{
  "Event": {
    "analysis": "0",
    "date": "2016-09-20",
    "extends_uuid": "",
    "info": "Malspam 2016-09-20 (.hta in .zip) - campaign: \"<no subject>\"",
    "publish_timestamp": "1474347876",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1474347285",
    "uuid": "57e0c08d-4330-42c0-9c8f-4c8d950d210f",
    "Orgc": {
      "name": "CIRCL",
      "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:white",
        "relationship_type": ""
      },
      {
        "colour": "#3a7300",
        "local": false,
        "name": "circl:incident-classification=\"malware\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347272",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c108-17a8-4064-ab4a-42c9950d210f",
        "value": "103.254.148.134"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347273",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c109-1fcc-4b56-82cd-4e95950d210f",
        "value": "119.59.103.81"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347273",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c109-c91c-4cbf-9062-4a6a950d210f",
        "value": "123.30.210.74"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347273",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c109-bb28-4bac-a7e2-448b950d210f",
        "value": "143.95.246.211"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347273",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c109-2f98-4fd8-9baf-4e2a950d210f",
        "value": "148.251.99.148"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347273",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c109-204c-4b2d-8e56-4ec0950d210f",
        "value": "173.236.105.50"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347274",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c10a-0914-405e-ba80-4d82950d210f",
        "value": "173.254.28.14"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347274",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c10a-084c-42e9-9af5-4d52950d210f",
        "value": "185.119.173.182"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347274",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c10a-ce2c-41de-92e3-482b950d210f",
        "value": "185.96.93.154"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347274",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c10a-32d4-4e9d-a80d-4ec7950d210f",
        "value": "198.46.82.242"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347275",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c10b-5a4c-4850-97da-4a8c950d210f",
        "value": "207.179.106.94"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347275",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c10b-cffc-4be4-a7a7-4d36950d210f",
        "value": "207.204.33.199"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347275",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c10b-3958-4fae-b387-4be8950d210f",
        "value": "45.55.141.237"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347275",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c10b-55d4-4fcb-9dba-4bf3950d210f",
        "value": "64.119.182.93"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347276",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c10c-cc20-445f-9309-40fc950d210f",
        "value": "69.89.31.79"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347276",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c10c-3f64-4b84-a1b0-4dc9950d210f",
        "value": "70.39.235.94"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347276",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c10c-8180-4666-8014-4efa950d210f",
        "value": "80.179.92.187"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347276",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c10c-c12c-4f10-b788-4a36950d210f",
        "value": "94.136.40.103"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347277",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57e0c10d-2c60-4225-9c9f-4fde950d210f",
        "value": "94.73.150.110"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347277",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c10d-f678-4ed6-b0ca-4fbd950d210f",
        "value": "binhminh-group.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347277",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c10d-f13c-44d5-9615-4e3a950d210f",
        "value": "dealza.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347277",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c10d-1440-411c-b2af-4283950d210f",
        "value": "elsoccer.org"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347277",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c10d-9ea4-4ce6-96f3-49f3950d210f",
        "value": "gelecekdiyarbakirsigorta.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347278",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c10e-707c-408a-ba0a-4daa950d210f",
        "value": "http://binhminh-group.com/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347278",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c10e-e3a0-4115-a7fc-4988950d210f",
        "value": "http://dealza.com/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347278",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c10e-c57c-41c5-bf22-4c69950d210f",
        "value": "http://elsoccer.org/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347278",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c10e-6118-4962-bf40-479e950d210f",
        "value": "http://gelecekdiyarbakirsigorta.com/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347278",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c10e-53a4-4a78-b59e-4f61950d210f",
        "value": "http://hunt-magazine.com/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347279",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c10f-c78c-41b7-a3ad-42ea950d210f",
        "value": "http://isusip.com/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347279",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c10f-7b08-416d-bc3a-45b3950d210f",
        "value": "http://oilandgasukwireless.net/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347279",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c10f-d654-4c03-886f-42a4950d210f",
        "value": "http://rancho.org/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347279",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c10f-af3c-4f02-8f55-45d6950d210f",
        "value": "http://rennie-mackintosh-jewellery.co.uk/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347280",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c110-ae8c-404f-9da5-4f6e950d210f",
        "value": "http://roberttrocina.com/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347280",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c110-645c-4426-a3b7-4511950d210f",
        "value": "http://sbbsinfotech.com/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347280",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c110-66ac-4640-8369-4acd950d210f",
        "value": "http://schneebett.com/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347280",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c110-b99c-4f3d-8e53-4243950d210f",
        "value": "http://stirlingblack.com/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347281",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c111-f214-43da-88ad-4ecd950d210f",
        "value": "http://teknidataconsultores.com/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347281",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c111-b404-4144-95f9-432d950d210f",
        "value": "http://thomasduncanwatt.com/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347281",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c111-9068-4cd8-8cbc-4456950d210f",
        "value": "http://trenddatainc.com/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347281",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c111-cfe0-4dbc-82b7-49e7950d210f",
        "value": "http://worldpennyjar.com/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347281",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c111-4b68-445c-bdcd-4e2d950d210f",
        "value": "http://xn--41a.xn----8sbivjiocsggj.xn--p1ai/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347282",
        "to_ids": true,
        "type": "url",
        "uuid": "57e0c112-da70-4b20-8414-4c21950d210f",
        "value": "http://yesman.me/56f2gsu782desf"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347282",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c112-738c-48e1-ab07-40a7950d210f",
        "value": "hunt-magazine.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347282",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c112-b46c-4c0d-b26d-40fc950d210f",
        "value": "isusip.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347282",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c112-4cd0-456c-ae66-459d950d210f",
        "value": "oilandgasukwireless.net"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347282",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c112-8550-403d-a4ec-4a24950d210f",
        "value": "rancho.org"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347283",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57e0c113-4c48-4dd2-9220-4d8e950d210f",
        "value": "rennie-mackintosh-jewellery.co.uk"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347283",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c113-6f04-4c34-94ee-42cc950d210f",
        "value": "roberttrocina.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347283",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c113-5530-4f78-b1cb-4d3c950d210f",
        "value": "sbbsinfotech.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347283",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c113-8340-4d27-aea2-4dec950d210f",
        "value": "schneebett.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347284",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c114-74d0-468b-b56e-4730950d210f",
        "value": "stirlingblack.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347284",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c114-5f98-494b-8174-44de950d210f",
        "value": "teknidataconsultores.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347284",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c114-8768-4564-bca8-41e1950d210f",
        "value": "thomasduncanwatt.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347284",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c114-95a0-4332-ace3-4e53950d210f",
        "value": "trenddatainc.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347285",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c115-fdc8-4301-9f13-4e62950d210f",
        "value": "worldpennyjar.com"
      },
      {
        "category": "Payload delivery",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347285",
        "to_ids": true,
        "type": "filename",
        "uuid": "57e0c115-1870-466a-803a-4de2950d210f",
        "value": "xn--41a.xn----8sbivjiocsggj.xn--p1ai"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1474347285",
        "to_ids": true,
        "type": "domain",
        "uuid": "57e0c115-9e70-42d6-a969-40ad950d210f",
        "value": "yesman.me"
      }
    ]
  }
}