2023-04-21 13:25:09 +00:00
{
2023-12-14 14:30:15 +00:00
"Event" : {
"analysis" : "0" ,
"date" : "2019-06-26" ,
"extends_uuid" : "" ,
"info" : "An Analysis of Linux.Ngioweb Botnet" ,
"publish_timestamp" : "1561579470" ,
"published" : true ,
"threat_level_id" : "3" ,
"timestamp" : "1561579453" ,
"uuid" : "5d13ce08-14f8-414c-a7d2-4cee02de0b81" ,
"Orgc" : {
"name" : "CIRCL" ,
"uuid" : "55f6ea5e-2c60-40e5-964f-47a8950d210f"
} ,
"Tag" : [
{
"colour" : "#004646" ,
2024-04-05 12:15:17 +00:00
"local" : false ,
2023-12-14 14:30:15 +00:00
"name" : "type:OSINT" ,
"relationship_type" : ""
} ,
{
"colour" : "#0071c3" ,
2024-04-05 12:15:17 +00:00
"local" : false ,
2023-12-14 14:30:15 +00:00
"name" : "osint:lifetime=\"perpetual\"" ,
"relationship_type" : ""
} ,
{
"colour" : "#0087e8" ,
2024-04-05 12:15:17 +00:00
"local" : false ,
2023-12-14 14:30:15 +00:00
"name" : "osint:certainty=\"50\"" ,
"relationship_type" : ""
} ,
{
"colour" : "#ffffff" ,
2024-04-05 12:15:17 +00:00
"local" : false ,
2023-12-14 14:30:15 +00:00
"name" : "tlp:white" ,
"relationship_type" : ""
} ,
{
"colour" : "#0088cc" ,
2024-04-05 12:15:17 +00:00
"local" : false ,
2023-12-14 14:30:15 +00:00
"name" : "misp-galaxy:malpedia=\"Ngioweb\"" ,
"relationship_type" : ""
} ,
{
"colour" : "#22681c" ,
2024-04-05 12:15:17 +00:00
"local" : false ,
2023-12-14 14:30:15 +00:00
"name" : "malware_classification:malware-category=\"Botnet\"" ,
"relationship_type" : ""
} ,
{
"colour" : "#001a42" ,
2024-04-05 12:15:17 +00:00
"local" : false ,
2023-12-14 14:30:15 +00:00
"name" : "ms-caro-malware-full:malware-platform=\"Linux\"" ,
"relationship_type" : ""
}
] ,
"Attribute" : [
{
"category" : "External analysis" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579034" ,
"to_ids" : false ,
"type" : "comment" ,
"uuid" : "5d13ce1a-6cc8-4f93-91ac-67c602de0b81" ,
"value" : "On May 27, 2019, Our Unknown Threat Detect System highlighted a suspicious ELF file, and till this day, the detection rate on VT is still only one with a very generic name. We determined that this is a Proxy Botnet, and it is a Linux version variant of the Win32.Ngioweb[1] malware. We named it Linux.Ngioweb. It shares a lot of code with Win32.Ngioweb, except that it has DGA features. We registered one of the DGA C2 domain names (enutofish-pronadimoful-multihitision.org) and was able to observe the Bot connections.\r\n\r\nIn addition, we have observed that Linux.Ngioweb malware has been implanted into a large number of WordPress Web servers.\r\n\r\nAlthough the Bot program is loaded with the privilege of the user group corresponding to the Web container, it still works and runs as Rotating Proxy node[2].\r\n\r\nWe don\u00e2\u20ac\u2122t know why the attacker runs this proxy botnet, but it is possible that everything goes through the proxy is being recorded by the attacker."
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-4c98-45df-a2ef-485202de0b81" ,
"value" : "enutofish-pronadimoful-multihitision.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-0ed8-41f1-bf7f-40d302de0b81" ,
"value" : "exaraxexese-macrobacaward-exafosuness.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-b130-4a29-9ad1-44ba02de0b81" ,
"value" : "nonafudazage.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-8584-4143-b396-43d402de0b81" ,
"value" : "demigelike.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-920c-4deb-9a61-4d0902de0b81" ,
"value" : "emuvufehood.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-8a4c-44f4-9bea-40e602de0b81" ,
"value" : "subolukobese.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-0ae0-4249-85be-4d3702de0b81" ,
"value" : "inogepicor-prorarurument.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-842c-4c80-a02b-42fa02de0b81" ,
"value" : "overahudulize-unazibezize-overuzozerish.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-235c-4bee-8114-485a02de0b81" ,
"value" : "imunolance-postodinenetn-antifipuketn.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-00e8-4815-8ea1-4ee202de0b81" ,
"value" : "antizerolant-monogevudom.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-77dc-4c60-8f1f-494102de0b81" ,
"value" : "transavecaful-transinenation-transikaduhern.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-2a94-42d0-ab9f-44e802de0b81" ,
"value" : "subogonance.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-96fc-4fde-918e-4df102de0b81" ,
"value" : "inoxodusor-misehupukism.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-2114-48c3-b506-453d02de0b81" ,
"value" : "devikoviward-semibazegily-copaxugage.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-90c4-4c7b-8a07-4b9e02de0b81" ,
"value" : "eniguzeless-inecimanable.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-07f8-4ae4-a599-4ba602de0b81" ,
"value" : "subilebesion-irogipate.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-f1bc-4b9f-8acd-46f202de0b81" ,
"value" : "colozosion-antigobunaful.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-eb20-4e37-9850-423102de0b81" ,
"value" : "inudiduty-dezaviness.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-2708-4856-a9e8-443802de0b81" ,
"value" : "irelizaring-enipulical-monovuxehossion.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-f10c-4921-9e86-469602de0b81" ,
"value" : "ilenudavous-monoxoxapal-semimihupution.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-d7f8-42f3-bae5-482502de0b81" ,
"value" : "ultrapadupize.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-e0fc-48da-ac18-4a3302de0b81" ,
"value" : "covategal-dezakedify-enebugassion.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-0130-4f9e-a78f-422a02de0b81" ,
"value" : "transivesudom-macropimuship.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-3338-484f-87ae-428402de0b81" ,
"value" : "rezolezation-transapupirify-seminecation.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-2108-4bb0-b24f-44c702de0b81" ,
"value" : "macrolutoxous-overefimety.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-6270-49da-89f3-473102de0b81" ,
"value" : "coxumumage-dexolalite.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-ffc0-4d25-9a4c-476902de0b81" ,
"value" : "cotexafical-postirutuvian-emimimous.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-8d78-41b5-adad-454b02de0b81" ,
"value" : "copubuloness-misumusal-disokozian.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-afa8-4978-83e7-456e02de0b81" ,
"value" : "nonecuzuking-enekopofen-imakozity.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-eeb0-4a30-a0b0-4e9f02de0b81" ,
"value" : "dezohipal-ultrazebebive.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-eb48-46e6-b228-4de802de0b81" ,
"value" : "cosazalike-antifoxirer-subudikic.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-bd54-4a3d-86e2-4ff402de0b81" ,
"value" : "underotutilism-monoceraretion-underosociful.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-5904-4bb6-88ce-46c402de0b81" ,
"value" : "overugiror.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-d570-4d33-bd42-4f3602de0b81" ,
"value" : "emuzixucize.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-8440-4bd7-8025-463202de0b81" ,
"value" : "disicevament-desizigasion-recadihuful.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-21f4-4b9d-837d-4d7e02de0b81" ,
"value" : "decehoward-microhikodely-overokerezant.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-428c-40dc-8b3c-460a02de0b81" ,
"value" : "microlasokadom-ultralarumous.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-5ccc-4606-97e9-4eab02de0b81" ,
"value" : "minixecision-iruzaxuhood.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-b3c4-4157-8f1d-49f702de0b81" ,
"value" : "profusonuty.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-019c-45bf-8ea5-4c3c02de0b81" ,
"value" : "multifipakency-conovofy-prorakikate.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-da3c-404c-8767-4c0d02de0b81" ,
"value" : "antiseramoment.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579165" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9d-0e18-46a2-9354-492402de0b81" ,
"value" : "postavutetn-emedarevous.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-5310-4512-ab1e-482202de0b81" ,
"value" : "inolugoty-inidiverible.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-f1fc-4ea9-bf45-48da02de0b81" ,
"value" : "prodipamament.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-b68c-40fc-9a46-4e4f02de0b81" ,
"value" : "overogobity-imivocurify-disovizution.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-59b8-4142-9386-4ec602de0b81" ,
"value" : "decozaness-antihazation-overetalovical.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-851c-44a3-a3bc-443502de0b81" ,
"value" : "nonesolafy.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-ca24-4c08-bde8-4b3902de0b81" ,
"value" : "unihatosancy.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-6430-4bc8-a321-4e7502de0b81" ,
"value" : "interiragocern-micropuxotion-transogorion.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-a9b8-4894-83e7-45b702de0b81" ,
"value" : "seminamatity-enogibely.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-7714-42fd-8ed8-40af02de0b81" ,
"value" : "inosebovion.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-e824-44e2-9498-452402de0b81" ,
"value" : "exofifure-postirexument.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-bc10-4f9c-86cc-4bbb02de0b81" ,
"value" : "transirirenern-semizafunic-nonivubed.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-d3b4-47d1-b06b-441b02de0b81" ,
"value" : "enegizize-microtizobity.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-687c-4346-9eaf-4a0902de0b81" ,
"value" : "macrohuseded-multipazaseship.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-58d0-40d2-a1f3-4b2702de0b81" ,
"value" : "imefihured-macrohixuhood.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-8fd8-4f6d-b2df-461402de0b81" ,
"value" : "microlulition-macrokiguxable.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-fd6c-40a9-b53e-49b202de0b81" ,
"value" : "multizesumefy-emebefion.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-b3e0-4ce1-b4d7-4e0402de0b81" ,
"value" : "underebelassion-postizoziless.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-e280-4bb4-ae81-4fd602de0b81" ,
"value" : "dezuvazen.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-63f8-4a37-9f5e-4f8102de0b81" ,
"value" : "decotusion-exexavihood-exevozebant.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-f704-4a0b-9e96-4c3f02de0b81" ,
"value" : "disuzepuly.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-4cfc-4cd4-8d49-4ca202de0b81" ,
"value" : "inuviging-antizoluly.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-57f4-4622-9915-4ca702de0b81" ,
"value" : "multisotiren-ilazufist.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-90cc-414a-ba97-4b2a02de0b81" ,
"value" : "predepussion.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-efec-4d71-b1ff-47f702de0b81" ,
"value" : "inidozadom.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-7a28-4e36-8696-419f02de0b81" ,
"value" : "interikuhaful.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-32a0-46b7-b3ed-43ff02de0b81" ,
"value" : "cozuheming.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-064c-48a7-8e3f-48f202de0b81" ,
"value" : "multiruxuth.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-3758-48ff-be3d-450102de0b81" ,
"value" : "monozogeced.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-7964-4ea4-ac98-4b8602de0b81" ,
"value" : "mononoredom.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-a380-4539-9b16-410f02de0b81" ,
"value" : "postarubixage-monocinamety-overogefesal.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-e54c-42f9-a1a6-4ace02de0b81" ,
"value" : "prebekokian-misadepepive-transilogify.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-acc4-4324-a747-436802de0b81" ,
"value" : "monohatodom-cohotiship.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-d2e0-4908-b0eb-4a0902de0b81" ,
"value" : "exebasusion.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-48e0-43d4-8032-432002de0b81" ,
"value" : "unahodoness-emevuzeward-emuzeduness.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-eb04-4f13-8563-4de102de0b81" ,
"value" : "exemidexous-underiposapite-unegatature.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-a560-4809-84ec-4c6202de0b81" ,
"value" : "interocugopist-misugexadic-ilobipegency.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-fa74-4d6b-abf6-4f3702de0b81" ,
"value" : "monokifomancy-misagefism-macrobepoth.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-3454-417c-af8a-442802de0b81" ,
"value" : "antizekussion-minipusaral-copofuxoship.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-71b8-4d85-ad45-483d02de0b81" ,
"value" : "relutodom-comakitize.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-9064-427c-b4b1-46c102de0b81" ,
"value" : "multikezusion.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-5dd0-4906-add4-4cd802de0b81" ,
"value" : "emopumical-enohecical.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-0490-45c4-9b24-40d702de0b81" ,
"value" : "semitegopish.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-ab6c-4e7a-9266-488f02de0b81" ,
"value" : "recepatission.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-55cc-453c-9278-493e02de0b81" ,
"value" : "inoluvary.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-ad70-400a-8451-4ee502de0b81" ,
"value" : "seminitotuful.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-7a3c-4e76-ab38-4b9d02de0b81" ,
"value" : "interanubing-emelulotal-transugotuzern.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-ce5c-4e46-a6d6-4ad902de0b81" ,
"value" : "subefehity-iledutession.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-25dc-4912-bcc9-4a1e02de0b81" ,
"value" : "ultrapapiten.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-0d38-44f1-8fb8-49fd02de0b81" ,
"value" : "transuvarusish-prozumoxety.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-3bb4-4ffd-a0d4-4aa702de0b81" ,
"value" : "transisigern.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-23d8-483e-8e44-49ad02de0b81" ,
"value" : "imirotiship-microhopulive-emotomeship.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-5c98-4bba-8fda-4c8802de0b81" ,
"value" : "presefavution.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-713c-4711-9fa8-45a802de0b81" ,
"value" : "enevifaking.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-fa58-4f6d-bd3b-4f3f02de0b81" ,
"value" : "misidogive-coxecovor-dexefoxan.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-dfac-434a-823e-414602de0b81" ,
"value" : "overazadudom-deliromohood.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-5424-4ae8-98ad-4a6502de0b81" ,
"value" : "emakanuward.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-8440-4b10-ac6d-452a02de0b81" ,
"value" : "emitohage-overasuhorure-antitipenoless.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-c288-4114-94da-462e02de0b81" ,
"value" : "ultrasesebible.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-82ec-41a2-a67e-4c1402de0b81" ,
"value" : "multihadekite.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579166" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9e-5d2c-49c4-a88b-406502de0b81" ,
"value" : "iluvused-iravoxish.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-04e0-4093-9eb1-408d02de0b81" ,
"value" : "postobagoly-detovaward-unixohible.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-f774-43fc-ba90-403202de0b81" ,
"value" : "underasusogen.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-581c-4915-990f-4c3002de0b81" ,
"value" : "imovaman-multimihivoship-imeduxian.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-8e3c-4572-8c58-494102de0b81" ,
"value" : "dedunuguhood.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-c67c-48e8-b5c3-461102de0b81" ,
"value" : "prevukition.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-286c-434d-97ff-4ab402de0b81" ,
"value" : "underehugavish.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-4bc0-4571-8ac3-431002de0b81" ,
"value" : "misoxomelical-iluxubism.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-b118-4ff4-a602-45ee02de0b81" ,
"value" : "microcolacoful-postabitition.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-5c88-4795-890d-4afd02de0b81" ,
"value" : "overurohely-overadolure-iruraluness.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-0194-45a8-a63d-4ac902de0b81" ,
"value" : "unurodable-dekipuhic-postuxufous.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-d414-41e9-8c77-428402de0b81" ,
"value" : "unitucihern-postadagen-imupuduth.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-c5a8-432b-9aba-4c7502de0b81" ,
"value" : "imukokuship.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-d510-47a1-a6be-455702de0b81" ,
"value" : "prenubocetion-ultrahahohood.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-fec0-4c53-a478-463302de0b81" ,
"value" : "monofugition-underefogukic.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-41f8-447f-aa65-407e02de0b81" ,
"value" : "irofetufy.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-ad00-426c-8b53-480e02de0b81" ,
"value" : "irobigelike.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-0690-4a9a-9d50-4df702de0b81" ,
"value" : "presifament.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-77d0-43a0-83d0-452f02de0b81" ,
"value" : "overetigution.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-dd98-470b-9a56-439e02de0b81" ,
"value" : "enuvopan-imixesoward-irarupipary.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-4b1c-47d8-ba21-4bcd02de0b81" ,
"value" : "inorofizian.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-52ac-4d0b-b81d-4fac02de0b81" ,
"value" : "monopadecotion-multicecihood-imuzicasion.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-01d0-4b83-8380-47b102de0b81" ,
"value" : "exofosehance-minimezazofy.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-677c-4862-a409-4f8202de0b81" ,
"value" : "monokacofudom-inuvinable.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-90a4-4bdc-a501-4add02de0b81" ,
"value" : "emisucosion-prohosexite-imorekusion.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-40fc-403e-bcb1-475a02de0b81" ,
"value" : "semiledoduly.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-1f54-4966-a0eb-4ab002de0b81" ,
"value" : "multivapufy-promumuly-enonuben.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-c2f8-4acd-b9a5-459f02de0b81" ,
"value" : "subebodency.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-0a90-4380-8277-481c02de0b81" ,
"value" : "cofexasish-inodehed.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-40e4-48d5-a434-4b3102de0b81" ,
"value" : "unutexupify-conofubusion.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-8f54-44ce-848d-4d4002de0b81" ,
"value" : "misebonure-iluborize-rezericify.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-fa88-4140-86fc-404502de0b81" ,
"value" : "exunaxian.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-64ac-4a50-9c86-4cc602de0b81" ,
"value" : "colanizity-postosecive-nonuresible.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-9010-4728-b9b9-482302de0b81" ,
"value" : "dedaliward-imipusen-inacaliver.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-e30c-47ea-b7a3-479c02de0b81" ,
"value" : "refusovize.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-f8f4-4e07-89bf-42d402de0b81" ,
"value" : "monokuvission-transodigical-semihehamussion.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-2e9c-441e-a708-4be702de0b81" ,
"value" : "transalavudom-multilavezuhood.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-3158-479d-abdd-401602de0b81" ,
"value" : "exusizeward.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-4f50-4774-adf7-47f702de0b81" ,
"value" : "unisimor.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-362c-4954-8c7a-4fac02de0b81" ,
"value" : "minipihagaship.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-d554-426f-ad4d-41ef02de0b81" ,
"value" : "recusigetion-transubeviful.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-98ac-4dab-a857-48f302de0b81" ,
"value" : "multixizitufy-microtomuly-multixoleward.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-f524-487a-bc60-4aed02de0b81" ,
"value" : "microxulodish-semibahoty.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-0e08-4e27-a14a-419602de0b81" ,
"value" : "macrokunith-proxobivive.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-af80-454e-bfe8-45c502de0b81" ,
"value" : "preginaxodom.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-6aa4-4261-8201-4f1602de0b81" ,
"value" : "transimapeful-cotalision.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-c358-4328-a7fb-439602de0b81" ,
"value" : "prefinazuly.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-ed2c-42d8-8c02-4bb402de0b81" ,
"value" : "inucasazing-microhesunian-semidikokement.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-8934-402b-88e4-4dea02de0b81" ,
"value" : "disitirotion-transekarenate.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-c564-4d62-a08c-4ad502de0b81" ,
"value" : "unehihify-antimepavable-nonubovafy.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-4d9c-4442-8481-4a2c02de0b81" ,
"value" : "misunotelike-nonugidant.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-b26c-432c-ae0f-449202de0b81" ,
"value" : "enogosudom-macrogekabive.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-9f90-4e91-bd81-4a2f02de0b81" ,
"value" : "postozokipetn-microdomobaly.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-97c8-4661-b2df-497502de0b81" ,
"value" : "interunavission-ininibecist.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-863c-43e5-a039-46ba02de0b81" ,
"value" : "microhinoler.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-ee2c-4e59-889e-4cb102de0b81" ,
"value" : "prosihamish-noneguhaness.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-86f0-46aa-a85a-42e502de0b81" ,
"value" : "preberekous-microkagibant-imemahal.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-8950-4bb0-98b6-41df02de0b81" ,
"value" : "iletegifage.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-0bf4-4a15-a3ca-42a202de0b81" ,
"value" : "emikuraran.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-ad74-46ab-baa0-481502de0b81" ,
"value" : "overokigoty-ilecavish.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-4850-4b05-95ad-457b02de0b81" ,
"value" : "nonikofucable-postelihuzism-rexecigism.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-9d4c-49bd-be3b-480402de0b81" ,
"value" : "imixifure.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-ee54-4bab-9746-483502de0b81" ,
"value" : "minirabupeness-nonitefuward.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-2594-433e-8b2a-418202de0b81" ,
"value" : "misasugegify-underazosuzish-exuvexezical.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-3fe4-4a6e-8e81-40b202de0b81" ,
"value" : "multipocihood-monomuhunible.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579167" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13ce9f-379c-4a7e-b8cd-435a02de0b81" ,
"value" : "nonohacutancy-postuxikitan-microseditoless.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-5f44-46e7-90eb-477d02de0b81" ,
"value" : "overasobament.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-1860-4d40-81f2-4da902de0b81" ,
"value" : "overulurotion.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-5968-45bd-ab62-469402de0b81" ,
"value" : "disepadely-disuzirovor.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-5330-44b6-98b0-46c402de0b81" ,
"value" : "repetepian-irelucify.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-84dc-4aeb-8a6e-498202de0b81" ,
"value" : "enikobadom-postolixement.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-f8cc-4473-b84a-4b3002de0b81" ,
"value" : "inunatogite-imoboraness.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-31e4-421f-b4d2-412602de0b81" ,
"value" : "irimarefy.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-1d40-4ef2-9470-4af802de0b81" ,
"value" : "monohiloless-demodefy.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-1ea0-4d20-89e2-4b6d02de0b81" ,
"value" : "previbetian-misunohigate.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-1a48-40fa-a3fa-413602de0b81" ,
"value" : "multivunuhance-inabiber.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-2a40-4a16-9c86-442e02de0b81" ,
"value" : "semicasinaty-ilibaholy.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-9090-485e-9787-4e3c02de0b81" ,
"value" : "transupovetn-monozeruduless.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-63d4-4d9e-afb6-432d02de0b81" ,
"value" : "debapesetn-underisaxufical-imukugamism.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-b8ac-4dfe-ae03-4c6802de0b81" ,
"value" : "multibibetefy.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-cb90-445a-bc40-40fc02de0b81" ,
"value" : "exanonish.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-1050-400d-b501-40f902de0b81" ,
"value" : "interanulish-imazekalike-unisukugate.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-7c20-431b-ba83-4ff002de0b81" ,
"value" : "inokevidage.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-f790-435d-9b4a-487402de0b81" ,
"value" : "monofipuly-underubihal.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-5eb0-4836-ba2f-467602de0b81" ,
"value" : "profobekify-subebobefy-exozufous.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-ffa0-4628-bd6d-486202de0b81" ,
"value" : "macrovetecuship-emebudemical-underaxakament.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-1198-454d-8ac7-47a902de0b81" ,
"value" : "demeficiward-retitisily-macromuvaward.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-757c-4307-862a-426102de0b81" ,
"value" : "monosumuly-ilenusuty-dedabaness.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-8dc4-41c6-923d-48ea02de0b81" ,
"value" : "exapofaran-postulusadify.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-8750-4ca7-b3ce-4a3e02de0b81" ,
"value" : "microhobament-postevofafity.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-bbcc-4f1d-8759-402f02de0b81" ,
"value" : "rebezusaly-overidirity-ultrahiseness.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-d968-4560-a0c5-497f02de0b81" ,
"value" : "unafacigage-transihicical-prebokity.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-2578-428d-952f-4ec802de0b81" ,
"value" : "interazution-irudegufy-antinefoly.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-0e3c-470a-a561-4cc602de0b81" ,
"value" : "minizecidish-macrolafukish-depovased.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-8e08-44f2-8f40-45f702de0b81" ,
"value" : "derirepous-cosideship-semibiseless.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-db8c-4b9f-b6f6-4f2502de0b81" ,
"value" : "overupazadity-irativorical.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-48d0-4275-90c6-428902de0b81" ,
"value" : "coseviness-nonikunant-macrorasihood.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-078c-4f56-9b71-47e802de0b81" ,
"value" : "nonesocern-macrotocipity.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-8b04-45c5-b74e-420d02de0b81" ,
"value" : "interuzoputy.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-5f84-46d4-a5d1-4e6402de0b81" ,
"value" : "inicinic-misuluzan-ultrakuxuness.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-5328-481c-94a9-4d1102de0b81" ,
"value" : "sububesebism-ultrabutath.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-d9f4-4dc6-8c7f-496002de0b81" ,
"value" : "misacireship.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-94d8-468c-9795-493f02de0b81" ,
"value" : "exuxuburan-miniravuhood-exosoxen.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-5e4c-4545-9dee-4cc302de0b81" ,
"value" : "macrozigahood-monosulopancy.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-b11c-41ba-a150-456302de0b81" ,
"value" : "unegoping-detunusion-antimuruseful.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-8bb8-48fb-844d-434b02de0b81" ,
"value" : "macrozixaward-semivanimoly-underekutoty.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-ba34-42e3-bc66-4d9d02de0b81" ,
"value" : "ultratipuxian-inosilission-multiridith.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-6460-4513-9446-408702de0b81" ,
"value" : "microtonagament.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-ff34-4cc4-821d-45a702de0b81" ,
"value" : "cobemesion-redacocoful.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-97d4-42fe-b87f-4fb402de0b81" ,
"value" : "disicogure-seminedasoly.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-a2a8-46af-ac45-482002de0b81" ,
"value" : "dekacify.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-d2b4-40b6-a474-488b02de0b81" ,
"value" : "emegamilike-imupogazance-ultrapanacesion.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-9d94-4356-86b8-493202de0b81" ,
"value" : "unocelibable-underelatucance.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-8398-4c32-9bb0-404002de0b81" ,
"value" : "irodetolike-imisocatite-inecolafian.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-9b6c-449e-adf3-472402de0b81" ,
"value" : "antikuzucen-irokarance-transitupikible.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-9f5c-409f-a580-407502de0b81" ,
"value" : "semiralety-macrorobinant-ultrapixutency.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-dbf0-4824-b5e2-49d502de0b81" ,
"value" : "transisomuless.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-8d50-4b8f-90c5-4b4102de0b81" ,
"value" : "ilebigument-macroripakesion.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-b890-417d-a73e-492002de0b81" ,
"value" : "profebarable.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-7474-4f9a-8996-4f2f02de0b81" ,
"value" : "nonixigefy-protisumiless.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-f454-47eb-82c8-424a02de0b81" ,
"value" : "corahicohood.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-1be4-4e9b-9529-42bc02de0b81" ,
"value" : "pretuvution-disafatutical-irehopuvese.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-5f94-4e38-aeed-4ac602de0b81" ,
"value" : "miniregath-anticesuty-postudagily.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-6180-4b8f-8dbd-4d1102de0b81" ,
"value" : "coguvilaship-recakubodom.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579168" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea0-57fc-41d7-b557-47c002de0b81" ,
"value" : "overipugoful-interizihing.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-ae60-4ab7-bdc6-4db602de0b81" ,
"value" : "imipadaness-iralikoward-semitolicoly.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-d9a0-4f1c-9ce7-4c5202de0b81" ,
"value" : "interupefity-semigiduly.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-1de0-48db-b355-460602de0b81" ,
"value" : "macromosoriship.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-2998-4d47-a348-432902de0b81" ,
"value" : "antigizepist.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-ef90-4f3c-b128-452602de0b81" ,
"value" : "subuluhic-disomokate.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-66e0-401e-9302-4d1302de0b81" ,
"value" : "irunucudor-macrogocudern-comoxizish.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-0160-4072-a441-42e002de0b81" ,
"value" : "underedofobate.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-0e54-4464-885a-4f4502de0b81" ,
"value" : "prolapuzern-progobutiful-dehifasion.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-7888-43ab-8222-40a202de0b81" ,
"value" : "irucasian-macrofevasion.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-0e3c-4bd8-b54a-479e02de0b81" ,
"value" : "unogoxeness-semixocapency.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-c6b4-4be6-af1d-4f8302de0b81" ,
"value" : "rehofocese.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-c70c-4a72-b20e-4b3302de0b81" ,
"value" : "exebutian-interomifenism.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-88c0-4e64-a95e-48ba02de0b81" ,
"value" : "subihefahood-subenopure-ultramoherihood.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-6450-49c1-8a7f-4cc902de0b81" ,
"value" : "nonezogeward.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-26e0-424b-9051-449c02de0b81" ,
"value" : "exasavate-minidevilefy-subanevous.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-0d84-4ba3-b2b2-47f002de0b81" ,
"value" : "enodenission-overucelancy-microvitasission.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-2bc4-44b7-a454-4f5402de0b81" ,
"value" : "ultrafakitesion-misesuzahical-transanafetion.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-b8d8-4624-bda1-4c2602de0b81" ,
"value" : "interinipoly-minimorovor-debininess.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-f354-4a4d-9a04-4ede02de0b81" ,
"value" : "prenedelission-interugefable-repekosossion.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-0ccc-47fd-b9cb-4b0802de0b81" ,
"value" : "postifozible-irololuship.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-517c-4613-b265-446b02de0b81" ,
"value" : "unozolasion.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-650c-4f1d-9e23-4ffa02de0b81" ,
"value" : "unobelaness-prepifavety.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-648c-4d39-9493-406e02de0b81" ,
"value" : "cofukosable.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-23fc-4171-a815-46fa02de0b81" ,
"value" : "iloletible-imakeben.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-7ff4-45e1-8b5b-461a02de0b81" ,
"value" : "ultraronupity.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-f400-4a1e-bd9d-4b7302de0b81" ,
"value" : "minikisision-monobavunism-micronepavage.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-5188-4e62-9ce6-42ee02de0b81" ,
"value" : "unufepaness-misedepugance.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-c8e0-4117-88b6-495502de0b81" ,
"value" : "inafolage.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-53b8-4678-9d14-49c102de0b81" ,
"value" : "semifolofic-unaraxal.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-f4d4-41a9-9b23-4fe202de0b81" ,
"value" : "enerivosism-imenufanist-macrovonahood.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-318c-4af5-89b5-4fd702de0b81" ,
"value" : "monobocution.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-10e8-4e33-886d-467702de0b81" ,
"value" : "cosuzuness-prepurizor-unasulal.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-ff80-491b-bd75-48d402de0b81" ,
"value" : "inopivic-antimaporary-subavocobive.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-e3f0-466e-8fbd-40f502de0b81" ,
"value" : "covogidish-iletinassion.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-37d8-4059-a55e-40c402de0b81" ,
"value" : "defizalike-unodatage-inarabevous.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-9db8-4561-aa70-45ed02de0b81" ,
"value" : "unuvirisern-interusalosize-misucakiness.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-0f90-44ca-81ca-466302de0b81" ,
"value" : "ireninenish-multicemath-prezucetussion.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-5c8c-4935-94bd-42e302de0b81" ,
"value" : "interodekive.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-0d24-4b11-a73d-4b1002de0b81" ,
"value" : "iramilahood-antirotuxary-misobegesion.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-8340-4330-b20c-424802de0b81" ,
"value" : "multidafadite-postagoker.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-3670-48c6-847c-433f02de0b81" ,
"value" : "monobagehance.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-d35c-4bce-9449-412b02de0b81" ,
"value" : "emixuvidite-ilofikency-subolubify.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-17b8-4b19-bfc3-49c502de0b81" ,
"value" : "postugihucency-emademify.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-2d3c-4926-a848-4c0102de0b81" ,
"value" : "cotefehood-imocakitency.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-1188-4ad8-89d7-43af02de0b81" ,
"value" : "enikavely-inosifuty-postaviraly.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-55a4-4679-847f-475b02de0b81" ,
"value" : "transabusossion.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-801c-4dbb-98f5-4a2202de0b81" ,
"value" : "interitebure.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-8e58-4398-ba1a-459a02de0b81" ,
"value" : "unehumugage-ultraburosion.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-6b9c-45f3-9d91-413102de0b81" ,
"value" : "subutavahen-inuhabish.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-5410-4db1-9f66-45ea02de0b81" ,
"value" : "subifefer-devufoward-probelalance.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-b064-4859-a6c3-462702de0b81" ,
"value" : "emefimafible.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-d928-4e67-869d-48a202de0b81" ,
"value" : "ilibefudom.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-3794-4af1-863f-403f02de0b81" ,
"value" : "postemivaxage.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-7ef4-41ee-ba42-4d9602de0b81" ,
"value" : "monofudumossion.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-86c4-4305-bbfa-455e02de0b81" ,
"value" : "inuxazodom-macrodexaxahood.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-0cdc-458b-96bd-478202de0b81" ,
"value" : "semibugegetn-monohifutuly.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-5bbc-4c77-8171-44f902de0b81" ,
"value" : "macromohazaship-subonohion-disonixucing.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-7c44-483f-96e4-4dfa02de0b81" ,
"value" : "emosacekant-cokebohood-nonetakive.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-5f14-44f7-a0c5-4d2102de0b81" ,
"value" : "interozecifist-antipinukity-multifekemath.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-4638-4eed-bb0e-4e7b02de0b81" ,
"value" : "refedomous-antifaliless.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-a1b4-47bc-820c-4ce502de0b81" ,
"value" : "ultraxekevohood-nonizerosion-exovigant.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-780c-417c-90ea-4cbf02de0b81" ,
"value" : "interarogous-unuculuhood.org"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-0ca8-4ec5-a53b-4a6e02de0b81" ,
"value" : "semipulimian.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-1f14-4444-9666-400102de0b81" ,
"value" : "monocalacaless.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-8d70-4dac-bc9d-47ed02de0b81" ,
"value" : "disevolikency-retipegation.biz"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-8d1c-4a2d-a0d3-450e02de0b81" ,
"value" : "cosituxath-misuxunor.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea1-8b38-49ec-905f-466002de0b81" ,
"value" : "ultraporader-conapefy-prolobeziless.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579169" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea2-2e74-4cf2-a4d7-4acd02de0b81" ,
"value" : "ilucasure.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579170" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea2-50a4-4019-8da7-430402de0b81" ,
"value" : "reletohite-misosulahood-antitedudom.info"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579170" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea2-6b68-4172-ad23-4d4002de0b81" ,
"value" : "minivucilous-inafafomism.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579170" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea2-8f28-4888-bc55-49ea02de0b81" ,
"value" : "monorifutaless-ilocamussion.name"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579170" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea2-5054-4c41-bbfe-401002de0b81" ,
"value" : "inohufohese-imufilahood-antifidupite.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579170" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea2-1a74-431e-a020-4f9102de0b81" ,
"value" : "emegemaxed-transigifuty-multitumolith.net"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (DGA)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579170" ,
"to_ids" : true ,
"type" : "domain" ,
"uuid" : "5d13cea2-91f4-4a79-a8f8-4f7f02de0b81" ,
"value" : "exotacible-denitokolike.com"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579189" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb5-d078-4202-a4b0-47a802de0b81" ,
"value" : "163.172.201.184"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-5b64-4233-ae59-47ff02de0b81" ,
"value" : "163.172.202.116"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-add0-44c4-aa28-4e1302de0b81" ,
"value" : "5.135.35.160"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-2b2c-4f54-baf5-4b8d02de0b81" ,
"value" : "5.135.58.119"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-9314-463a-9be7-40c702de0b81" ,
"value" : "5.135.58.121"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-1ed0-4f24-9454-4bdb02de0b81" ,
"value" : "5.135.58.123"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-7978-49ec-89b1-4ac302de0b81" ,
"value" : "5.135.58.124"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-cc38-4f11-9fe1-426602de0b81" ,
"value" : "5.196.194.209"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-ea28-46e1-922c-440502de0b81" ,
"value" : "51.254.57.83"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-b56c-4aa0-9004-4d8c02de0b81" ,
"value" : "54.36.244.84"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-b4e4-4905-b4d2-457802de0b81" ,
"value" : "54.36.244.85"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-e108-457e-a1da-427002de0b81" ,
"value" : "54.36.244.91"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-ed18-4849-bd32-436d02de0b81" ,
"value" : "91.121.36.212"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-c5ec-40fd-b339-436f02de0b81" ,
"value" : "91.121.236.219"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-8968-414e-9cc5-464902de0b81" ,
"value" : "91.134.157.11"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-ca24-4c83-901d-43a902de0b81" ,
"value" : "92.222.151.63"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-c964-45f0-bdf6-49d502de0b81" ,
"value" : "145.239.108.241"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-dbd0-401c-9d52-4f0b02de0b81" ,
"value" : "178.33.101.176"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-5dc8-4c66-ab9d-498802de0b81" ,
"value" : "178.33.101.177"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-fb18-4b94-adb5-4c0e02de0b81" ,
"value" : "178.33.101.178"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-eff0-450f-a0bf-44cd02de0b81" ,
"value" : "178.33.101.182"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-b030-4a65-8cb3-4eca02de0b81" ,
"value" : "188.165.5.123"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-1b88-4126-8d07-40fb02de0b81" ,
"value" : "188.165.163.20"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-2 C2" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579190" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ceb6-68f0-4c49-901d-47f802de0b81" ,
"value" : "193.70.73.115"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (Hardcoded IP)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579217" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ced1-1670-4a38-bb07-4c8002de0b81" ,
"value" : "169.239.128.166"
} ,
{
"category" : "Network activity" ,
"comment" : "Stage-1 C2 (Hardcoded IP)" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579217" ,
"to_ids" : true ,
"type" : "ip-dst" ,
"uuid" : "5d13ced1-c8dc-427e-aefa-4d0002de0b81" ,
"value" : "185.244.149.73"
} ,
{
"category" : "Payload delivery" ,
"comment" : "Sample" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579237" ,
"to_ids" : true ,
"type" : "md5" ,
"uuid" : "5d13cee5-eb7c-4e9a-9d4a-46fc02de0b81" ,
"value" : "827ecf99001fa66de513fe5281ce064d"
} ,
{
"category" : "External analysis" ,
"comment" : "" ,
"deleted" : false ,
"disable_correlation" : false ,
"timestamp" : "1561579281" ,
"to_ids" : false ,
"type" : "link" ,
"uuid" : "5d13cf12-511c-4239-b0a5-423d02de0b81" ,
"value" : "https://blog.netlab.360.com/an-analysis-of-linux-ngioweb-botnet-en/"
}
] ,
"Object" : [
{
"comment" : "" ,
"deleted" : false ,
"description" : "File object describing a file with meta-information" ,
"meta-category" : "file" ,
"name" : "file" ,
"template_uuid" : "688c46fb-5edb-40a3-8273-1af7923e2215" ,
"template_version" : "17" ,
"timestamp" : "1561579257" ,
"uuid" : "2f57498c-e927-41b9-a77c-eca067a9c40a" ,
"ObjectReference" : [
{
"comment" : "" ,
"object_uuid" : "2f57498c-e927-41b9-a77c-eca067a9c40a" ,
"referenced_uuid" : "3ac01012-63fb-4556-8e01-5878a4769e9f" ,
2023-04-21 13:25:09 +00:00
"relationship_type" : "analysed-with" ,
2023-12-14 14:30:15 +00:00
"timestamp" : "1561579258" ,
"uuid" : "5d13cefa-ff44-4753-9127-40bd02de0b81"
}
] ,
"Attribute" : [
{
"category" : "Payload delivery" ,
"comment" : "Sample" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "md5" ,
"timestamp" : "1561579237" ,
"to_ids" : true ,
"type" : "md5" ,
"uuid" : "bc6c1f1e-4d1b-472c-afc9-3f7d51f901c4" ,
"value" : "827ecf99001fa66de513fe5281ce064d"
} ,
{
"category" : "Payload delivery" ,
"comment" : "Sample" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "sha1" ,
"timestamp" : "1561579237" ,
"to_ids" : true ,
"type" : "sha1" ,
"uuid" : "86d98f3f-f25a-4163-8759-d2c9a8e92cf1" ,
"value" : "a92299b76c99a5915760e91f9bf52429415f4fb9"
} ,
{
"category" : "Payload delivery" ,
"comment" : "Sample" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "sha256" ,
"timestamp" : "1561579237" ,
"to_ids" : true ,
"type" : "sha256" ,
"uuid" : "3a6046e6-b5af-414e-9806-ad6750feced2" ,
"value" : "0b213e1f92a2613f7cebff82e8ffbdae985e3446960bf4bd365b5751efa08b53"
}
]
} ,
{
"comment" : "" ,
"deleted" : false ,
"description" : "VirusTotal report" ,
"meta-category" : "misc" ,
"name" : "virustotal-report" ,
"template_uuid" : "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4" ,
"template_version" : "2" ,
"timestamp" : "1561579258" ,
"uuid" : "3ac01012-63fb-4556-8e01-5878a4769e9f" ,
"Attribute" : [
{
"category" : "Other" ,
"comment" : "Sample" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "last-submission" ,
"timestamp" : "1561579237" ,
"to_ids" : false ,
"type" : "datetime" ,
"uuid" : "91b3c9eb-8efa-40bd-b689-b4cfe6dbccda" ,
"value" : "2019-06-26T02:09:07"
} ,
{
"category" : "Payload delivery" ,
"comment" : "Sample" ,
"deleted" : false ,
"disable_correlation" : false ,
"object_relation" : "permalink" ,
"timestamp" : "1561579237" ,
"to_ids" : false ,
"type" : "link" ,
"uuid" : "9e372908-3354-43c6-bd9a-9e47c34057f1" ,
"value" : "https://www.virustotal.com/file/0b213e1f92a2613f7cebff82e8ffbdae985e3446960bf4bd365b5751efa08b53/analysis/1561514947/"
} ,
{
"category" : "Payload delivery" ,
"comment" : "Sample" ,
"deleted" : false ,
"disable_correlation" : true ,
"object_relation" : "detection-ratio" ,
"timestamp" : "1561579237" ,
"to_ids" : false ,
"type" : "text" ,
"uuid" : "1d56cb36-2e8c-469b-bffa-7d0c941ba808" ,
"value" : "10/54"
}
]
}
2023-04-21 13:25:09 +00:00
]
2023-12-14 14:30:15 +00:00
}
2023-04-21 13:25:09 +00:00
}
