{ "Event": { "analysis": "1", "date": "2017-06-09", "extends_uuid": "", "info": "M2M - Dridex 2017-06-05 : botnet 7200 - \"Invoice\" - \"A4 Inv_Crd 12345.pdf\"", "publish_timestamp": "1496991874", "published": true, "threat_level_id": "3", "timestamp": "1496991846", "uuid": "593a42a0-7298-4e35-9443-4ed0950d210f", "Orgc": { "name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": false, "name": "tlp:white", "relationship_type": "" }, { "colour": "#0da700", "local": false, "name": "misp-galaxy:tool=\"Dridex\"", "relationship_type": "" } ], "Attribute": [ { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990369", "to_ids": true, "type": "md5", "uuid": "593a42a1-507c-4a57-9491-4ebe950d210f", "value": "8f527b08eb39578d18a3690980baf2c0" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990369", "to_ids": true, "type": "md5", "uuid": "593a42a1-ce54-4512-92b5-4d23950d210f", "value": "1a18e844222a43381839d2fa95493ee3" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990370", "to_ids": true, "type": "url", "uuid": "593a42a2-c190-40bb-b002-4f00950d210f", "value": "http://91menjin.com/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990371", "to_ids": true, "type": "hostname", "uuid": "593a42a3-9860-4b2a-a1e5-8a4b950d210f", "value": "91menjin.com" }, { "category": "Network activity", "comment": "91menjin.com", "deleted": false, "disable_correlation": false, "timestamp": "1496990372", "to_ids": false, "type": "ip-dst", "uuid": "593a42a4-7ee0-45c5-8373-48e4950d210f", "value": "122.114.94.28" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990372", "to_ids": true, "type": "url", "uuid": "593a42a4-6d78-4b2e-8760-493c950d210f", "value": "http://almahaconsultants.com/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990373", "to_ids": true, "type": "hostname", "uuid": "593a42a5-1294-49a6-a8a4-8bcc950d210f", "value": "almahaconsultants.com" }, { "category": "Network activity", "comment": "almahaconsultants.com", "deleted": false, "disable_correlation": false, "timestamp": "1496990374", "to_ids": false, "type": "ip-dst", "uuid": "593a42a6-cd84-4fe4-82f2-4728950d210f", "value": "213.158.187.37" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990375", "to_ids": true, "type": "url", "uuid": "593a42a7-0b08-47bc-a9b0-4c12950d210f", "value": "http://cabanaionela.ro/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990375", "to_ids": true, "type": "hostname", "uuid": "593a42a7-2418-4736-a767-46f4950d210f", "value": "cabanaionela.ro" }, { "category": "Network activity", "comment": "cabanaionela.ro", "deleted": false, "disable_correlation": false, "timestamp": "1496990376", "to_ids": false, "type": "ip-dst", "uuid": "593a42a8-0694-49dd-b05b-499d950d210f", "value": "188.240.2.174" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990376", "to_ids": true, "type": "url", "uuid": "593a42a8-b750-44ed-b0a0-471a950d210f", "value": "http://cardaffairs.com/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990377", "to_ids": true, "type": "hostname", "uuid": "593a42a9-0b74-488f-9659-4f92950d210f", "value": "cardaffairs.com" }, { "category": "Network activity", "comment": "cardaffairs.com", "deleted": false, "disable_correlation": false, "timestamp": "1496990378", "to_ids": false, "type": "ip-dst", "uuid": "593a42aa-12ec-44cd-b39e-4728950d210f", "value": "23.229.205.226" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990379", "to_ids": true, "type": "url", "uuid": "593a42ab-0d28-4bfa-86c1-4435950d210f", "value": "http://cartus-imprimanta.ro/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990380", "to_ids": true, "type": "hostname", "uuid": "593a42ac-3164-450d-ada3-46f4950d210f", "value": "cartus-imprimanta.ro" }, { "category": "Network activity", "comment": "cartus-imprimanta.ro", "deleted": false, "disable_correlation": false, "timestamp": "1496990380", "to_ids": false, "type": "ip-dst", "uuid": "593a42ac-6678-48e7-b890-8a4b950d210f", "value": "176.126.200.56" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990381", "to_ids": true, "type": "url", "uuid": "593a42ad-2580-412d-8992-440d950d210f", "value": "http://clicburkina.com/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990381", "to_ids": true, "type": "hostname", "uuid": "593a42ad-67f0-4d0c-9099-4476950d210f", "value": "clicburkina.com" }, { "category": "Network activity", "comment": "clicburkina.com", "deleted": false, "disable_correlation": false, "timestamp": "1496990382", "to_ids": false, "type": "ip-dst", "uuid": "593a42ae-e1b0-4878-b864-4c5b950d210f", "value": "69.28.199.50" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990383", "to_ids": true, "type": "url", "uuid": "593a42af-4908-4a6e-af81-4288950d210f", "value": "http://cqyssj.com/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990383", "to_ids": true, "type": "hostname", "uuid": "593a42af-f9a8-4d32-997a-46e6950d210f", "value": "cqyssj.com" }, { "category": "Network activity", "comment": "cqyssj.com", "deleted": false, "disable_correlation": false, "timestamp": "1496990384", "to_ids": false, "type": "ip-dst", "uuid": "593a42b0-0d3c-4375-9a5d-486e950d210f", "value": "69.10.62.204" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990385", "to_ids": true, "type": "url", "uuid": "593a42b1-0880-4369-a7ce-46f4950d210f", "value": "http://luczko.pl/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990385", "to_ids": true, "type": "hostname", "uuid": "593a42b1-573c-4a1b-99e0-8a4b950d210f", "value": "luczko.pl" }, { "category": "Network activity", "comment": "luczko.pl", "deleted": false, "disable_correlation": false, "timestamp": "1496990386", "to_ids": false, "type": "ip-dst", "uuid": "593a42b2-4f84-449c-9ea7-4280950d210f", "value": "195.78.66.207" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990386", "to_ids": true, "type": "url", "uuid": "593a42b2-8908-4719-bb05-4756950d210f", "value": "http://mainlinecarriers.co.tz/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990387", "to_ids": true, "type": "hostname", "uuid": "593a42b3-f0bc-4094-8ee4-8bcc950d210f", "value": "mainlinecarriers.co.tz" }, { "category": "Network activity", "comment": "mainlinecarriers.co.tz", "deleted": false, "disable_correlation": false, "timestamp": "1496990388", "to_ids": false, "type": "ip-dst", "uuid": "593a42b4-7a9c-4037-bea2-4402950d210f", "value": "75.102.24.241" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990389", "to_ids": true, "type": "url", "uuid": "593a42b5-6d9c-4032-b0b7-44c6950d210f", "value": "http://mbmedia.ca/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990390", "to_ids": true, "type": "hostname", "uuid": "593a42b6-c40c-48d3-a957-46f4950d210f", "value": "mbmedia.ca" }, { "category": "Network activity", "comment": "mbmedia.ca", "deleted": false, "disable_correlation": false, "timestamp": "1496990390", "to_ids": false, "type": "ip-dst", "uuid": "593a42b6-9798-4891-a546-461a950d210f", "value": "199.166.6.15" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990391", "to_ids": true, "type": "url", "uuid": "593a42b7-34c4-428c-9bc4-41f8950d210f", "value": "http://minhatv.6te.net/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990392", "to_ids": true, "type": "hostname", "uuid": "593a42b8-ca4c-404e-b8d3-4ae6950d210f", "value": "minhatv.6te.net" }, { "category": "Network activity", "comment": "minhatv.6te.net", "deleted": false, "disable_correlation": false, "timestamp": "1496990393", "to_ids": false, "type": "ip-dst", "uuid": "593a42b9-062c-4cfb-afee-4066950d210f", "value": "173.208.215.124" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990393", "to_ids": true, "type": "url", "uuid": "593a42b9-1268-4357-a920-8bcc950d210f", "value": "http://minigal.cz/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990394", "to_ids": true, "type": "hostname", "uuid": "593a42ba-4300-483e-aec8-4306950d210f", "value": "minigal.cz" }, { "category": "Network activity", "comment": "minigal.cz", "deleted": false, "disable_correlation": false, "timestamp": "1496990394", "to_ids": false, "type": "ip-dst", "uuid": "593a42ba-ec68-4eee-ad6f-46e6950d210f", "value": "83.167.244.201" }, { "category": "Network activity", "comment": "minigal.cz", "deleted": false, "disable_correlation": false, "timestamp": "1496990395", "to_ids": false, "type": "ip-dst", "uuid": "593a42bb-0378-4e0c-84bb-4728950d210f", "value": "83.167.244.202" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990395", "to_ids": true, "type": "url", "uuid": "593a42bb-bc44-4180-92e8-4187950d210f", "value": "http://multielectricos.com/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990396", "to_ids": true, "type": "hostname", "uuid": "593a42bc-3978-45ec-b4b6-4c0a950d210f", "value": "multielectricos.com" }, { "category": "Network activity", "comment": "multielectricos.com", "deleted": false, "disable_correlation": false, "timestamp": "1496990397", "to_ids": false, "type": "ip-dst", "uuid": "593a42bd-eca8-4b29-bc57-45ed950d210f", "value": "96.127.190.130" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990398", "to_ids": true, "type": "url", "uuid": "593a42be-cee8-4767-bfd7-46f4950d210f", "value": "http://newserniggrofg.net/af/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990399", "to_ids": true, "type": "hostname", "uuid": "593a42bf-4528-484b-bbf4-4e18950d210f", "value": "newserniggrofg.net" }, { "category": "Network activity", "comment": "newserniggrofg.net", "deleted": false, "disable_correlation": false, "timestamp": "1496990400", "to_ids": false, "type": "ip-dst", "uuid": "593a42c0-1e4c-4c15-9b64-4e0d950d210f", "value": "119.28.85.128" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990400", "to_ids": true, "type": "url", "uuid": "593a42c0-bae8-43c0-baa0-4f72950d210f", "value": "http://quitecross.com/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990401", "to_ids": true, "type": "hostname", "uuid": "593a42c1-176c-42de-a1d9-4ea8950d210f", "value": "quitecross.com" }, { "category": "Network activity", "comment": "quitecross.com", "deleted": false, "disable_correlation": false, "timestamp": "1496990401", "to_ids": false, "type": "ip-dst", "uuid": "593a42c1-4e4c-45cb-91af-40f4950d210f", "value": "192.124.249.102" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990402", "to_ids": true, "type": "url", "uuid": "593a42c2-77a4-4c14-bf00-4bdf950d210f", "value": "http://resevesssetornument.com/af/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990403", "to_ids": true, "type": "hostname", "uuid": "593a42c3-306c-43b8-80e6-4401950d210f", "value": "resevesssetornument.com" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990404", "to_ids": true, "type": "url", "uuid": "593a42c4-0f70-45eb-ab81-47b7950d210f", "value": "http://salonpalmareal.com/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990405", "to_ids": true, "type": "hostname", "uuid": "593a42c5-b14c-438b-92b3-4fa3950d210f", "value": "salonpalmareal.com" }, { "category": "Network activity", "comment": "salonpalmareal.com", "deleted": false, "disable_correlation": false, "timestamp": "1496990406", "to_ids": false, "type": "ip-dst", "uuid": "593a42c6-e05c-4871-861a-4792950d210f", "value": "199.79.62.206" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990407", "to_ids": true, "type": "url", "uuid": "593a42c7-b368-4708-a25c-49df950d210f", "value": "http://saybella.com.au/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990408", "to_ids": true, "type": "hostname", "uuid": "593a42c8-d6b4-42ab-af75-46e6950d210f", "value": "saybella.com.au" }, { "category": "Network activity", "comment": "saybella.com.au", "deleted": false, "disable_correlation": false, "timestamp": "1496990410", "to_ids": false, "type": "ip-dst", "uuid": "593a42ca-4e68-4448-9c38-4a25950d210f", "value": "202.191.62.89" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990410", "to_ids": true, "type": "url", "uuid": "593a42ca-42ac-4da1-a377-8a4b950d210f", "value": "http://select-hire.com/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990411", "to_ids": true, "type": "hostname", "uuid": "593a42cb-bb4c-481b-930a-46f4950d210f", "value": "select-hire.com" }, { "category": "Network activity", "comment": "select-hire.com", "deleted": false, "disable_correlation": false, "timestamp": "1496990412", "to_ids": false, "type": "ip-dst", "uuid": "593a42cc-4f5c-4e13-a349-4201950d210f", "value": "103.44.161.194" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990413", "to_ids": true, "type": "url", "uuid": "593a42cd-69d8-4a52-87d7-46e6950d210f", "value": "http://servisanchez.com/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990413", "to_ids": true, "type": "hostname", "uuid": "593a42cd-d64c-480c-a0e5-460b950d210f", "value": "servisanchez.com" }, { "category": "Network activity", "comment": "servisanchez.com", "deleted": false, "disable_correlation": false, "timestamp": "1496990414", "to_ids": false, "type": "ip-dst", "uuid": "593a42ce-b26c-480b-b87b-49cd950d210f", "value": "104.37.35.95" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990415", "to_ids": true, "type": "url", "uuid": "593a42cf-c18c-402e-80c1-4a6e950d210f", "value": "http://sethiwriting.com/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990415", "to_ids": true, "type": "hostname", "uuid": "593a42cf-edec-4331-9371-46e6950d210f", "value": "sethiwriting.com" }, { "category": "Network activity", "comment": "sethiwriting.com", "deleted": false, "disable_correlation": false, "timestamp": "1496990416", "to_ids": false, "type": "ip-dst", "uuid": "593a42d0-87b4-4487-b5d4-4a41950d210f", "value": "199.79.62.9" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990417", "to_ids": true, "type": "url", "uuid": "593a42d1-f1d4-4681-9b22-42a4950d210f", "value": "http://sonder-bar.net/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990418", "to_ids": true, "type": "hostname", "uuid": "593a42d2-5c98-4bed-afcc-433d950d210f", "value": "sonder-bar.net" }, { "category": "Network activity", "comment": "sonder-bar.net", "deleted": false, "disable_correlation": false, "timestamp": "1496990419", "to_ids": false, "type": "ip-dst", "uuid": "593a42d3-770c-48a3-a42c-46e6950d210f", "value": "81.169.145.88" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990419", "to_ids": true, "type": "url", "uuid": "593a42d3-7c90-4421-b027-48b6950d210f", "value": "http://spaceonline.in/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990420", "to_ids": true, "type": "hostname", "uuid": "593a42d4-af68-4235-8512-46f4950d210f", "value": "spaceonline.in" }, { "category": "Network activity", "comment": "spaceonline.in", "deleted": false, "disable_correlation": false, "timestamp": "1496990421", "to_ids": false, "type": "ip-dst", "uuid": "593a42d5-e078-455c-8951-4c6f950d210f", "value": "111.118.212.86" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990422", "to_ids": true, "type": "url", "uuid": "593a42d6-0f38-4016-84ee-43aa950d210f", "value": "http://studyineurope.in/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990423", "to_ids": true, "type": "hostname", "uuid": "593a42d7-ed9c-4701-9d42-4a8a950d210f", "value": "studyineurope.in" }, { "category": "Network activity", "comment": "studyineurope.in", "deleted": false, "disable_correlation": false, "timestamp": "1496990424", "to_ids": false, "type": "ip-dst", "uuid": "593a42d8-b8fc-4262-88f3-40ed950d210f", "value": "111.118.215.210" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990425", "to_ids": true, "type": "url", "uuid": "593a42d9-af3c-4093-b77f-8a4b950d210f", "value": "http://sukko-diona.ru/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990426", "to_ids": true, "type": "hostname", "uuid": "593a42da-1f58-42bc-9744-4d83950d210f", "value": "sukko-diona.ru" }, { "category": "Network activity", "comment": "sukko-diona.ru", "deleted": false, "disable_correlation": false, "timestamp": "1496990427", "to_ids": false, "type": "ip-dst", "uuid": "593a42db-e4a8-4071-adcd-464b950d210f", "value": "81.177.135.193" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990428", "to_ids": true, "type": "url", "uuid": "593a42dc-a670-4845-ada7-4411950d210f", "value": "http://weddingphotolook.es/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990429", "to_ids": true, "type": "hostname", "uuid": "593a42dd-6130-45b4-bd7f-471e950d210f", "value": "weddingphotolook.es" }, { "category": "Network activity", "comment": "weddingphotolook.es", "deleted": false, "disable_correlation": false, "timestamp": "1496990430", "to_ids": false, "type": "ip-dst", "uuid": "593a42de-4fbc-48e1-bf56-8bcc950d210f", "value": "46.249.205.45" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990430", "to_ids": true, "type": "url", "uuid": "593a42de-dd4c-4347-a957-4728950d210f", "value": "http://xtramax.de/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990431", "to_ids": true, "type": "hostname", "uuid": "593a42df-d544-4f1b-bfff-49f1950d210f", "value": "xtramax.de" }, { "category": "Network activity", "comment": "xtramax.de", "deleted": false, "disable_correlation": false, "timestamp": "1496990431", "to_ids": false, "type": "ip-dst", "uuid": "593a42df-4104-425b-b41f-44be950d210f", "value": "81.169.145.169" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990432", "to_ids": true, "type": "url", "uuid": "593a42e0-7cc8-47e7-beca-46e6950d210f", "value": "http://ymcaonline.net/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990432", "to_ids": true, "type": "hostname", "uuid": "593a42e0-fdf4-4c02-a29a-418c950d210f", "value": "ymcaonline.net" }, { "category": "Network activity", "comment": "ymcaonline.net", "deleted": false, "disable_correlation": false, "timestamp": "1496990433", "to_ids": false, "type": "ip-dst", "uuid": "593a42e1-3834-49b3-9e89-4f17950d210f", "value": "212.57.234.30" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990434", "to_ids": true, "type": "url", "uuid": "593a42e2-960c-432b-ae0d-4d47950d210f", "value": "http://zhongjianbao.com/8yfh4gfff" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990434", "to_ids": true, "type": "hostname", "uuid": "593a42e2-e118-4527-ae31-4728950d210f", "value": "zhongjianbao.com" }, { "category": "Network activity", "comment": "zhongjianbao.com", "deleted": false, "disable_correlation": false, "timestamp": "1496990436", "to_ids": false, "type": "ip-dst", "uuid": "593a42e4-9070-4ee0-a184-4ca6950d210f", "value": "118.244.196.9" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990445", "to_ids": false, "type": "url", "uuid": "593a42ed-f968-492b-bd34-46e6950d210f", "value": "192.48.88.167" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990446", "to_ids": false, "type": "ip-dst", "uuid": "593a42ee-1324-435f-a3a8-4f87950d210f", "value": "192.48.88.167" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990446", "to_ids": false, "type": "url", "uuid": "593a42ee-3ad0-4788-8444-8a4b950d210f", "value": "89.110.157.78" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990447", "to_ids": false, "type": "ip-dst", "uuid": "593a42ef-a590-4e9e-ae81-8bcc950d210f", "value": "89.110.157.78" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990448", "to_ids": false, "type": "url", "uuid": "593a42f0-f684-46c7-891d-4728950d210f", "value": "85.214.126.182" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990449", "to_ids": false, "type": "ip-dst", "uuid": "593a42f1-79d0-450f-ba79-4a48950d210f", "value": "85.214.126.182" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990450", "to_ids": false, "type": "url", "uuid": "593a42f2-1c78-4daf-8fe2-4aba950d210f", "value": "46.101.154.177" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1496990450", "to_ids": false, "type": "ip-dst", "uuid": "593a42f2-94f0-40c3-8386-48a0950d210f", "value": "46.101.154.177" } ] } }