
|
"value": "397ed4c4c372fe50588123d6885497c3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357003",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e0b-3868-4c5a-bf11-4ec202de0b81",
|
|
|
|
|
"value": "e5f774df501c631b0c14f3cf32e54dfb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357004",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e0c-2494-4fdf-ae99-405702de0b81",
|
|
|
|
|
"value": "47fc61cd1d939c99c000afe430451952"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357004",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5b746e0c-1efc-4744-8e16-470a02de0b81",
|
|
|
|
|
"value": "e8b68543c78b3dc27c7951e1dc8fae89"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357036",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5b746e2c-1fc4-40d0-943c-e0ae02de0b81",
|
|
|
|
|
"value": "138.68.81.74"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357037",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5b746e2d-b2d8-4d82-9e6e-e0ae02de0b81",
|
|
|
|
|
"value": "139.59.46.35"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357037",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5b746e2d-6834-481c-a42a-e0ae02de0b81",
|
|
|
|
|
"value": "206.189.42.61"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357038",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5b746e2e-1298-49ca-a655-e0ae02de0b81",
|
|
|
|
|
"value": "46.101.204.168"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357038",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5b746e2e-2a38-478c-811d-e0ae02de0b81",
|
|
|
|
|
"value": "85.204.74.117"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357038",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "ip-dst",
|
|
|
|
|
"uuid": "5b746e2e-400c-4a5e-9bec-e0ae02de0b81",
|
|
|
|
|
"value": "95.85.15.131"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357039",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "5b746e2f-8f90-4a76-8a3c-e0ae02de0b81",
|
|
|
|
|
"value": "godspeed.geekgalaxy.com"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1534357039",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "hostname",
|
|
|
|
|
"uuid": "5b746e2f-6e34-462c-8646-e0ae02de0b81",
|
|
|
|
|
"value": "jasper.drivethrough.top"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Object": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357248",
|
|
|
|
|
"uuid": "ca5d681d-33b4-4ec9-96e6-febd3f3a722b",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "ca5d681d-33b4-4ec9-96e6-febd3f3a722b",
|
|
|
|
|
"referenced_uuid": "117215e1-1d52-4fff-bc8d-0979cfbd51cf",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357294",
|
|
|
|
|
"uuid": "5b746f2e-7254-464e-93df-42a502de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357245",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "9fd16954-9d7b-4417-8bf3-86eb1788746a",
|
|
|
|
|
"value": "74aa0abb618f9b898aa293cdbd499a4b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357245",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "5cbac32c-3933-43c0-9696-33059fced607",
|
|
|
|
|
"value": "e635e0bb63d555edf1f2ae52cb7747b616398542"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357246",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "bc1d800c-f62a-41c0-bbfc-6fc0e1d66c47",
|
|
|
|
|
"value": "9ef7031c21675175d39c99e0afa32d9e1a99b53572ae014126bd8374ead4f708"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357246",
|
|
|
|
|
"uuid": "117215e1-1d52-4fff-bc8d-0979cfbd51cf",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357246",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "481821a5-e70b-492c-ac64-d73c570f07d5",
|
|
|
|
|
"value": "2018-08-15T16:45:03"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357247",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "8b02a5c1-b2ee-4d90-a8de-1ef179812ce0",
|
|
|
|
|
"value": "https://www.virustotal.com/file/9ef7031c21675175d39c99e0afa32d9e1a99b53572ae014126bd8374ead4f708/analysis/1534351503/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357247",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "d6a5ad70-713e-41c5-a05c-c27b70f1c45d",
|
|
|
|
|
"value": "31/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357250",
|
|
|
|
|
"uuid": "47daea83-d20e-4064-98ff-6a61429bb3f5",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "47daea83-d20e-4064-98ff-6a61429bb3f5",
|
|
|
|
|
"referenced_uuid": "a8f72315-ebf8-49de-94f3-af53b9fbaa1e",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357294",
|
|
|
|
|
"uuid": "5b746f2e-891c-4b35-a289-4a2902de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357247",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "e3be3323-29d3-4141-8dfd-63f4f9ce80ac",
|
|
|
|
|
"value": "b7e6a740d8f1229142b5cebb1c22b8b1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357248",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "f5ff55e6-796a-4502-a0b3-8529879b8b2e",
|
|
|
|
|
"value": "a92b8fe659eb2178fa1dad174763851e497913cc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357248",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "b38e162f-2fb7-474c-83a7-03727260bc92",
|
|
|
|
|
"value": "89209624cd354749a520bff574eb1d1f73ef6f17727ccf530c6c3ab71e9408dc"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357249",
|
|
|
|
|
"uuid": "a8f72315-ebf8-49de-94f3-af53b9fbaa1e",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357249",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "b6fcfd89-cc06-472b-94fc-9de3c5a0b7e8",
|
|
|
|
|
"value": "2018-08-15T16:22:09"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357249",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "87ba62e2-a378-4b5a-9610-d7c97fee4d96",
|
|
|
|
|
"value": "https://www.virustotal.com/file/89209624cd354749a520bff574eb1d1f73ef6f17727ccf530c6c3ab71e9408dc/analysis/1534350129/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357249",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "7c4eb019-2d78-40d5-8cb1-d5dd7fa03135",
|
|
|
|
|
"value": "28/61"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357252",
|
|
|
|
|
"uuid": "0fe484c0-2241-4fc9-bafd-df712f86aca3",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "0fe484c0-2241-4fc9-bafd-df712f86aca3",
|
|
|
|
|
"referenced_uuid": "1d42a1e0-62cc-4174-ac95-49f920e761e2",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357295",
|
|
|
|
|
"uuid": "5b746f2f-3008-47c8-a64d-4c6302de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357250",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "0ae26ec7-384e-4b64-ad93-5be5c72d72b7",
|
|
|
|
|
"value": "e5f774df501c631b0c14f3cf32e54dfb"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357250",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "aa9a0e8c-6e84-4137-9644-7a6e520c8a44",
|
|
|
|
|
"value": "34f5f9bd5a58e65f08ca1ddf1d21546c85e0295a"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357250",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "ff7bf518-c256-4bf9-b080-941d0b6f353f",
|
|
|
|
|
"value": "34a80b91dccc2f4c596238eb2a36082437d8ca2672184009ec8d0eaa5eefff4f"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357251",
|
|
|
|
|
"uuid": "1d42a1e0-62cc-4174-ac95-49f920e761e2",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357251",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "82b270bc-9fd4-4cea-a518-be48e79e9041",
|
|
|
|
|
"value": "2018-08-15T16:45:11"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357251",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "95968e47-0344-44b5-8289-90469171f852",
|
|
|
|
|
"value": "https://www.virustotal.com/file/34a80b91dccc2f4c596238eb2a36082437d8ca2672184009ec8d0eaa5eefff4f/analysis/1534351511/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357252",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "85d7a948-df75-4ebc-be43-9e7b7e4ec4cc",
|
|
|
|
|
"value": "27/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357255",
|
|
|
|
|
"uuid": "391b876f-a4d1-4c80-93fc-554a2f6ad26c",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "391b876f-a4d1-4c80-93fc-554a2f6ad26c",
|
|
|
|
|
"referenced_uuid": "a84adc75-9c11-49db-955f-fcd79e35c28c",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357295",
|
|
|
|
|
"uuid": "5b746f2f-3a60-40fa-8de8-4ccd02de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357252",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "40562ec0-8a98-4fc1-93e9-1d4df43c9841",
|
|
|
|
|
"value": "be4117d154339e7469d7cbabf7d36dd1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357252",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "2a8ada02-1e60-4226-aa23-379069365943",
|
|
|
|
|
"value": "db313b03288827a7ecd3f6efe2e8ec7ff639e97b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357253",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "9700a60c-d9f5-41aa-93d1-05424204b30e",
|
|
|
|
|
"value": "f9a6a5e807c2567395f2f892058b80f2e47f022c80ee1a3608b7168f30187616"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357253",
|
|
|
|
|
"uuid": "a84adc75-9c11-49db-955f-fcd79e35c28c",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357253",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "6bcc0295-4a44-4ca9-b734-b920be942866",
|
|
|
|
|
"value": "2018-08-15T16:45:08"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357254",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "32e51f7a-39dd-4e9b-8fa8-6baed62195d7",
|
|
|
|
|
"value": "https://www.virustotal.com/file/f9a6a5e807c2567395f2f892058b80f2e47f022c80ee1a3608b7168f30187616/analysis/1534351508/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357254",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "dca83336-2095-4204-b367-0ba1766db44f",
|
|
|
|
|
"value": "36/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357257",
|
|
|
|
|
"uuid": "86dd19f6-a9c7-4fd5-a786-77d48d01e0e4",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "86dd19f6-a9c7-4fd5-a786-77d48d01e0e4",
|
|
|
|
|
"referenced_uuid": "a3a0e935-7112-4262-bd49-cd81bc50a57b",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357295",
|
|
|
|
|
"uuid": "5b746f2f-5a14-4f6a-a98c-4d6902de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357254",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "b674d7d0-a405-4fe3-af4f-83f016d801e0",
|
|
|
|
|
"value": "a1827a948b5d14fb79c87e8d9ec74082"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357255",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "e956c5a2-4213-44d5-bd9e-740f9421c801",
|
|
|
|
|
"value": "083e28c7fa6ed1bbb054a93439ceee5c77c8f374"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357255",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "9e8a81e1-80e6-47e5-bcd7-898e6f970ba0",
|
|
|
|
|
"value": "add1ca887148122425d16e308ac199739eab8862fbd66f86a647e5d4986b3fbd"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357256",
|
|
|
|
|
"uuid": "a3a0e935-7112-4262-bd49-cd81bc50a57b",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357256",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "c27129cd-d14b-4663-b8b4-edb763a587d1",
|
|
|
|
|
"value": "2018-08-15T16:44:51"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357256",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "14436061-95a8-40ad-8813-d849e76221f8",
|
|
|
|
|
"value": "https://www.virustotal.com/file/add1ca887148122425d16e308ac199739eab8862fbd66f86a647e5d4986b3fbd/analysis/1534351491/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357257",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "9adf50fb-0912-4c2f-91d6-56ab1281aabe",
|
|
|
|
|
"value": "35/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357260",
|
|
|
|
|
"uuid": "23283183-68d7-4a71-9e9e-33939bcdfda3",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "23283183-68d7-4a71-9e9e-33939bcdfda3",
|
|
|
|
|
"referenced_uuid": "1be51f84-f11e-4e3b-ac1c-da2c2267e28e",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-b4e8-4317-bd77-484102de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357257",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "edae2269-4bc0-4be8-9ebb-9982eac53bf8",
|
|
|
|
|
"value": "2a1de3eefb43479bfbc53f677902c993"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357257",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "bac811ba-48e0-4016-a0bd-cbddd52c473f",
|
|
|
|
|
"value": "9f24a7386d0db814bacd304e39be922c736339d5"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357258",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "78eab585-ca21-4d21-9e39-2f67d5808b92",
|
|
|
|
|
"value": "2295dc79778c05ddb4e7518499075e886f8715429160af103cc928cb1880affb"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357258",
|
|
|
|
|
"uuid": "1be51f84-f11e-4e3b-ac1c-da2c2267e28e",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357258",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "fe8e0208-3c88-43ee-8ba1-602b2d69a05e",
|
|
|
|
|
"value": "2018-08-15T16:45:01"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357259",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "e8a2807e-c2d2-4959-a3a1-039d600b99d6",
|
|
|
|
|
"value": "https://www.virustotal.com/file/2295dc79778c05ddb4e7518499075e886f8715429160af103cc928cb1880affb/analysis/1534351501/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357259",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "faee17f7-73b6-4a16-aafd-b101e4e19d7d",
|
|
|
|
|
"value": "32/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357262",
|
|
|
|
|
"uuid": "a56bcd41-6085-4433-bb14-785ac0e793ea",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "a56bcd41-6085-4433-bb14-785ac0e793ea",
|
|
|
|
|
"referenced_uuid": "06e41e77-daaa-4e37-9863-7e2fe891d6b2",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-45a4-40bc-81f4-470702de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357259",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "2b353de9-89eb-496b-80ca-741265882163",
|
|
|
|
|
"value": "7b00d9246335fd3fbb2cac2f2fe9354b"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357260",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "7b664591-06ee-40e9-a62f-0ceed40b371f",
|
|
|
|
|
"value": "912caa57512e94126cbad3ce9b5f0c676363c2fc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357260",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "999ff10d-7df4-4dfc-87c7-1147ae804961",
|
|
|
|
|
"value": "be40b7601baeeae327ff2faf08944b7764547e1098557979677014490dc4e6c3"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357261",
|
|
|
|
|
"uuid": "06e41e77-daaa-4e37-9863-7e2fe891d6b2",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357261",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "d40189af-63c1-48e2-ac5f-13d09bf43bd6",
|
|
|
|
|
"value": "2018-08-15T16:45:00"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357261",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "b95d8dac-d057-4433-8a26-e3b28f1c2dfd",
|
|
|
|
|
"value": "https://www.virustotal.com/file/be40b7601baeeae327ff2faf08944b7764547e1098557979677014490dc4e6c3/analysis/1534351500/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357262",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "c539ac63-2a87-4e57-9ece-cab82fc434b3",
|
|
|
|
|
"value": "32/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357265",
|
|
|
|
|
"uuid": "4b7183d5-3eab-43dd-a70e-22c3a1967bb8",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "4b7183d5-3eab-43dd-a70e-22c3a1967bb8",
|
|
|
|
|
"referenced_uuid": "e2419d00-69a3-4e6e-b87e-ec8223a7b5cd",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-699c-4a8c-a75e-438002de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357262",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "370a9a67-2ec2-48f0-9b56-4a8e63d6d06d",
|
|
|
|
|
"value": "89b04c7e0b896a30d09a138b6bc3e828"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357262",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "9698715a-8d7f-484f-a476-a3f7b2f44591",
|
|
|
|
|
"value": "29f90baccaf7de65f4c968cd7f91fa00a4d97137"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357263",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "05449f11-02d2-4f81-aa4c-51b476b3d68f",
|
|
|
|
|
"value": "cf59012780efc61b5b43f871b930f641aefe5f8ec87290c20ab643fb60d86fc3"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357263",
|
|
|
|
|
"uuid": "e2419d00-69a3-4e6e-b87e-ec8223a7b5cd",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357263",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "20c72063-fb68-4c15-8331-a45a24c7dace",
|
|
|
|
|
"value": "2018-08-15T16:44:50"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357264",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "447b932d-8f5e-4a92-9c88-621b3156b486",
|
|
|
|
|
"value": "https://www.virustotal.com/file/cf59012780efc61b5b43f871b930f641aefe5f8ec87290c20ab643fb60d86fc3/analysis/1534351490/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357264",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "66583969-6ed2-40ff-8d79-d203215888e5",
|
|
|
|
|
"value": "37/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357267",
|
|
|
|
|
"uuid": "ac5e2802-01b5-42a2-a4d7-d1bbbfbe144f",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "ac5e2802-01b5-42a2-a4d7-d1bbbfbe144f",
|
|
|
|
|
"referenced_uuid": "e0e980d2-9731-44db-8ccc-921e023bf9e7",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-ef30-4c89-a870-44f202de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357264",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "d6f50046-1136-4eaf-a6f2-c57216ce3108",
|
|
|
|
|
"value": "843e633b026c43b63b938effa4a36228"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357265",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "28c5b7eb-b51e-4fea-a747-25d07ce264bf",
|
|
|
|
|
"value": "db1779c91ba7f4a50fed892634e8dade92b277d7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357265",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "cb76f7eb-81e6-44e2-b017-28b808a1ab37",
|
|
|
|
|
"value": "0efaeb17f3febb68b3a14236aa1f231158a1690872914a0a2eb7c48c49fbd27a"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357266",
|
|
|
|
|
"uuid": "e0e980d2-9731-44db-8ccc-921e023bf9e7",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357266",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "8a9c97c2-2b66-4bce-b075-47b050d40181",
|
|
|
|
|
"value": "2018-08-15T16:44:55"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357266",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "a32246a7-3f13-4830-a3d4-91b30b227f4b",
|
|
|
|
|
"value": "https://www.virustotal.com/file/0efaeb17f3febb68b3a14236aa1f231158a1690872914a0a2eb7c48c49fbd27a/analysis/1534351495/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357267",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "1ba54acd-17f6-45cf-9f1c-19d88d968dc8",
|
|
|
|
|
"value": "28/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357270",
|
|
|
|
|
"uuid": "3630e203-611d-460f-8f70-b44344d5409f",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "3630e203-611d-460f-8f70-b44344d5409f",
|
|
|
|
|
"referenced_uuid": "4bfff4ec-7aac-4e69-8cac-a90fcfc0130f",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-77e4-4d61-b2a6-420302de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357267",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "4af38a73-9d60-4b0d-a70a-cb2f2f77921b",
|
|
|
|
|
"value": "47fc61cd1d939c99c000afe430451952"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357267",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "62b0e4fa-3e3c-4728-8b8a-e2b7f7f120b2",
|
|
|
|
|
"value": "bb945f4a3e7f0c0477b99cee728272251e23ab70"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357268",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "61d04fd4-62d7-40ac-bf79-7c542133e485",
|
|
|
|
|
"value": "9ef27402c22f2dca4ff55ffa321b4f01a23504136f74a73c8c88976fa9a00f9c"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357268",
|
|
|
|
|
"uuid": "4bfff4ec-7aac-4e69-8cac-a90fcfc0130f",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357268",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "b6251096-4dd5-40eb-a21a-81d3a86993df",
|
|
|
|
|
"value": "2018-08-15T16:45:13"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357269",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "ca9238f7-8706-45e3-ae93-8ec5dafdcd1c",
|
|
|
|
|
"value": "https://www.virustotal.com/file/9ef27402c22f2dca4ff55ffa321b4f01a23504136f74a73c8c88976fa9a00f9c/analysis/1534351513/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357269",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "515f350c-5513-4c51-b156-9371debcc1a8",
|
|
|
|
|
"value": "29/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357272",
|
|
|
|
|
"uuid": "91cf78e9-e36d-4ccc-af1f-485a4b238560",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "91cf78e9-e36d-4ccc-af1f-485a4b238560",
|
|
|
|
|
"referenced_uuid": "196992e9-5607-4028-b60c-5a22b5839dde",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-63f4-4496-a36f-464e02de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357269",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "645339be-e711-4652-9e24-9e48e1417b16",
|
|
|
|
|
"value": "c2da8cc0725558304dfd2a59386373f7"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357270",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "86a42b5f-6e93-48de-8da5-7e7b01315626",
|
|
|
|
|
"value": "a3824ad7c3999c3d55b632eed01cab620f016446"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357270",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "3c8f535f-f4c5-488c-9915-fca62e1133ac",
|
|
|
|
|
"value": "8b1bbd63a5679be8ea1a2249c36534854e25ee264219eab2dc1e915f49865365"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357270",
|
|
|
|
|
"uuid": "196992e9-5607-4028-b60c-5a22b5839dde",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357271",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "aa594984-a7fc-4d08-a4f8-d480dcffef55",
|
|
|
|
|
"value": "2018-08-15T16:44:57"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357271",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "b6b0b7e5-7ffc-4d25-88b4-9e4b12d32cc7",
|
|
|
|
|
"value": "https://www.virustotal.com/file/8b1bbd63a5679be8ea1a2249c36534854e25ee264219eab2dc1e915f49865365/analysis/1534351497/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357271",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "a3fb7918-0b1c-46be-a6ae-58ef218998fb",
|
|
|
|
|
"value": "28/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357274",
|
|
|
|
|
"uuid": "a47107f2-a312-40fb-8f78-8b905fa6681d",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "a47107f2-a312-40fb-8f78-8b905fa6681d",
|
|
|
|
|
"referenced_uuid": "928814bd-64d5-4ecd-bc5f-655ebf15c21a",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-1f90-4531-88a8-441e02de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357272",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "1adea7dc-3ed9-4824-8597-fd194c054c1e",
|
|
|
|
|
"value": "ca9bc074668bb04552610ee835a0e9cf"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357272",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "28ddbc25-4ff6-4150-9e3e-13b2cf5083cc",
|
|
|
|
|
"value": "3fc93b5dbd1b34504d186c10a4d98c1124b5098a"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357272",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "777ee1f7-3a16-4c85-ae4b-5f9978acbc72",
|
|
|
|
|
"value": "c3544ddb175689cf3aadc5967f061594c210d78db45b3bb5925dedf3700ad4f7"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357273",
|
|
|
|
|
"uuid": "928814bd-64d5-4ecd-bc5f-655ebf15c21a",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357273",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "9a606195-57fc-4330-8864-e66304c72ef6",
|
|
|
|
|
"value": "2018-08-15T16:45:05"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357273",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "d7bb4342-59c9-4332-9cf7-1a9a2de5de55",
|
|
|
|
|
"value": "https://www.virustotal.com/file/c3544ddb175689cf3aadc5967f061594c210d78db45b3bb5925dedf3700ad4f7/analysis/1534351505/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357274",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "5cfa7544-5cb6-4cd1-bf5e-e7825e22ce19",
|
|
|
|
|
"value": "31/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357277",
|
|
|
|
|
"uuid": "7b1d01d7-f361-413f-91ad-f0d37a870129",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "7b1d01d7-f361-413f-91ad-f0d37a870129",
|
|
|
|
|
"referenced_uuid": "ffc57365-4cf2-41a6-81f8-3573432a09af",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-6d6c-47ca-8ab8-447002de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357274",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "733a3229-b115-4509-89b7-8a2c98576ab1",
|
|
|
|
|
"value": "397ed4c4c372fe50588123d6885497c3"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357274",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "ae6c15e0-f45d-45b7-89b8-7bff709d187e",
|
|
|
|
|
"value": "2367fc3b992e74a48aac7292c94798956e50c28f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357275",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "3545d7f9-6e81-44de-9999-d63b9b6a0cdb",
|
|
|
|
|
"value": "5e8f956911ea2980afc7d95afcedd19e7828ee861c5df8c857cf3a7141e81f84"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357275",
|
|
|
|
|
"uuid": "ffc57365-4cf2-41a6-81f8-3573432a09af",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357275",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "7bd3d2a5-8644-43fb-9027-03231645ef1c",
|
|
|
|
|
"value": "2018-08-15T16:45:09"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357276",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "847ee887-b2b8-4e59-915c-0e745e202ec3",
|
|
|
|
|
"value": "https://www.virustotal.com/file/5e8f956911ea2980afc7d95afcedd19e7828ee861c5df8c857cf3a7141e81f84/analysis/1534351509/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357276",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "98f74e2b-6672-4b4c-a389-66643e2bd607",
|
|
|
|
|
"value": "30/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357279",
|
|
|
|
|
"uuid": "162c438c-69f6-4b5e-8e4c-b4f75ed40df4",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "162c438c-69f6-4b5e-8e4c-b4f75ed40df4",
|
|
|
|
|
"referenced_uuid": "da852be4-9cb2-4bac-a6a5-030bc914e630",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-5cbc-4f5a-82b5-4e9c02de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357276",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "79903c79-c82e-41fe-8d11-2fc025daf075",
|
|
|
|
|
"value": "4efdbdcb3c341f86c4ff40764cd6468f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357277",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "20e71fba-fed5-4f03-b99b-69868cfe7ff2",
|
|
|
|
|
"value": "07181166766b8fdf7296a402406c606bbbad2f90"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357277",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "976f9128-b59a-48a7-b36c-0b94384d7fcd",
|
|
|
|
|
"value": "1d2394e4501d1ed83259333e5aa81cdbc58557c42a4d4976982d84dd6fdd4128"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357277",
|
|
|
|
|
"uuid": "da852be4-9cb2-4bac-a6a5-030bc914e630",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357277",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "3d8ac427-99fa-49b2-a2a7-5f724a150285",
|
|
|
|
|
"value": "2018-08-14T07:04:09"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357278",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "49e435a2-fa77-48e0-8464-7bfcc6dac210",
|
|
|
|
|
"value": "https://www.virustotal.com/file/1d2394e4501d1ed83259333e5aa81cdbc58557c42a4d4976982d84dd6fdd4128/analysis/1534230249/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357278",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "603fac01-1133-43e1-9675-8c75b9750718",
|
|
|
|
|
"value": "20/60"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357281",
|
|
|
|
|
"uuid": "9a5fabe2-1e0b-4cc5-b0e9-365772adee52",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "9a5fabe2-1e0b-4cc5-b0e9-365772adee52",
|
|
|
|
|
"referenced_uuid": "bf3e97e8-306a-44e9-91b4-0c274ad51734",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-b0b0-4878-9c3b-46f502de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357278",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "da04ff72-bfa5-4ad6-8e2d-1ee219ed5257",
|
|
|
|
|
"value": "92d79d7a27966ea4668e347fe9a97c62"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357279",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "bb76203f-4308-402a-9817-9c30d40c19bd",
|
|
|
|
|
"value": "8ac9ab3c62acd3e43eb2d5c9ae3f00902218892c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357279",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "6e499f95-d6a7-42b2-a20f-01d7c0cf949f",
|
|
|
|
|
"value": "920f18c5ffb59856deccf2d984ab07793fefeea9a5a45d1e8a94a57da9d2347c"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357280",
|
|
|
|
|
"uuid": "bf3e97e8-306a-44e9-91b4-0c274ad51734",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357280",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "07888bc3-7555-4ab1-a46b-ac57956970e9",
|
|
|
|
|
"value": "2018-08-15T16:45:04"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357280",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "3b931fab-d5d1-452c-8af8-14ce0135f93c",
|
|
|
|
|
"value": "https://www.virustotal.com/file/920f18c5ffb59856deccf2d984ab07793fefeea9a5a45d1e8a94a57da9d2347c/analysis/1534351504/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357281",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "d6031b1b-0a0a-4627-aaf4-18760c5c127d",
|
|
|
|
|
"value": "30/61"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357284",
|
|
|
|
|
"uuid": "c760affd-636c-478d-ba6a-a3749a64b781",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "c760affd-636c-478d-ba6a-a3749a64b781",
|
|
|
|
|
"referenced_uuid": "ba15ef40-6ac2-487c-940e-83c3174da083",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-f5d4-45b7-ab90-4b0e02de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357281",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "a0eb4b96-f396-4b2e-9bb7-4ffff2566aa5",
|
|
|
|
|
"value": "e8b68543c78b3dc27c7951e1dc8fae89"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357281",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "08cb3492-7f42-4911-b84f-9142e9f32691",
|
|
|
|
|
"value": "547f41cf853651eff2d25fd9095d7c24cf129d1f"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357282",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "43efe205-7206-44cc-8725-5c8be7f9a833",
|
|
|
|
|
"value": "4c2797e3b0c7975bc861bed2353d036f980ad8ffe289805f72093e860555bc67"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357283",
|
|
|
|
|
"uuid": "ba15ef40-6ac2-487c-940e-83c3174da083",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357283",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "d95ccf8c-1e9f-4d4d-a06a-88c6885b79e7",
|
|
|
|
|
"value": "2018-08-15T16:45:14"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357283",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "7f785862-a03d-4ca2-aafd-37c2eb07fe82",
|
|
|
|
|
"value": "https://www.virustotal.com/file/4c2797e3b0c7975bc861bed2353d036f980ad8ffe289805f72093e860555bc67/analysis/1534351514/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357284",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "d2f801fb-7da9-4a0b-84e1-07f54fb13fcc",
|
|
|
|
|
"value": "34/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357287",
|
|
|
|
|
"uuid": "e2e80668-791c-4d9a-80d4-dd25ba800c57",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "e2e80668-791c-4d9a-80d4-dd25ba800c57",
|
|
|
|
|
"referenced_uuid": "28caf2ea-f4fe-4f30-8fa5-4a1ed8b06e46",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-b194-4c28-b72f-432802de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357284",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "413fb7da-e2ce-47c6-8189-8e655b3ebf96",
|
|
|
|
|
"value": "fc385c0f00313ad3ba08576a28ca9b66"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357285",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "898669be-bbfc-4660-9185-66259f8eaedb",
|
|
|
|
|
"value": "aa162e03cafbe4322c524fb2b3f2aabb7120b148"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357286",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "f9f85e99-5e52-4558-a6c4-4553ec545fdb",
|
|
|
|
|
"value": "47be22bed22c58aad09fde547cb98d007d3ff2cf94c16aaa1d99270e4196e940"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357286",
|
|
|
|
|
"uuid": "28caf2ea-f4fe-4f30-8fa5-4a1ed8b06e46",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357286",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "d94f59eb-adee-4d95-aebe-4fe9d8774230",
|
|
|
|
|
"value": "2018-08-15T16:44:54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357287",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "14f53538-dc2e-46b8-a284-fe9114a40efe",
|
|
|
|
|
"value": "https://www.virustotal.com/file/47be22bed22c58aad09fde547cb98d007d3ff2cf94c16aaa1d99270e4196e940/analysis/1534351494/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357287",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "28679d76-1a32-4f37-bcee-9363c9fbcad2",
|
|
|
|
|
"value": "25/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357290",
|
|
|
|
|
"uuid": "fe9c1e41-f204-4e12-a71c-02f86c3046ae",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "fe9c1e41-f204-4e12-a71c-02f86c3046ae",
|
|
|
|
|
"referenced_uuid": "36e12367-4a2f-4c7e-9857-05cbda8aa0be",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-fee4-42e0-981c-45b102de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357287",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "e48cd7af-445f-46ba-a9ff-20e3712df50a",
|
|
|
|
|
"value": "1b3693237173c8b7ee2942b69812eb47"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357288",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "e3b01518-56bf-42b4-b386-cabcf1367ed3",
|
|
|
|
|
"value": "2044e2d76bb67e3d47e5c2014bd6c5b398971b19"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357288",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "6561adc0-4306-4689-8513-b7dcecbeadfd",
|
|
|
|
|
"value": "d980e95023e1093b2dfea5ae8e4f60e00a780730e553494aa4b5fd61860dbc64"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357288",
|
|
|
|
|
"uuid": "36e12367-4a2f-4c7e-9857-05cbda8aa0be",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357288",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "49ddae4c-c5b9-40fe-89c7-ffc424a5bd8a",
|
|
|
|
|
"value": "2018-08-15T16:44:59"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357289",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "de85ed97-ba47-4f92-9bfd-dca343be7e58",
|
|
|
|
|
"value": "https://www.virustotal.com/file/d980e95023e1093b2dfea5ae8e4f60e00a780730e553494aa4b5fd61860dbc64/analysis/1534351499/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357289",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "9b02bf16-dea0-46db-93ef-347219d7cd0c",
|
|
|
|
|
"value": "34/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357293",
|
|
|
|
|
"uuid": "0610b8d6-dd83-4b25-a77a-83003ffd0e11",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "0610b8d6-dd83-4b25-a77a-83003ffd0e11",
|
|
|
|
|
"referenced_uuid": "efc8b853-d469-4274-9070-ab6c9da8f164",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357296",
|
|
|
|
|
"uuid": "5b746f30-9d18-4677-8759-4f9002de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357290",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "c8908cd6-409f-4f46-8fa4-ad4cd4d9a1b3",
|
|
|
|
|
"value": "7a2b1c70213ad493a053a1e252c00a54"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357290",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "ab88a3fc-8fdb-4123-b50d-9cef546341fa",
|
|
|
|
|
"value": "a6730c4ba67856f7efdb8e50b73bdf76c234a8bc"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357291",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "abe0c660-da2c-4840-a9dd-9b8c02e3c466",
|
|
|
|
|
"value": "1924cdf76764a84877baae88ebbed2f9cafdc1b4bae6b9977c6af2350da1201b"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357291",
|
|
|
|
|
"uuid": "efc8b853-d469-4274-9070-ab6c9da8f164",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357291",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "e3b1f4ef-5707-4ab2-802f-2cfda894a065",
|
|
|
|
|
"value": "2018-08-15T16:44:52"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357291",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "497b0024-60c9-4888-8f88-9088c5774cef",
|
|
|
|
|
"value": "https://www.virustotal.com/file/1924cdf76764a84877baae88ebbed2f9cafdc1b4bae6b9977c6af2350da1201b/analysis/1534351492/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357292",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "8425524c-f64f-4974-9687-4410d4b5038d",
|
|
|
|
|
"value": "35/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "11",
|
|
|
|
|
"timestamp": "1534357295",
|
|
|
|
|
"uuid": "60193ac5-f0d1-42b3-83ac-3261849cd66b",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "60193ac5-f0d1-42b3-83ac-3261849cd66b",
|
|
|
|
|
"referenced_uuid": "836bbef9-5015-4e6e-b2a7-2a09752ddd57",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1534357297",
|
|
|
|
|
"uuid": "5b746f31-8edc-45d6-80ae-466f02de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1534357292",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "18995a43-e4f3-4981-bde4-9cdd02443910",
|
|
|
|
|
"value": "28d30f19e96200bcf5067d5fd3b69439"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1534357292",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "50708b52-9e1e-4682-b5f8-230ed678b30f",
|
|
|
|
|
"value": "3bbe8ba59481ecedc6012d4fd4b6cfb51b565b83"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1534357293",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "f3928d8e-0db0-42a7-8c06-a6c3435e6e08",
|
|
|
|
|
"value": "79fecbdeeb6a4d31133359c4b8ecf9035ddc1534fcfa6c0d51d62c27d441a6ad"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "2",
|
|
|
|
|
"timestamp": "1534357293",
|
|
|
|
|
"uuid": "836bbef9-5015-4e6e-b2a7-2a09752ddd57",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1534357293",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "6bc06611-fef4-4228-951d-9f4277f9ba6e",
|
|
|
|
|
"value": "2018-08-15T16:45:07"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1534357294",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "d00325bb-dce5-471c-aebe-1246c34c3ad1",
|
|
|
|
|
"value": "https://www.virustotal.com/file/79fecbdeeb6a4d31133359c4b8ecf9035ddc1534fcfa6c0d51d62c27d441a6ad/analysis/1534351507/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1534357294",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "99ff0854-d106-47cd-9e75-bc999593d0ee",
|
|
|
|
|
"value": "36/62"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
2023-04-21 13:25:09 +00:00
|
|
|
]
|
2023-12-14 14:30:15 +00:00
|
|
|
}
|
2023-04-21 13:25:09 +00:00
|
|
|
}
|
