adulau/misp-circl-feed
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Packages Wiki Activity Actions
misp-circl-feed/feeds/circl/stix-2.1/552b6de3-9b10-48a1-8226-c05b950d210b.json

2392 lines
665 KiB
JSON
Raw Normal View History

chg: [misp-stix] STIX 2.1 export added
2023-04-21 14:44:17 +00:00
{
"type": "bundle",
"id": "bundle--552b6de3-9b10-48a1-8226-c05b950d210b",
"objects": [
{
"type": "identity",
"spec_version": "2.1",
"id": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T08:41:59.000Z",
"modified": "2015-04-13T08:41:59.000Z",
"name": "CthulhuSPRL.be",
"identity_class": "organization"
},
{
"type": "report",
"spec_version": "2.1",
"id": "report--552b6de3-9b10-48a1-8226-c05b950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T08:41:59.000Z",
"modified": "2015-04-13T08:41:59.000Z",
"name": "FBI Flash Message: MC-000055-BT EC3/IC4 takedown of the AAEH botnet",
"published": "2015-04-13T11:18:36Z",
"object_refs": [
"observed-data--552b6e23-3890-4943-b553-42f6950d210b",
"file--552b6e23-3890-4943-b553-42f6950d210b",
"artifact--552b6e23-3890-4943-b553-42f6950d210b",
"x-misp-attribute--552b6e6e-aab0-4511-b343-eb29950d210b",
"x-misp-attribute--552b6e6e-0bdc-4d59-b2c7-eb29950d210b",
"x-misp-attribute--552b6e6e-d438-4180-bad4-eb29950d210b",
"x-misp-attribute--552b6e6e-4088-40b6-9913-eb29950d210b",
"x-misp-attribute--552b6e6e-d360-448d-80bb-eb29950d210b",
"indicator--552b6e90-cbb4-412f-bffe-73a5950d210b",
"x-misp-attribute--552b6f88-341c-4a2c-b1e5-c060950d210b",
"indicator--552b6f96-abac-4390-8545-4f04950d210b",
"indicator--552b6f96-c580-41ca-9a4c-40c7950d210b",
"indicator--552b6f96-ab4c-49ec-a22a-4ffb950d210b",
"indicator--552b6f96-4e28-45de-87ed-4bed950d210b",
"indicator--552b6f96-a194-47e9-8e92-4a51950d210b",
"indicator--552b6f97-74a0-4ed0-9a72-4415950d210b",
"indicator--552b6f97-cf9c-4c60-a376-4932950d210b",
"indicator--552b6f97-5c98-4b4e-9b6c-4c8d950d210b",
"indicator--552b6f97-76bc-43a8-bd88-4fed950d210b",
"indicator--552b6f97-ce98-4afd-a700-4609950d210b",
"indicator--552b6f97-0c48-4f80-ab6d-4505950d210b",
"indicator--552b6f97-6d84-4ebb-80c3-483e950d210b",
"indicator--552b6f97-b984-4d7a-8dac-463f950d210b",
"indicator--552b6f97-6708-4ab2-89a4-4ec6950d210b",
"indicator--552b6f97-2e14-425e-a31d-4eb9950d210b",
"indicator--552b6f97-2f94-4e15-8d81-4446950d210b",
"indicator--552b6f97-e780-43f7-ac76-4e24950d210b",
"indicator--552b6f98-b578-4ccd-912e-4891950d210b",
"indicator--552b6f98-8608-4b6f-a60c-4d50950d210b",
"indicator--552b6f98-4e24-4c14-b0d0-4929950d210b",
"indicator--552b6f98-6974-4b31-864c-4c4e950d210b",
"indicator--552b6f98-d028-4d61-ab4f-4227950d210b",
"indicator--552b6f98-7c00-4103-8bab-452d950d210b",
"indicator--552b6f98-01f4-4915-b027-4e30950d210b",
"indicator--552b6f98-bce4-4460-aed8-46c4950d210b",
"indicator--552b6f98-00b0-43bf-87ca-4ce3950d210b",
"indicator--552b6f98-ef54-4d18-ae7d-43fe950d210b",
"indicator--552b6f98-45e0-47ef-b691-487e950d210b",
"indicator--552b6f98-0c00-44e5-afff-44eb950d210b",
"indicator--552b6f99-9e50-48ac-8f78-48a2950d210b",
"indicator--552b6f99-0880-43d1-891b-446c950d210b",
"indicator--552b6f99-7ff8-4261-b454-41ea950d210b",
"indicator--552b6f99-57f4-44b2-8a09-4b31950d210b",
"indicator--552b6f99-1948-4f1e-a8bf-4ae6950d210b",
"indicator--552b6f99-12dc-4473-8e0e-40c8950d210b",
"indicator--552b6f99-e434-4a5b-9d7f-48ea950d210b",
"indicator--552b6f99-bb68-4568-a670-41e7950d210b",
"indicator--552b6f99-56d8-4073-93f5-4b9a950d210b",
"indicator--552b6f99-24ac-42f5-8420-4bd0950d210b",
"indicator--552b6f99-10f8-4cf5-b96b-4326950d210b",
"indicator--552b6f99-8854-4eed-bf33-48fe950d210b",
"indicator--552b6f9a-e054-42de-bed1-436e950d210b",
"indicator--552b6f9a-f928-4907-aa6e-4c19950d210b",
"indicator--552b6f9a-0490-4206-9f2e-40a3950d210b",
"indicator--552b6f9a-6b60-4898-9b41-4eb5950d210b",
"indicator--552b6f9a-a2a4-4ca3-8da5-4bf6950d210b",
"indicator--552b6f9a-058c-4712-8922-4049950d210b",
"indicator--552b6f9a-2e00-4d84-ae49-4a5e950d210b",
"indicator--552b6f9a-a008-499c-a29b-466a950d210b",
"indicator--552b6f9a-74e4-462e-a1db-4258950d210b",
"indicator--552b6f9a-5640-426f-93a9-4044950d210b",
"indicator--552b6f9a-2928-4d75-9717-42e0950d210b",
"indicator--552b6f9a-4a30-4ab1-88a9-4da1950d210b",
"indicator--552b6f9b-a018-4afc-9e77-4b9d950d210b",
"indicator--552b6f9b-a8e8-4e38-8cf9-4f8f950d210b",
"indicator--552b6f9b-94d0-4f6a-8c03-498c950d210b",
"indicator--552b6f9b-b5d8-4ff4-9b31-4537950d210b",
"indicator--552b6f9b-d1a8-41e9-a516-463d950d210b",
"indicator--552b6f9b-b000-4160-8209-497e950d210b",
"indicator--552b6f9b-e0c4-4b76-bb87-4329950d210b",
"indicator--552b6f9b-7758-42d9-9b16-4157950d210b",
"indicator--552b6f9b-2c2c-4a70-9171-4a24950d210b",
"indicator--552b6f9b-4370-4781-9d00-412f950d210b",
"indicator--552b6f9b-1c98-48fc-90ae-4eed950d210b",
"indicator--552b6f9c-0c28-4f45-9ebb-4724950d210b",
"indicator--552b6f9c-11d8-4f7c-b0d5-464f950d210b",
"indicator--552b6f9c-d8e4-4529-a712-45d8950d210b",
"indicator--552b6f9c-41cc-43f6-bd50-42c4950d210b",
"indicator--552b6f9c-c3b4-4cdd-9ff4-4c97950d210b",
"indicator--552b6f9c-4ab0-46a6-98ce-461f950d210b",
"indicator--552b6f9c-8090-46a7-9506-4b75950d210b",
"indicator--552b6f9c-4d9c-4d58-84e2-4446950d210b",
"indicator--552b6f9c-6e40-43f8-9c9b-4648950d210b",
"indicator--552b6f9c-277c-488d-9fa3-45dd950d210b",
"indicator--552b6f9c-4e7c-46fa-8abe-415d950d210b",
"indicator--552b6f9c-eed4-4e15-9ab0-4472950d210b",
"indicator--552b6f9d-b214-45a0-a520-4572950d210b",
"indicator--552b6f9d-ae64-4d32-b6c8-4a9f950d210b",
"indicator--552b6f9d-9088-473a-9e8f-4745950d210b",
"indicator--552b6f9d-f548-4a27-8f16-47aa950d210b",
"indicator--552b6f9d-e9c8-4fb9-a0d3-4d5a950d210b",
"indicator--552b6f9d-ea00-49e6-8920-4f70950d210b",
"indicator--552b6f9d-0aa4-4ea8-8b25-4590950d210b",
"indicator--552b6f9d-35d4-44ea-80b9-4f65950d210b",
"indicator--552b6f9d-266c-453b-a367-4575950d210b",
"indicator--552b6f9d-0a20-4e4f-9f49-412c950d210b",
"indicator--552b6f9d-7cf0-40c6-a498-4610950d210b",
"x-misp-attribute--552b6fb2-1e80-45f5-b6d8-4acf950d210b"
],
"labels": [
"Threat-Report",
"misp:tool=\"MISP-STIX-Converter\""
],
"object_marking_refs": [
"marking-definition--34098fce-860f-48ae-8e50-ebd3cc5e41da"
]
},
{
"type": "observed-data",
"spec_version": "2.1",
"id": "observed-data--552b6e23-3890-4943-b553-42f6950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:20:03.000Z",
"modified": "2015-04-13T07:20:03.000Z",
"first_observed": "2015-04-13T07:20:03Z",
"last_observed": "2015-04-13T07:20:03Z",
"number_observed": 1,
"object_refs": [
"file--552b6e23-3890-4943-b553-42f6950d210b",
"artifact--552b6e23-3890-4943-b553-42f6950d210b"
],
"labels": [
"misp:type=\"attachment\"",
"misp:category=\"External analysis\""
]
},
{
"type": "file",
"spec_version": "2.1",
"id": "file--552b6e23-3890-4943-b553-42f6950d210b",
"name": "FLASH-MC-000055-BT_TLP GREEN.pdf",
"content_ref": "artifact--552b6e23-3890-4943-b553-42f6950d210b"
},
{
"type": "artifact",
"spec_version": "2.1",
"id": "artifact--552b6e23-3890-4943-b553-42f6950d210b",
"payload_bin": "JVBERi0xLjUNCiW1tbW1DQoxIDAgb2JqDQo8PC9UeXBlL0NhdGFsb2cvUGFnZXMgMiAwIFIvTGFuZyhlbi1VUykgL1N0cnVjdFRyZWVSb290IDMyIDAgUi9NYXJrSW5mbzw8L01hcmtlZCB0cnVlPj4+Pg0KZW5kb2JqDQoyIDAgb2JqDQo8PC9UeXBlL1BhZ2VzL0NvdW50IDQvS2lkc1sgMyAwIFIgMjQgMCBSIDI4IDAgUiAzMCAwIFJdID4+DQplbmRvYmoNCjMgMCBvYmoNCjw8L1R5cGUvUGFnZS9QYXJlbnQgMiAwIFIvUmVzb3VyY2VzPDwvWE9iamVjdDw8L0ltYWdlNSA1IDAgUj4+L0ZvbnQ8PC9GMSA2IDAgUi9GMiA4IDAgUi9GMyAxMCAwIFIvRjQgMTcgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VCL0ltYWdlQy9JbWFnZUldID4+L0Fubm90c1sgMTUgMCBSIDE2IDAgUiAyMiAwIFIgMjMgMCBSXSAvTWVkaWFCb3hbIDAgMCA2MTIgNzkyXSAvQ29udGVudHMgNCAwIFIvR3JvdXA8PC9UeXBlL0dyb3VwL1MvVHJhbnNwYXJlbmN5L0NTL0RldmljZVJHQj4+L1RhYnMvUy9TdHJ1Y3RQYXJlbnRzIDA+Pg0KZW5kb2JqDQo0IDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDUxOTM+Pg0Kc3RyZWFtDQp4nL1dWXPbOrJ+T1X+Ax7FqWMaC8EllXKNLduT3HuyzLEzUzPJPNAybXOsxSPR8fUvmr95uxvcJBJWbIGuUyeiKJCNbgC9foDZ/lf2/v3+p/HHY8YPDtjR8Zj95+2bUAg/YRz+EwH3BeN+pFmo8eZk9vbN/sdZep1pdrxgf337hp18GrP9w2WRX6WTAl93WBTp5Ca7ZN/3zxd3/9o/f7zL9r+m1/k8LfLFvKRzdA5vOhVMSHZ+9faNMPSYDEM/FiwKla/gFyAH9/0QflteN9d//OXtm++jb5/Hv3vB6NDbU6OzMy8cffT25Oj0I34/Ofb+xc7/5+2bE6CDtCoCSkV+krQJfB8xS1sZKT/ULApiP4zLtufeXjD63VOjr++Yt6dHf/nj5AQJft54x/6pZCBHHqyxp5TwhVp/Y5v6k9I8WhTFYrZNoImfhGs0o8iP4oBF0lfwQSL1hZQgShmDMP0gMbLdvGmEfH6D3GUoWZbP8eNqsfT2otEMuacOeHth9RsrUDw3+E/u6dGKnf5+CJ9n3l48+gBjxR7wp3TFFvj0BX4p0nye4bdL/NZ6wRJvLpD6PX699sr7LJ0jfXbqCT46wjsfWQ4/zvHyp1d2dlXgvWts2XTSPGkI5Svszx3eaCjh49hxakLvKRsb7ib4FmpIxP59j3fpcuLFo5rMQ8V/cWOZWVpGPpftMenOwv1T1R1MwRNfxywUfhCWD77nIjnkQh8e7EVwLU4O9uR7zrniXIYcbhzshfBdnnKljw6wScLpZ/ykR7nEz4O9AH470uYT70fH9KiIxwd7Gj7H0UFg3ky34oaaiI/WH9fHB7r1ZNUs0vX3BL+GNTF4a4cwURLcdALuxa1HxEZ/sZmixw8ELx8d87ojzc94y3RElc3wlZGhsNZGxvToxhuMsOg2SaB6quwYvZHacMOTarVpCzc8pXes8VRKqeSNXkWdDashPdicIj3rPZDaT/TaFBkFkn07gwk5Zjh5/9uZaR09HMDjmy+xqUlo4UdBuy0oEK6gV5PvI8FDHvXQ63Y70T4ooLW30Bu668JmNQJBmm44q9EisNVqwAoXQfBMq7FhJ9be0bETYKpByHHoK7AyQnM/iZmOQp9HbJm9ffP3P7E5tGzZeNHY+O0P1qKO10QNdlPiWCe+KgVNEibRJuzwDrla5lMGK0C3Ogyewi5UhZYgeQtZtk6HZNNmWz6fbbk5w6LAD2Fa6oSe2uzB4TRbIuNkvBjMqc+12Zp5ibFz0OKl4uj0RsBEVLGtN9vkoRxMAxiPREJrjtZovQNsD1Y/dhjW7qexuzkQxbQYeml+H+25IxQrM9ZW5rhRbajgtctJrmIa1cEZFIECX/6JwYuJv6NzhyRDaZr38rZtxgYOVjA8qAP0t55NXTuiDto8Eh3qX6eZ8YkzsgwTMBILLzJeJekTCATgOzP6RRsfGNoGo9MjaPuRPeTgZqLb6VC/4DAFth47JIRiEQqbbhJBV12PHtl/gFFSpNmqwDs5ev2L2u9eMbxcgpLNpileooiySyOP0AhwQeIrv5jYZOWWhyCJ/aBrmDD4cUZGK19LG6WzD+yP7K4MY4w8SlsEsyZd+5blGKrUosjg25Lh1aMnlHmc5L10LCLQqlHS6fh0MUmnL6VU+yTgMwY2CuNHWCUXyFYGF8vKQpNHlsLkWt0S96el4GAFZi4NtfaVtWsuV2wA1tFGp54TLgmC0JVrxtrzJUx8obtL6ojcdZrJ43/8HYaLHHkazfEHh+zxAEykpRO+SzqYnbER2maZwhdZpm5WCsStta+3DmSnA5Eb0xiAP9tjA05mONZpPn1nxtyZ1MOYPDwL2X6mz+7Sec13/Fy+28zKsFHheK+MUeHKRKiTx4e0mOC0vkG+/5wbvyCGeYfpN/zhAkxajhd0C1Nji59bhipxMFRCKVJnbQ5+fbII7mi2cN2ndL7eYC6v9p2ydyifXTURxPKgCmwkt3L87Ii7xaZKRJ9OEDtyBD4wiNTy8pcGGfXLtR8HtpfHGubpS+OleukGPo+H6n4Y+bG09l/C1ErkjiSgKQ+tJHZlIE5IsVnerhLUJArYiHakIwRGkBYyW1eFi4QMLhCIUlR3Uf5uXEr06XJK4U8vwU0gj+HLValBIQTAQCtbObTkEhz0/j5hOhSmFcbU71y6YDLBcNYihl+wYuLZmaC29MFjiJ4yYw+e1K1/fE9GIHoZgvGSaL3gyvdEBNZLYYwmYqy+qNG+JzlYOxnDPfhnjo0LbJdiuwm2K3advSqEdb6dg11XI5VP4+107pHHlScSwzwJieSToUCmeHW5bU29LEXScQUFNA02RPOMlf2yVEmfQ6rQTm31zf7apMJFHPlBTVPF4OKpLenwlvv8a09bkluSC8z4hwFVMDrJ4cOTD+yIqobF3KOyIlx19cBzuqA2u6C4xApIfxfecxUFB7vQ67CsYNCs9Hq8rh2JwWyMbMS+3JFEl2WZFwIFrOosTBJj4uEqctqbIAipNPZLrHeXSPSySde3TKp5JwO/m6X7YUzetx8eOzfZHkF5Q7h35Qk5ogr8dErpRlDR+fzaozL+Fd2B35bYakZpkgKTbnlZ+FZ1Fd8TYoSV/AhUOiYnE4jV5ijwS1bcLGsi9/Cjqd7Do5iMYv+mh6CtxoUAbzWpzJ3GqU9AQRygNusX0G8DkIvAubOQ221N9JMzWIBecsc4RPflsExu2GeP0Bo4ZDQoOI59mTdXc1Jw8EQ7vfqA+IprymLDXDinfOTEfR/A7nJrH24GoKdJGfbTG0DGQewrZaM3Xua41Gcmae6eeJQ8IdwBmI2FryMbvW9oUfOuQ7grVcX5E9PYPZeKK3R3LPR+jD7DevmAw3o+Ro3unn4QYP7PQj9FKV/ikj0x9QE1atT7XWUwplhAYONHnHgXhMNKwAC3ZyOD0HO88MLSwFzi2M17FBMbZ5WtQfWVLanK82N04sWjsaJrz7kIdCQRkzXIkAd2TamTqNdlq5A/BLziFUCoAm0ZPBE20ZyatGBJQpSQI22wRaqFSopCghfpFroo4Q1iKk4Qs0VPRy262Mw8VSG34JtaQyhVYK1NyiJMCPekmjuCN13l/V0dixpGJmpI1mGJWjPXZU9aOLcK42YHuEmDwRJtnFlkYGpCGoBbjQpDMbTQbSV8q5J6+asoQW1hOTgo3hLMFq/TWAdvObW1Gosw3bL2ZIFVUFxDuHJxzU4KrHz9NOkPs+RoXbJ5vZiL/CqfpLiQi7xZjujZEWYzNC7FlFZtdomPgcu4s7vfVUfwJKgjC2cBqBFJ2d1vZ6BCxljf/a/J9iY
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--552b6e6e-aab0-4511-b343-eb29950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:21:18.000Z",
"modified": "2015-04-13T07:21:18.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"External analysis\""
],
"x_misp_category": "External analysis",
"x_misp_type": "text",
"x_misp_value": "AAEH"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--552b6e6e-0bdc-4d59-b2c7-eb29950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:21:18.000Z",
"modified": "2015-04-13T07:21:18.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"External analysis\""
],
"x_misp_category": "External analysis",
"x_misp_type": "text",
"x_misp_value": "VObfus"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--552b6e6e-d438-4180-bad4-eb29950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:21:18.000Z",
"modified": "2015-04-13T07:21:18.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"External analysis\""
],
"x_misp_category": "External analysis",
"x_misp_type": "text",
"x_misp_value": "VBObfus"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--552b6e6e-4088-40b6-9913-eb29950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:21:18.000Z",
"modified": "2015-04-13T07:21:18.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"External analysis\""
],
"x_misp_category": "External analysis",
"x_misp_type": "text",
"x_misp_value": "Changeup"
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--552b6e6e-d360-448d-80bb-eb29950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:21:18.000Z",
"modified": "2015-04-13T07:21:18.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"External analysis\""
],
"x_misp_category": "External analysis",
"x_misp_type": "text",
"x_misp_value": "Beebone"
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6e90-cbb4-412f-bffe-73a5950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:21:52.000Z",
"modified": "2015-04-13T07:21:52.000Z",
"description": "Shadowserver foundation sinkhole",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.244.21.4']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:21:52Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--552b6f88-341c-4a2c-b1e5-c060950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:00.000Z",
"modified": "2015-04-13T07:26:00.000Z",
"labels": [
"misp:type=\"comment\"",
"misp:category=\"Network activity\""
],
"x_misp_category": "Network activity",
"x_misp_type": "comment",
"x_misp_value": "Sinkhole IP marked as useable for IDS. The idea being that it is not malicious, but it indicates that some malicious software is trying to connect to previously malicious hostnames or domains."
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f96-abac-4390-8545-4f04950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:14.000Z",
"modified": "2015-04-13T07:26:14.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk1.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:14Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f96-c580-41ca-9a4c-40c7950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:14.000Z",
"modified": "2015-04-13T07:26:14.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk23.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:14Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f96-ab4c-49ec-a22a-4ffb950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:14.000Z",
"modified": "2015-04-13T07:26:14.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk1.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:14Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f96-4e28-45de-87ed-4bed950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:14.000Z",
"modified": "2015-04-13T07:26:14.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk23.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:14Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f96-a194-47e9-8e92-4a51950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:14.000Z",
"modified": "2015-04-13T07:26:14.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk2.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:14Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f97-74a0-4ed0-9a72-4415950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:15.000Z",
"modified": "2015-04-13T07:26:15.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk24.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:15Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f97-cf9c-4c60-a376-4932950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:15.000Z",
"modified": "2015-04-13T07:26:15.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk2.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:15Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f97-5c98-4b4e-9b6c-4c8d950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:15.000Z",
"modified": "2015-04-13T07:26:15.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk24.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:15Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f97-76bc-43a8-bd88-4fed950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:15.000Z",
"modified": "2015-04-13T07:26:15.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk3.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:15Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f97-ce98-4afd-a700-4609950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:15.000Z",
"modified": "2015-04-13T07:26:15.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk25.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:15Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f97-0c48-4f80-ab6d-4505950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:15.000Z",
"modified": "2015-04-13T07:26:15.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk3.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:15Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f97-6d84-4ebb-80c3-483e950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:15.000Z",
"modified": "2015-04-13T07:26:15.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk25.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:15Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f97-b984-4d7a-8dac-463f950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:15.000Z",
"modified": "2015-04-13T07:26:15.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk4.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:15Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f97-6708-4ab2-89a4-4ec6950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:15.000Z",
"modified": "2015-04-13T07:26:15.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk26.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:15Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f97-2e14-425e-a31d-4eb9950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:15.000Z",
"modified": "2015-04-13T07:26:15.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk4.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:15Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f97-2f94-4e15-8d81-4446950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:15.000Z",
"modified": "2015-04-13T07:26:15.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk26.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:15Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f97-e780-43f7-ac76-4e24950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:15.000Z",
"modified": "2015-04-13T07:26:15.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk5.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:15Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f98-b578-4ccd-912e-4891950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:16.000Z",
"modified": "2015-04-13T07:26:16.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk27.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f98-8608-4b6f-a60c-4d50950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:16.000Z",
"modified": "2015-04-13T07:26:16.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk5.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f98-4e24-4c14-b0d0-4929950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:16.000Z",
"modified": "2015-04-13T07:26:16.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk27.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f98-6974-4b31-864c-4c4e950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:16.000Z",
"modified": "2015-04-13T07:26:16.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk6.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f98-d028-4d61-ab4f-4227950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:16.000Z",
"modified": "2015-04-13T07:26:16.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk28.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f98-7c00-4103-8bab-452d950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:16.000Z",
"modified": "2015-04-13T07:26:16.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk6.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f98-01f4-4915-b027-4e30950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:16.000Z",
"modified": "2015-04-13T07:26:16.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk28.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f98-bce4-4460-aed8-46c4950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:16.000Z",
"modified": "2015-04-13T07:26:16.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk7.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f98-00b0-43bf-87ca-4ce3950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:16.000Z",
"modified": "2015-04-13T07:26:16.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk29.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f98-ef54-4d18-ae7d-43fe950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:16.000Z",
"modified": "2015-04-13T07:26:16.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk7.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f98-45e0-47ef-b691-487e950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:16.000Z",
"modified": "2015-04-13T07:26:16.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk29.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f98-0c00-44e5-afff-44eb950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:16.000Z",
"modified": "2015-04-13T07:26:16.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk8.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:16Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f99-9e50-48ac-8f78-48a2950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:17.000Z",
"modified": "2015-04-13T07:26:17.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk1.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f99-0880-43d1-891b-446c950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:17.000Z",
"modified": "2015-04-13T07:26:17.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk8.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f99-7ff8-4261-b454-41ea950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:17.000Z",
"modified": "2015-04-13T07:26:17.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk2.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f99-57f4-44b2-8a09-4b31950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:17.000Z",
"modified": "2015-04-13T07:26:17.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk9.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f99-1948-4f1e-a8bf-4ae6950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:17.000Z",
"modified": "2015-04-13T07:26:17.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk3.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f99-12dc-4473-8e0e-40c8950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:17.000Z",
"modified": "2015-04-13T07:26:17.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk9.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f99-e434-4a5b-9d7f-48ea950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:17.000Z",
"modified": "2015-04-13T07:26:17.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk4.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f99-bb68-4568-a670-41e7950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:17.000Z",
"modified": "2015-04-13T07:26:17.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk10.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f99-56d8-4073-93f5-4b9a950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:17.000Z",
"modified": "2015-04-13T07:26:17.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk5.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f99-24ac-42f5-8420-4bd0950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:17.000Z",
"modified": "2015-04-13T07:26:17.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk10.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f99-10f8-4cf5-b96b-4326950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:17.000Z",
"modified": "2015-04-13T07:26:17.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk6.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f99-8854-4eed-bf33-48fe950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:17.000Z",
"modified": "2015-04-13T07:26:17.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk11.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:17Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9a-e054-42de-bed1-436e950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:18.000Z",
"modified": "2015-04-13T07:26:18.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk7.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9a-f928-4907-aa6e-4c19950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:18.000Z",
"modified": "2015-04-13T07:26:18.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk11.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9a-0490-4206-9f2e-40a3950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:18.000Z",
"modified": "2015-04-13T07:26:18.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk8.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9a-6b60-4898-9b41-4eb5950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:18.000Z",
"modified": "2015-04-13T07:26:18.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk12.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9a-a2a4-4ca3-8da5-4bf6950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:18.000Z",
"modified": "2015-04-13T07:26:18.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk9.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9a-058c-4712-8922-4049950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:18.000Z",
"modified": "2015-04-13T07:26:18.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk12.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9a-2e00-4d84-ae49-4a5e950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:18.000Z",
"modified": "2015-04-13T07:26:18.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk10.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9a-a008-499c-a29b-466a950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:18.000Z",
"modified": "2015-04-13T07:26:18.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk13.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9a-74e4-462e-a1db-4258950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:18.000Z",
"modified": "2015-04-13T07:26:18.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk11.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9a-5640-426f-93a9-4044950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:18.000Z",
"modified": "2015-04-13T07:26:18.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk13.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9a-2928-4d75-9717-42e0950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:18.000Z",
"modified": "2015-04-13T07:26:18.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk12.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9a-4a30-4ab1-88a9-4da1950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:18.000Z",
"modified": "2015-04-13T07:26:18.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk14.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:18Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9b-a018-4afc-9e77-4b9d950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:19.000Z",
"modified": "2015-04-13T07:26:19.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk13.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9b-a8e8-4e38-8cf9-4f8f950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:19.000Z",
"modified": "2015-04-13T07:26:19.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk14.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9b-94d0-4f6a-8c03-498c950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:19.000Z",
"modified": "2015-04-13T07:26:19.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk14.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9b-b5d8-4ff4-9b31-4537950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:19.000Z",
"modified": "2015-04-13T07:26:19.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk15.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9b-d1a8-41e9-a516-463d950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:19.000Z",
"modified": "2015-04-13T07:26:19.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk15.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9b-b000-4160-8209-497e950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:19.000Z",
"modified": "2015-04-13T07:26:19.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk15.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9b-e0c4-4b76-bb87-4329950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:19.000Z",
"modified": "2015-04-13T07:26:19.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk16.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9b-7758-42d9-9b16-4157950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:19.000Z",
"modified": "2015-04-13T07:26:19.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk16.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9b-2c2c-4a70-9171-4a24950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:19.000Z",
"modified": "2015-04-13T07:26:19.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk17.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9b-4370-4781-9d00-412f950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:19.000Z",
"modified": "2015-04-13T07:26:19.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk16.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9b-1c98-48fc-90ae-4eed950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:19.000Z",
"modified": "2015-04-13T07:26:19.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk18.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:19Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9c-0c28-4f45-9ebb-4724950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:20.000Z",
"modified": "2015-04-13T07:26:20.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk17.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9c-11d8-4f7c-b0d5-464f950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:20.000Z",
"modified": "2015-04-13T07:26:20.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk19.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9c-d8e4-4529-a712-45d8950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:20.000Z",
"modified": "2015-04-13T07:26:20.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk17.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9c-41cc-43f6-bd50-42c4950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:20.000Z",
"modified": "2015-04-13T07:26:20.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk20.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9c-c3b4-4cdd-9ff4-4c97950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:20.000Z",
"modified": "2015-04-13T07:26:20.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk18.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9c-4ab0-46a6-98ce-461f950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:20.000Z",
"modified": "2015-04-13T07:26:20.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk21.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9c-8090-46a7-9506-4b75950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:20.000Z",
"modified": "2015-04-13T07:26:20.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk18.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9c-4d9c-4d58-84e2-4446950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:20.000Z",
"modified": "2015-04-13T07:26:20.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk22.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9c-6e40-43f8-9c9b-4648950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:20.000Z",
"modified": "2015-04-13T07:26:20.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk19.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9c-277c-488d-9fa3-45dd950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:20.000Z",
"modified": "2015-04-13T07:26:20.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk23.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9c-4e7c-46fa-8abe-415d950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:20.000Z",
"modified": "2015-04-13T07:26:20.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk19.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9c-eed4-4e15-9ab0-4472950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:20.000Z",
"modified": "2015-04-13T07:26:20.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk24.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:20Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9d-b214-45a0-a520-4572950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:21.000Z",
"modified": "2015-04-13T07:26:21.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk20.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:21Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9d-ae64-4d32-b6c8-4a9f950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:21.000Z",
"modified": "2015-04-13T07:26:21.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk25.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:21Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9d-9088-473a-9e8f-4745950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:21.000Z",
"modified": "2015-04-13T07:26:21.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk20.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:21Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9d-f548-4a27-8f16-47aa950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:21.000Z",
"modified": "2015-04-13T07:26:21.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk26.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:21Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9d-e9c8-4fb9-a0d3-4d5a950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:21.000Z",
"modified": "2015-04-13T07:26:21.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk21.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:21Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9d-ea00-49e6-8920-4f70950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:21.000Z",
"modified": "2015-04-13T07:26:21.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk27.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:21Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9d-0aa4-4ea8-8b25-4590950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:21.000Z",
"modified": "2015-04-13T07:26:21.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk21.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:21Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9d-35d4-44ea-80b9-4f65950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:21.000Z",
"modified": "2015-04-13T07:26:21.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk28.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:21Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9d-266c-453b-a367-4575950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:21.000Z",
"modified": "2015-04-13T07:26:21.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk22.net']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:21Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9d-0a20-4e4f-9f49-412c950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:21.000Z",
"modified": "2015-04-13T07:26:21.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk29.org']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:21Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--552b6f9d-7cf0-40c6-a498-4610950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:21.000Z",
"modified": "2015-04-13T07:26:21.000Z",
"description": "DNS requests",
"pattern": "[domain-name:value = 'timechk22.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2015-04-13T07:26:21Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "x-misp-attribute",
"spec_version": "2.1",
"id": "x-misp-attribute--552b6fb2-1e80-45f5-b6d8-4acf950d210b",
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
"created": "2015-04-13T07:26:42.000Z",
"modified": "2015-04-13T07:26:42.000Z",
"labels": [
"misp:type=\"text\"",
"misp:category=\"External analysis\""
],
"x_misp_category": "External analysis",
"x_misp_type": "text",
"x_misp_value": "MC-000055-BT"
},
{
"type": "marking-definition",
"spec_version": "2.1",
"id": "marking-definition--34098fce-860f-48ae-8e50-ebd3cc5e41da",
"created": "2017-01-20T00:00:00.000Z",
"definition_type": "tlp",
"name": "TLP:GREEN",
"definition": {
"tlp": "green"
}
}
]
}
Reference in a new issue Copy permalink