{ "Event": { "analysis": "0", "date": "2016-09-12", "extends_uuid": "", "info": "Malspam 2016-09-12 (.wsf in .zip) - campaign: \"Photo|Image\"", "publish_timestamp": "1473742561", "published": true, "threat_level_id": "3", "timestamp": "1473742032", "uuid": "57d6c85d-01c8-41ba-8ec2-40e7950d210f", "Orgc": { "name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "tlp:white", "relationship_type": "" }, { "colour": "#3a7300", "local": false, "name": "circl:incident-classification=\"malware\"", "relationship_type": "" } ], "Attribute": [ { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693951", "to_ids": true, "type": "ip-dst", "uuid": "57d6c8ff-69a0-47d1-a58d-460a950d210f", "value": "115.124.123.25" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693951", "to_ids": true, "type": "ip-dst", "uuid": "57d6c8ff-32c0-4ce9-a75d-4eb9950d210f", "value": "131.153.37.2" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693951", "to_ids": true, "type": "ip-dst", "uuid": "57d6c8ff-c28c-421e-8e89-40dd950d210f", "value": "131.153.37.4" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693952", "to_ids": true, "type": "ip-dst", "uuid": "57d6c900-c46c-426d-96ae-4468950d210f", "value": "142.4.34.194" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693952", "to_ids": true, "type": "ip-dst", "uuid": "57d6c900-45d8-40c1-bae4-40d2950d210f", "value": "144.76.110.39" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693952", "to_ids": true, "type": "ip-dst", "uuid": "57d6c900-12b4-4d55-9632-48aa950d210f", "value": "185.82.221.81" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693952", "to_ids": true, "type": "ip-dst", "uuid": "57d6c900-2b8c-42c2-8493-483a950d210f", "value": "186.202.153.83" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693953", "to_ids": true, "type": "ip-dst", "uuid": "57d6c901-6804-46ec-b32c-4c3c950d210f", "value": "208.113.154.124" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693953", "to_ids": true, "type": "ip-dst", "uuid": "57d6c901-bc10-430b-92ac-4fc3950d210f", "value": "43.225.54.151" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693953", "to_ids": true, "type": "ip-dst", "uuid": "57d6c901-b0e8-4544-b29c-42ee950d210f", "value": "5.9.28.140" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693953", "to_ids": true, "type": "ip-dst", "uuid": "57d6c901-734c-4f86-ae25-4022950d210f", "value": "50.87.153.14" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693954", "to_ids": true, "type": "ip-dst", "uuid": "57d6c902-56f4-4e46-8d52-4570950d210f", "value": "50.87.153.144" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693954", "to_ids": true, "type": "ip-dst", "uuid": "57d6c902-53ec-4cdd-abc2-4bce950d210f", "value": "50.97.161.228" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693954", "to_ids": true, "type": "ip-dst", "uuid": "57d6c902-bea0-45a2-bfee-471f950d210f", "value": "62.149.144.61" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693954", "to_ids": true, "type": "domain", "uuid": "57d6c902-1708-4803-bc60-4492950d210f", "value": "adss30.net" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693955", "to_ids": true, "type": "hostname", "uuid": "57d6c903-1284-43a7-b72f-45ed950d210f", "value": "ativa3.tempsite.ws" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693955", "to_ids": true, "type": "domain", "uuid": "57d6c903-8a5c-418a-9cc1-4eed950d210f", "value": "clickhubli.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693955", "to_ids": true, "type": "domain", "uuid": "57d6c903-a668-4cf2-b339-4ae5950d210f", "value": "clickroses.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693955", "to_ids": true, "type": "hostname", "uuid": "57d6c903-5af0-40a7-804e-49b6950d210f", "value": "files.mostafaahmadi.ir" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693956", "to_ids": true, "type": "domain", "uuid": "57d6c904-6404-4e47-99ba-4f05950d210f", "value": "gunturnayeebrahminemployees.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693956", "to_ids": true, "type": "domain", "uuid": "57d6c904-10d0-42da-8b86-4761950d210f", "value": "herosoft.biz" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693956", "to_ids": true, "type": "hostname", "uuid": "57d6c904-b44c-4d73-9efd-4c53950d210f", "value": "hostit.co.in" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693956", "to_ids": true, "type": "url", "uuid": "57d6c904-dfc0-446b-b95f-402e950d210f", "value": "http://adss30.net/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693957", "to_ids": true, "type": "url", "uuid": "57d6c905-1ffc-4518-a6f9-41b6950d210f", "value": "http://ativa3.tempsite.ws/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693957", "to_ids": true, "type": "url", "uuid": "57d6c905-3a58-4493-aee0-4d7f950d210f", "value": "http://clickhubli.com/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693957", "to_ids": true, "type": "url", "uuid": "57d6c905-588c-4103-b436-44b4950d210f", "value": "http://clickroses.com/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693957", "to_ids": true, "type": "url", "uuid": "57d6c905-1c80-4892-8a23-47a8950d210f", "value": "http://files.mostafaahmadi.ir/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693958", "to_ids": true, "type": "url", "uuid": "57d6c906-1b70-44b9-b570-4244950d210f", "value": "http://gunturnayeebrahminemployees.com/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693958", "to_ids": true, "type": "url", "uuid": "57d6c906-9b88-4b34-9c5d-4a79950d210f", "value": "http://herosoft.biz/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693958", "to_ids": true, "type": "url", "uuid": "57d6c906-f534-492c-9277-4de4950d210f", "value": "http://hostit.co.in/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693958", "to_ids": true, "type": "url", "uuid": "57d6c906-b1f8-414a-8d43-44ec950d210f", "value": "http://mottofotograf.com/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693959", "to_ids": true, "type": "url", "uuid": "57d6c907-70e0-43bd-a277-420c950d210f", "value": "http://samssara.com/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693959", "to_ids": true, "type": "url", "uuid": "57d6c907-39e0-48c2-962d-4e9d950d210f", "value": "http://synergyconnect.in/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693959", "to_ids": true, "type": "url", "uuid": "57d6c907-2fac-4bbd-adea-44e0950d210f", "value": "http://technometics.com/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693959", "to_ids": true, "type": "url", "uuid": "57d6c907-a4a4-4e2b-9802-44f6950d210f", "value": "http://websamrat.in/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693960", "to_ids": true, "type": "url", "uuid": "57d6c908-9998-4be7-959d-4b40950d210f", "value": "http://www.villakeratea.it/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693960", "to_ids": true, "type": "domain", "uuid": "57d6c908-f1c4-4ed3-92b8-478d950d210f", "value": "mottofotograf.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693960", "to_ids": true, "type": "domain", "uuid": "57d6c908-25b4-455f-8999-4dcb950d210f", "value": "samssara.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693960", "to_ids": true, "type": "domain", "uuid": "57d6c908-5b00-455c-b5ea-4704950d210f", "value": "synergyconnect.in" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693961", "to_ids": true, "type": "domain", "uuid": "57d6c909-eaac-40c9-9638-470e950d210f", "value": "technometics.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693961", "to_ids": true, "type": "domain", "uuid": "57d6c909-0b80-46e2-bebd-48cc950d210f", "value": "websamrat.in" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473693961", "to_ids": true, "type": "hostname", "uuid": "57d6c909-2bfc-4c01-882c-42df950d210f", "value": "www.villakeratea.it" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473742030", "to_ids": true, "type": "ip-dst", "uuid": "57d784ce-2790-4084-a314-424f950d210f", "value": "198.23.59.178" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473742031", "to_ids": true, "type": "domain", "uuid": "57d784cf-8594-4dfb-9dcd-4977950d210f", "value": "crazycreations.in" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473742031", "to_ids": true, "type": "domain", "uuid": "57d784cf-b4cc-4eb6-8f0c-4b34950d210f", "value": "gift2belgaum.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473742031", "to_ids": true, "type": "url", "uuid": "57d784cf-3e9c-4852-9072-4ac9950d210f", "value": "http://crazycreations.in/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473742032", "to_ids": true, "type": "url", "uuid": "57d784d0-8a3c-414f-92a0-418f950d210f", "value": "http://gift2belgaum.com/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473742032", "to_ids": true, "type": "url", "uuid": "57d784d0-3a04-48e0-87cf-4cbd950d210f", "value": "http://nysekolintsika.mg/8fh34f3" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473742032", "to_ids": true, "type": "domain", "uuid": "57d784d0-5a8c-4504-b45b-47b8950d210f", "value": "nysekolintsika.mg" } ] } }