{
  "Event": {
    "analysis": "1",
    "date": "2017-10-11",
    "extends_uuid": "",
    "info": "M2M -  Locky Affid=3, \".asasin\"/Trickbot \"mac1\" 2017-10-05 : \"Invoice INV0000123\" - \"Invoice INV0000123.7z\"",
    "publish_timestamp": "1507829804",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1507829482",
    "uuid": "59ddbb11-bf70-497d-8f9f-096f950d210f",
    "Orgc": {
      "name": "CIRCL",
      "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:white",
        "relationship_type": ""
      },
      {
        "colour": "#006c6c",
        "local": false,
        "name": "ecsirt:malicious-code=\"ransomware\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:ransomware=\"Locky\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:tool=\"Trick Bot\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "md5",
        "uuid": "59ddbb12-8b68-43b7-8cdc-472e950d210f",
        "value": "1934bc240ae9e8e101490a9dab13c079"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "md5",
        "uuid": "59ddbb12-20d8-4046-ac94-4ea7950d210f",
        "value": "5216bf5213f2f94e756ce464d34c740c"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb12-31e4-45cb-a1c4-42da950d210f",
        "value": "http://mtblanc-let.co.uk/nui76tg7"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb12-7eac-42e7-b370-4a2a950d210f",
        "value": "mtblanc-let.co.uk"
      },
      {
        "category": "Network activity",
        "comment": "mtblanc-let.co.uk",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb12-2bc4-4fd4-8a21-096f950d210f",
        "value": "217.199.175.27"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb13-e6c4-4dda-8d3e-61c1950d210f",
        "value": "http://qxr33qxr.com/nui76tg7"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb13-d094-4618-8168-4301950d210f",
        "value": "qxr33qxr.com"
      },
      {
        "category": "Network activity",
        "comment": "qxr33qxr.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb13-691c-44db-a6c2-4b94950d210f",
        "value": "67.210.102.240"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb13-28c4-44f1-a8ea-4373950d210f",
        "value": "http://smi-wi.com/nui76tg7"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb14-ba14-44fe-a5ef-48ba950d210f",
        "value": "smi-wi.com"
      },
      {
        "category": "Network activity",
        "comment": "smi-wi.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb14-6760-4c4b-9b9f-47b4950d210f",
        "value": "72.52.195.204"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb14-ff5c-480c-af73-46fb950d210f",
        "value": "http://yamanashi-jyujin.jp/nui76tg7"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb14-bfb0-4d4c-923f-6211950d210f",
        "value": "yamanashi-jyujin.jp"
      },
      {
        "category": "Network activity",
        "comment": "yamanashi-jyujin.jp",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb15-2384-49c8-bcd2-096f950d210f",
        "value": "180.222.185.74"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb15-e084-4e3d-90d7-46c2950d210f",
        "value": "http://nsaflow.info/p66/nui76tg7"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb15-20cc-45f4-bb74-43e7950d210f",
        "value": "nsaflow.info"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb30-f250-4d32-896f-31f8950d210f",
        "value": "http://alucmuhendislik.com/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb30-847c-49ec-8898-6211950d210f",
        "value": "alucmuhendislik.com"
      },
      {
        "category": "Network activity",
        "comment": "alucmuhendislik.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb30-5f64-464c-a30c-435e950d210f",
        "value": "185.85.205.9"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb30-d9f4-4f7a-b6c5-40ac950d210f",
        "value": "http://bit-chasers.com/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb31-c598-49a2-9ad3-4e98950d210f",
        "value": "bit-chasers.com"
      },
      {
        "category": "Network activity",
        "comment": "bit-chasers.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb31-4ee4-42b4-b346-4714950d210f",
        "value": "98.124.251.176"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb31-64ac-4d16-a751-4f67950d210f",
        "value": "http://bjp.co.id/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb31-ee84-4191-b599-4308950d210f",
        "value": "bjp.co.id"
      },
      {
        "category": "Network activity",
        "comment": "bjp.co.id",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb31-e680-4866-8875-b4e9950d210f",
        "value": "202.169.44.167"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb31-0ec8-4e97-bfa5-4d2e950d210f",
        "value": "http://centurythis.com/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb32-4020-45b5-a717-4907950d210f",
        "value": "centurythis.com"
      },
      {
        "category": "Network activity",
        "comment": "centurythis.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb32-b724-43ec-940f-31f8950d210f",
        "value": "98.124.252.66"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb32-d9e0-4369-9c2b-445c950d210f",
        "value": "http://estudiperceptiva.com/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb32-630c-440c-9ed8-4655950d210f",
        "value": "estudiperceptiva.com"
      },
      {
        "category": "Network activity",
        "comment": "estudiperceptiva.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb32-27d8-4819-ad13-4857950d210f",
        "value": "86.109.170.66"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb32-cef8-4fef-b63d-43a7950d210f",
        "value": "http://handhi.com/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb33-2b24-4b89-9efe-096f950d210f",
        "value": "handhi.com"
      },
      {
        "category": "Network activity",
        "comment": "handhi.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb33-4fc8-4fe7-a93b-4405950d210f",
        "value": "162.213.255.19"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb33-eee0-4c96-9bed-41fc950d210f",
        "value": "http://hexacam.com/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb33-984c-47dc-aa36-61c1950d210f",
        "value": "hexacam.com"
      },
      {
        "category": "Network activity",
        "comment": "hexacam.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829480",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb33-1200-4306-ae88-4997950d210f",
        "value": "98.124.251.65"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb34-03b4-4f20-8951-4318950d210f",
        "value": "http://logica-info.com/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb34-935c-4aec-8a26-439c950d210f",
        "value": "logica-info.com"
      },
      {
        "category": "Network activity",
        "comment": "logica-info.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb34-6a60-449b-b066-31f8950d210f",
        "value": "202.169.44.143"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb34-11b0-4129-82e5-6211950d210f",
        "value": "http://mh-service.ru/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb34-62f8-4224-9f5a-49cf950d210f",
        "value": "mh-service.ru"
      },
      {
        "category": "Network activity",
        "comment": "mh-service.ru",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb34-7bac-4a31-a219-4ef3950d210f",
        "value": "89.253.235.118"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb35-3b08-4f34-b609-096f950d210f",
        "value": "http://monstermx.com/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb35-12e0-4d65-96ad-47b2950d210f",
        "value": "monstermx.com"
      },
      {
        "category": "Network activity",
        "comment": "monstermx.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb35-ab34-49be-96b1-43c2950d210f",
        "value": "107.152.98.20"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb35-3678-4467-91ee-4ee2950d210f",
        "value": "http://m-tensou.net/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb35-a03c-4569-94b1-b4e9950d210f",
        "value": "m-tensou.net"
      },
      {
        "category": "Network activity",
        "comment": "m-tensou.net",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb36-104c-4041-b60c-4d65950d210f",
        "value": "202.218.252.73"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb36-88a0-45b8-be57-4289950d210f",
        "value": "http://paulcruse.com/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb36-564c-4c81-8841-4c72950d210f",
        "value": "paulcruse.com"
      },
      {
        "category": "Network activity",
        "comment": "paulcruse.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb36-7828-4c75-a1c0-41d8950d210f",
        "value": "91.215.186.147"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb36-1ee4-45c7-b7d3-4361950d210f",
        "value": "http://suncoastot.com/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ddbb36-1690-4679-ac0e-446a950d210f",
        "value": "suncoastot.com"
      },
      {
        "category": "Network activity",
        "comment": "suncoastot.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb37-2898-424d-8b96-096f950d210f",
        "value": "98.124.252.176"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "url",
        "uuid": "59ddbb37-106c-4437-beef-4b6d950d210f",
        "value": "http://nsaflow.info/p66/09yhb7r5e"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb55-2fb0-46a2-9f49-43c8950d210f",
        "value": "91.83.88.51"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb55-9c2c-4629-8ac0-4afb950d210f",
        "value": "46.237.117.193"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb56-f3ec-479e-8483-4c73950d210f",
        "value": "79.170.7.139"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb56-ab94-40a8-a610-4a71950d210f",
        "value": "41.57.103.218"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb56-d24c-4f04-bf6b-b4e9950d210f",
        "value": "196.202.194.202"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb57-e908-4aac-a66d-4637950d210f",
        "value": "46.20.56.239"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb57-e29c-42df-8614-4df9950d210f",
        "value": "176.120.126.21"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb57-1c00-484b-b662-31f8950d210f",
        "value": "91.239.249.118"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb57-319c-4c1b-a66c-6211950d210f",
        "value": "194.87.103.184"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb58-daec-4909-8b04-4757950d210f",
        "value": "92.63.102.64"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb58-4d20-4652-912a-4c51950d210f",
        "value": "194.87.238.53"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb58-0ac0-4156-90d1-47ee950d210f",
        "value": "92.63.102.159"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb58-9090-445e-9ab2-4388950d210f",
        "value": "194.87.232.219"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb59-20e0-497a-bff7-46d5950d210f",
        "value": "149.154.69.70"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb59-c9f8-465c-9b6b-61c1950d210f",
        "value": "78.24.223.153"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb59-7d70-4f63-b210-474e950d210f",
        "value": "194.87.92.207"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5a-e7f8-490d-88b8-4c33950d210f",
        "value": "194.87.94.239"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5a-cf38-4a69-974a-31f8950d210f",
        "value": "195.133.147.238"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5a-0350-4b6f-b415-4723950d210f",
        "value": "62.109.15.132"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5a-6ec8-42cb-98f6-4528950d210f",
        "value": "194.87.236.240"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5b-ef38-4633-ba93-447f950d210f",
        "value": "62.109.6.237"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5b-da70-4c58-ae80-4d5b950d210f",
        "value": "149.154.69.47"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5b-2694-4f57-97ac-4b4c950d210f",
        "value": "82.146.47.121"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5b-e7f8-412f-a141-4917950d210f",
        "value": "78.24.216.250"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5c-8ec4-41a1-af46-61c1950d210f",
        "value": "82.146.56.218"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5c-3c2c-4a85-b43c-4632950d210f",
        "value": "185.159.131.198"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5c-2b5c-45f2-83d6-4a73950d210f",
        "value": "194.87.146.32"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5c-2cb4-4fec-9bcd-31f8950d210f",
        "value": "5.133.179.77"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5c-7964-4600-9a11-4ebb950d210f",
        "value": "94.242.224.214"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5d-2f54-4c05-9b10-45bf950d210f",
        "value": "194.87.92.242"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5d-167c-4da3-8bc7-4c5d950d210f",
        "value": "195.133.146.236"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59ddbb5e-ea60-4971-84f3-4540950d210f",
        "value": "193.124.117.238"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 5216bf5213f2f94e756ce464d34c740c",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59dfa6e9-262c-4e99-bfb7-419002de0b81",
        "value": "24184f3ae1a878018d650812c7084cdc91fdaa8916d3d11140ef06d6306347a2"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 5216bf5213f2f94e756ce464d34c740c",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "sha1",
        "uuid": "59dfa6e9-b6f8-4b70-9c45-49a902de0b81",
        "value": "dd3ad086b2973e67e41aa21680448badb989f9c5"
      },
      {
        "category": "External analysis",
        "comment": "- Xchecked via VT: 5216bf5213f2f94e756ce464d34c740c",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": false,
        "type": "link",
        "uuid": "59dfa6e9-d474-4987-8303-464302de0b81",
        "value": "https://www.virustotal.com/file/24184f3ae1a878018d650812c7084cdc91fdaa8916d3d11140ef06d6306347a2/analysis/1507764485/"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 1934bc240ae9e8e101490a9dab13c079",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59dfa6e9-d890-4742-bfce-43d602de0b81",
        "value": "c2e56510866a6e038ac723a3e5a2ac66b14f407b91886077727f622f561164e3"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 1934bc240ae9e8e101490a9dab13c079",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829481",
        "to_ids": true,
        "type": "sha1",
        "uuid": "59dfa6ea-2968-4e50-8b98-419702de0b81",
        "value": "a0218048aaca34259d0651d911b81f9f12a30326"
      },
      {
        "category": "External analysis",
        "comment": "- Xchecked via VT: 1934bc240ae9e8e101490a9dab13c079",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1507829482",
        "to_ids": false,
        "type": "link",
        "uuid": "59dfa6ea-7018-45bd-9ee4-419f02de0b81",
        "value": "https://www.virustotal.com/file/c2e56510866a6e038ac723a3e5a2ac66b14f407b91886077727f622f561164e3/analysis/1507806911/"
      }
    ]
  }
}