{ "Event": { "analysis": "0", "date": "2016-06-29", "extends_uuid": "", "info": "Malspam 2016-06-29 (campaign subject: 'new invoice')", "publish_timestamp": "1467186064", "published": true, "threat_level_id": "3", "timestamp": "1467180129", "uuid": "5773639a-f104-49a0-b26c-4228950d210f", "Orgc": { "name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "tlp:white", "relationship_type": "" }, { "colour": "#3a7300", "local": false, "name": "circl:incident-classification=\"malware\"", "relationship_type": "" } ], "Attribute": [ { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180075", "to_ids": true, "type": "ip-dst", "uuid": "5773642b-68b8-4e24-9fe1-4a57950d210f", "value": "107.180.25.1" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180076", "to_ids": true, "type": "ip-dst", "uuid": "5773642c-e87c-49cb-8498-465f950d210f", "value": "109.234.160.30" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180076", "to_ids": true, "type": "ip-dst", "uuid": "5773642c-36a8-431e-abdc-40b7950d210f", "value": "112.140.42.29" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180077", "to_ids": true, "type": "ip-dst", "uuid": "5773642d-8538-49b3-a605-4bf5950d210f", "value": "160.153.73.196" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180077", "to_ids": true, "type": "ip-dst", "uuid": "5773642d-c344-46b8-aa85-45b5950d210f", "value": "166.63.125.135" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180077", "to_ids": true, "type": "ip-dst", "uuid": "5773642d-c854-421c-8575-453a950d210f", "value": "178.254.62.52" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180078", "to_ids": true, "type": "ip-dst", "uuid": "5773642e-c2a8-426f-9f81-4926950d210f", "value": "188.165.49.173" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180078", "to_ids": true, "type": "ip-dst", "uuid": "5773642e-9e20-43be-95df-4c08950d210f", "value": "188.40.77.144" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180079", "to_ids": true, "type": "ip-dst", "uuid": "5773642f-35b0-4fa4-b2fc-407d950d210f", "value": "192.185.225.43" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180079", "to_ids": true, "type": "ip-dst", "uuid": "5773642f-d344-486d-958d-49cf950d210f", "value": "192.185.36.128" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180079", "to_ids": true, "type": "ip-dst", "uuid": "5773642f-4f54-41d8-b6b3-4267950d210f", "value": "192.186.251.225" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180080", "to_ids": true, "type": "ip-dst", "uuid": "57736430-88a4-4262-b58a-429f950d210f", "value": "193.203.99.113" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180080", "to_ids": true, "type": "ip-dst", "uuid": "57736430-a4e8-4708-81ce-4834950d210f", "value": "195.3.96.72" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180081", "to_ids": true, "type": "ip-dst", "uuid": "57736431-cb90-4541-b40b-4b88950d210f", "value": "198.1.71.135" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180081", "to_ids": true, "type": "ip-dst", "uuid": "57736431-05bc-4219-9c94-42ee950d210f", "value": "199.204.248.105" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180081", "to_ids": true, "type": "ip-dst", "uuid": "57736431-6afc-4abe-af1c-4d94950d210f", "value": "208.71.106.219" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180082", "to_ids": true, "type": "ip-dst", "uuid": "57736432-c310-4af6-a258-4ef7950d210f", "value": "208.71.106.49" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180082", "to_ids": true, "type": "ip-dst", "uuid": "57736432-eb40-4dc2-8cf6-48d3950d210f", "value": "213.205.40.169" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180083", "to_ids": true, "type": "ip-dst", "uuid": "57736433-a13c-4101-bcf2-4110950d210f", "value": "217.76.156.98" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180083", "to_ids": true, "type": "ip-dst", "uuid": "57736433-0308-4a7a-89c7-4109950d210f", "value": "223.130.27.201" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180084", "to_ids": true, "type": "ip-dst", "uuid": "57736434-ce98-48a7-9b3b-4104950d210f", "value": "23.229.131.128" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180084", "to_ids": true, "type": "hostname", "uuid": "57736434-e3e0-448d-a690-44c9950d210f", "value": "51939812.de.strato-hosting.eu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180084", "to_ids": true, "type": "ip-dst", "uuid": "57736434-3928-4960-850f-4dd4950d210f", "value": "62.14.3.195" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180085", "to_ids": true, "type": "ip-dst", "uuid": "57736435-e300-4e61-90a9-4fc0950d210f", "value": "62.37.237.59" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180085", "to_ids": true, "type": "ip-dst", "uuid": "57736435-8470-423d-821a-49f6950d210f", "value": "64.50.161.218" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180086", "to_ids": true, "type": "ip-dst", "uuid": "57736436-63b4-4393-8b74-4ecb950d210f", "value": "66.147.244.210" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180086", "to_ids": true, "type": "ip-dst", "uuid": "57736436-2d3c-4d80-b49b-4663950d210f", "value": "69.27.174.10" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180086", "to_ids": true, "type": "ip-dst", "uuid": "57736436-7664-48c1-b0f8-4fe8950d210f", "value": "78.24.186.235" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180087", "to_ids": true, "type": "ip-dst", "uuid": "57736437-f524-4c45-b820-45bd950d210f", "value": "79.174.64.15" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180087", "to_ids": true, "type": "ip-dst", "uuid": "57736437-6ee0-4977-a319-422a950d210f", "value": "79.174.64.211" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180088", "to_ids": true, "type": "ip-dst", "uuid": "57736438-a7f4-444a-a24e-47c4950d210f", "value": "80.150.6.143" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180088", "to_ids": true, "type": "ip-dst", "uuid": "57736438-be48-463a-8d23-4924950d210f", "value": "80.74.144.35" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180088", "to_ids": true, "type": "ip-dst", "uuid": "57736438-aee0-42bb-9c94-4444950d210f", "value": "81.169.145.153" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180088", "to_ids": true, "type": "ip-dst", "uuid": "57736438-2a3c-4fcc-adf9-4fc2950d210f", "value": "81.169.145.77" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180089", "to_ids": true, "type": "ip-dst", "uuid": "57736439-6cf0-418c-b739-4405950d210f", "value": "81.196.20.133" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180089", "to_ids": true, "type": "ip-dst", "uuid": "57736439-5ab8-4a94-be8b-4dfd950d210f", "value": "81.24.1.16" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180089", "to_ids": true, "type": "ip-dst", "uuid": "57736439-3fe8-432c-88e3-4b6c950d210f", "value": "83.235.64.44" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180089", "to_ids": true, "type": "ip-dst", "uuid": "57736439-e100-4906-a870-4ca3950d210f", "value": "85.17.4.180" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180089", "to_ids": true, "type": "ip-dst", "uuid": "57736439-87c0-42ba-81ae-4223950d210f", "value": "85.193.69.29" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180089", "to_ids": true, "type": "ip-dst", "uuid": "57736439-3370-42e1-a628-44a6950d210f", "value": "89.42.39.160" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180090", "to_ids": true, "type": "ip-dst", "uuid": "5773643a-1ed8-4b9d-a223-477f950d210f", "value": "91.223.216.66" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180090", "to_ids": true, "type": "ip-dst", "uuid": "5773643a-7118-45d0-ade9-4fa8950d210f", "value": "97.79.237.82" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180090", "to_ids": true, "type": "domain", "uuid": "5773643a-34c4-4ec3-8f48-4b8f950d210f", "value": "restteamusa.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180090", "to_ids": true, "type": "domain", "uuid": "5773643a-84d0-4ac0-8b8a-41cc950d210f", "value": "verifythevote.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180090", "to_ids": true, "type": "domain", "uuid": "5773643a-3304-4b55-a11e-4fdb950d210f", "value": "abligl.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180090", "to_ids": true, "type": "hostname", "uuid": "5773643a-c40c-47af-a0fd-406e950d210f", "value": "alaptare.home.ro" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180091", "to_ids": true, "type": "domain", "uuid": "5773643b-e75c-4af5-8096-4733950d210f", "value": "bolloevcenter.ru" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180091", "to_ids": true, "type": "domain", "uuid": "5773643b-c108-4857-85f3-451b950d210f", "value": "btc4kids.ru" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180091", "to_ids": true, "type": "hostname", "uuid": "5773643b-5d44-4c46-ab30-4df8950d210f", "value": "btcgroup.lgg.ru" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180091", "to_ids": true, "type": "hostname", "uuid": "5773643b-6e00-46d9-a71e-4998950d210f", "value": "btkdev.lgg.ru" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180091", "to_ids": true, "type": "domain", "uuid": "5773643b-0bc0-4aba-8bbf-44a0950d210f", "value": "century21keim.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180091", "to_ids": true, "type": "domain", "uuid": "5773643b-f0e0-4d40-930a-4488950d210f", "value": "certifiedbanker.org" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180092", "to_ids": true, "type": "hostname", "uuid": "5773643c-d954-4702-be64-42b9950d210f", "value": "clients.seospell.co.in" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180092", "to_ids": true, "type": "hostname", "uuid": "5773643c-14e4-4878-9ec3-4afe950d210f", "value": "denzil.com.au" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180092", "to_ids": true, "type": "domain", "uuid": "5773643c-2e08-4e53-ad30-41fa950d210f", "value": "empiredeckandfence.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180092", "to_ids": true, "type": "hostname", "uuid": "5773643c-3dbc-4a43-9774-4cc5950d210f", "value": "giftskeys.ts9.ru" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180092", "to_ids": true, "type": "hostname", "uuid": "5773643c-6724-4096-ac0d-4541950d210f", "value": "girlsfashion.home.ro" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180093", "to_ids": true, "type": "domain", "uuid": "5773643d-ecac-401a-a3c5-455f950d210f", "value": "grantica.ru" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180093", "to_ids": true, "type": "url", "uuid": "5773643d-2804-4fee-b739-4095950d210f", "value": "http://188.165.49.173/~user/300lqhp" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180093", "to_ids": true, "type": "url", "uuid": "5773643d-a614-43b0-a6be-44bb950d210f", "value": "http://51939812.de.strato-hosting.eu/ww0pj" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180093", "to_ids": true, "type": "url", "uuid": "5773643d-5840-4024-bbcc-45de950d210f", "value": "http://66.147.244.210/~rainbilc/51at7" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180093", "to_ids": true, "type": "url", "uuid": "5773643d-dec4-42e8-9b12-45e9950d210f", "value": "http://83.235.64.44/~typecent/jp0crlu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1467180093", "to_ids": true, "type": "url", "uuid": "5773643d-03fc-44c5-a13c-4168950d210f", "value": "http://RESTTEAMUSA.COM/db8m9d" } ] } }