{ "type": "bundle", "id": "bundle--57721299-5610-4220-97b0-4329950d210f", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:52.000Z", "modified": "2016-06-28T06:02:52.000Z", "name": "CIRCL", "identity_class": "organization" }, { "type": "report", "spec_version": "2.1", "id": "report--57721299-5610-4220-97b0-4329950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:52.000Z", "modified": "2016-06-28T06:02:52.000Z", "name": "Malspam 2016-06-28 (Locky campaign subject: 'Updated')", "published": "2016-06-28T06:41:52Z", "object_refs": [ "indicator--577212df-70ac-4292-805b-40ed950d210f", "indicator--577212e0-e35c-4005-b5f2-40f6950d210f", "indicator--577212e0-a564-4af6-8d45-432b950d210f", "indicator--577212e0-40a0-4b6e-ab50-44c5950d210f", "indicator--577212e0-bac4-4e2a-bdd5-4406950d210f", "indicator--577212e1-7e80-47ad-b7d3-4039950d210f", "indicator--577212e1-41c8-4083-82d9-43d0950d210f", "indicator--577212e1-658c-466b-80cf-42cb950d210f", "indicator--577212e1-b270-42ce-a9d7-48d7950d210f", "indicator--577212e1-ecd4-4f76-bfbc-43ab950d210f", "indicator--577212e1-c378-40f5-8d03-47b6950d210f", "indicator--577212e2-3ab0-4ce2-9ee2-44a9950d210f", "indicator--577212e2-5780-47f9-a08a-4dd4950d210f", "indicator--577212e2-5490-4c0d-9b00-42cb950d210f", "indicator--577212e2-0b50-47f9-bc5c-41e5950d210f", "indicator--577212e2-0868-4459-940f-4685950d210f", "indicator--577212e2-456c-460d-a242-48e2950d210f", "indicator--577212e3-0210-40e7-a0ac-48da950d210f", "indicator--577212e3-7450-4a2f-a3c9-49fc950d210f", "indicator--577212e3-96b8-4b12-b872-49aa950d210f", "indicator--577212e3-5124-487e-b9eb-4222950d210f", "indicator--577212e3-9a88-4f4b-a8ca-4bcc950d210f", "indicator--577212e3-e5fc-4d34-bdd0-40ab950d210f", "indicator--577212e4-0d90-473f-820e-42f1950d210f", "indicator--577212e4-7e4c-4d5b-a9d8-4721950d210f", "indicator--577212e4-e2d0-47f9-9291-4fbf950d210f", "indicator--577212e4-2f14-4c8a-81fe-470e950d210f", "indicator--577212e4-42cc-4cef-b5f5-4ec9950d210f", "indicator--577212e4-8d2c-4434-8b77-483a950d210f", "indicator--577212e5-00a8-4469-971f-4eee950d210f", "indicator--577212e5-24b4-4709-8ef3-4c77950d210f", "indicator--577212e5-765c-45c1-8010-49aa950d210f", "indicator--577212e5-9004-4dfd-b142-40ee950d210f", "indicator--577212e5-c81c-4570-a0ed-4aba950d210f", "indicator--577212e5-f940-47ef-8405-4f6a950d210f", "indicator--577212e6-d6f8-4ce1-a31e-4f76950d210f", "indicator--577212e6-bcac-4ce4-89c6-47b8950d210f", "indicator--577212e6-46b0-4288-acd7-4636950d210f", "indicator--577212e6-0f18-4c56-b971-4051950d210f", "indicator--577212e6-77cc-492c-b328-4834950d210f", "indicator--577212e6-f3e8-4a29-a17a-4c89950d210f", "indicator--577212e7-5280-405c-b7be-4a48950d210f", "indicator--577212e7-ff6c-4c9f-8e31-477b950d210f", "indicator--577212e7-a6b4-4c42-b31d-4337950d210f", "indicator--577212e7-af64-4ab4-a311-4ca6950d210f", "indicator--577212e7-02e8-497f-9a2a-4601950d210f", "indicator--577212e8-a90c-47a3-b0e0-4ea0950d210f", "indicator--577212e8-39b4-46fb-8c60-491b950d210f", "indicator--577212e8-9fc8-47f4-a3ca-4d74950d210f", "indicator--577212e8-0ef4-454e-b14c-45dc950d210f", "indicator--577212e8-4f94-4706-82a2-45c9950d210f", "indicator--577212e8-e474-4e7b-aac9-4ff0950d210f", "indicator--577212e9-ac70-4591-919b-4976950d210f", "indicator--577212e9-2ba8-4756-a546-4368950d210f", "indicator--577212e9-e3c4-406f-a2bc-4afc950d210f", "indicator--577212e9-97b0-4e31-9610-4a67950d210f", "indicator--577212e9-b5d0-4269-99e0-4792950d210f", "indicator--577212e9-9028-4046-a6b7-4804950d210f", "indicator--577212ea-0d90-4bb7-85ef-4a79950d210f", "indicator--577212ea-7488-4c1e-9f6d-47ab950d210f", "indicator--577212ea-8548-417e-93c6-474e950d210f", "indicator--577212ea-8c5c-4bba-a4dd-4a07950d210f", "indicator--577212ea-3b18-45c1-986a-43be950d210f", "indicator--577212ea-63cc-4d8a-bedb-452b950d210f", "indicator--577212eb-74f0-444b-8ed2-486d950d210f", "indicator--577212eb-1f3c-4485-8297-4b38950d210f", "indicator--577212eb-2910-4813-821d-45a7950d210f", "indicator--577212eb-3450-4e32-9ab7-45b9950d210f", "indicator--577212eb-82bc-4873-8fdc-4b91950d210f", "indicator--577212ec-6f40-416e-a6eb-4827950d210f", "indicator--577212ec-40e4-4202-ba61-48bc950d210f", "indicator--577212ec-5a58-42e5-b00b-4afc950d210f", "indicator--577212ec-d518-4e15-beb1-4a09950d210f", "indicator--577212ec-7f54-49c0-9db9-4075950d210f", "indicator--577212ec-8674-4617-9d62-4402950d210f", "indicator--577212ed-3b38-403d-8d02-4475950d210f", "indicator--577212ed-acf0-4155-8f8c-4acf950d210f", "indicator--577212ed-22c0-4012-8a6a-431d950d210f", "indicator--577212ed-a5a4-4729-9a88-4ea3950d210f", "indicator--577212ed-3f90-4713-98b6-4e0a950d210f", "indicator--577212ed-1bdc-4eb2-b3ec-493c950d210f", "indicator--577212ee-7e88-45ee-bdd0-43cd950d210f", "indicator--577212ee-ed2c-4aa4-8a84-425d950d210f", "indicator--577212ee-c7f8-4c42-881d-45ee950d210f", "indicator--577212ee-5804-4422-b0b6-474d950d210f", "indicator--577212ee-f35c-4e1a-ace2-472b950d210f", "indicator--577212ef-29bc-46c1-803f-47a0950d210f", "indicator--577212ef-56a8-439a-ba50-48fe950d210f" ], "labels": [ "Threat-Report", "misp:tool=\"MISP-STIX-Converter\"", "circl:incident-classification=\"malware\"" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212df-70ac-4292-805b-40ed950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:07.000Z", "modified": "2016-06-28T06:02:07.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.152.168.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e0-e35c-4005-b5f2-40f6950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:08.000Z", "modified": "2016-06-28T06:02:08.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '107.180.24.238']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e0-a564-4af6-8d45-432b950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:08.000Z", "modified": "2016-06-28T06:02:08.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '107.6.169.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e0-40a0-4b6e-ab50-44c5950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:08.000Z", "modified": "2016-06-28T06:02:08.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '112.140.178.249']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e0-bac4-4e2a-bdd5-4406950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:08.000Z", "modified": "2016-06-28T06:02:08.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '166.63.125.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e1-7e80-47ad-b7d3-4039950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:09.000Z", "modified": "2016-06-28T06:02:09.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '175.45.184.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e1-41c8-4083-82d9-43d0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:09.000Z", "modified": "2016-06-28T06:02:09.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.62.167.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e1-658c-466b-80cf-42cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:09.000Z", "modified": "2016-06-28T06:02:09.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '184.171.252.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e1-b270-42ce-a9d7-48d7950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:09.000Z", "modified": "2016-06-28T06:02:09.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.185.225.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e1-ecd4-4f76-bfbc-43ab950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:09.000Z", "modified": "2016-06-28T06:02:09.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.186.246.134']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e1-c378-40f5-8d03-47b6950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:09.000Z", "modified": "2016-06-28T06:02:09.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.186.246.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e2-3ab0-4ce2-9ee2-44a9950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:10.000Z", "modified": "2016-06-28T06:02:10.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '195.208.1.146']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e2-5780-47f9-a08a-4dd4950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:10.000Z", "modified": "2016-06-28T06:02:10.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '198.54.115.218']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e2-5490-4c0d-9b00-42cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:10.000Z", "modified": "2016-06-28T06:02:10.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.241.184.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e2-0b50-47f9-bc5c-41e5950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:10.000Z", "modified": "2016-06-28T06:02:10.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '207.210.108.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e2-0868-4459-940f-4685950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:10.000Z", "modified": "2016-06-28T06:02:10.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '210.171.0.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e2-456c-460d-a242-48e2950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:10.000Z", "modified": "2016-06-28T06:02:10.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.160.76.117']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e3-0210-40e7-a0ac-48da950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:11.000Z", "modified": "2016-06-28T06:02:11.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '216.218.93.172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e3-7450-4a2f-a3c9-49fc950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:11.000Z", "modified": "2016-06-28T06:02:11.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '217.172.226.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e3-96b8-4b12-b872-49aa950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:11.000Z", "modified": "2016-06-28T06:02:11.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '217.73.226.220']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e3-5124-487e-b9eb-4222950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:11.000Z", "modified": "2016-06-28T06:02:11.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '217.76.156.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e3-9a88-4f4b-a8ca-4bcc950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:11.000Z", "modified": "2016-06-28T06:02:11.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '23.229.131.128']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e3-e5fc-4d34-bdd0-40ab950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:11.000Z", "modified": "2016-06-28T06:02:11.000Z", "description": "download location", "pattern": "[domain-name:value = '3141592.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e4-0d90-473f-820e-42f1950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:12.000Z", "modified": "2016-06-28T06:02:12.000Z", "description": "download location", "pattern": "[domain-name:value = '4k18.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e4-7e4c-4d5b-a9d8-4721950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:12.000Z", "modified": "2016-06-28T06:02:12.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '69.195.124.97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e4-e2d0-47f9-9291-4fbf950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:12.000Z", "modified": "2016-06-28T06:02:12.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '80.244.134.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e4-2f14-4c8a-81fe-470e950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:12.000Z", "modified": "2016-06-28T06:02:12.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '81.177.140.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e4-42cc-4cef-b5f5-4ec9950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:12.000Z", "modified": "2016-06-28T06:02:12.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '82.140.32.172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e4-8d2c-4434-8b77-483a950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:12.000Z", "modified": "2016-06-28T06:02:12.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '83.96.159.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e5-00a8-4469-971f-4eee950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:13.000Z", "modified": "2016-06-28T06:02:13.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '85.118.237.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e5-24b4-4709-8ef3-4c77950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:13.000Z", "modified": "2016-06-28T06:02:13.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '86.106.30.71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e5-765c-45c1-8010-49aa950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:13.000Z", "modified": "2016-06-28T06:02:13.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '89.42.39.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e5-9004-4dfd-b142-40ee950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:13.000Z", "modified": "2016-06-28T06:02:13.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '92.53.126.193']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e5-c81c-4570-a0ed-4aba950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:13.000Z", "modified": "2016-06-28T06:02:13.000Z", "description": "download location", "pattern": "[domain-name:value = 'adbm.co.uk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e5-f940-47ef-8405-4f6a950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:13.000Z", "modified": "2016-06-28T06:02:13.000Z", "description": "download location", "pattern": "[domain-name:value = 'addonworks.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e6-d6f8-4ce1-a31e-4f76950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:14.000Z", "modified": "2016-06-28T06:02:14.000Z", "description": "download location", "pattern": "[domain-name:value = 'asliaypak.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e6-bcac-4ce4-89c6-47b8950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:14.000Z", "modified": "2016-06-28T06:02:14.000Z", "description": "download location", "pattern": "[domain-name:value = 'atlantaelectronics.co.id']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e6-46b0-4288-acd7-4636950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:14.000Z", "modified": "2016-06-28T06:02:14.000Z", "description": "download location", "pattern": "[domain-name:value = 'beautifulhosting.com.au']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e6-0f18-4c56-b971-4051950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:14.000Z", "modified": "2016-06-28T06:02:14.000Z", "description": "download location", "pattern": "[domain-name:value = 'bisericaromaneasca.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e6-77cc-492c-b328-4834950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:14.000Z", "modified": "2016-06-28T06:02:14.000Z", "description": "download location", "pattern": "[domain-name:value = 'bobbysinghwpg.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e6-f3e8-4a29-a17a-4c89950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:14.000Z", "modified": "2016-06-28T06:02:14.000Z", "description": "download location", "pattern": "[domain-name:value = 'camera-test.hi2.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e7-5280-405c-b7be-4a48950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:15.000Z", "modified": "2016-06-28T06:02:15.000Z", "description": "download location", "pattern": "[domain-name:value = 'cameramartusa.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e7-ff6c-4c9f-8e31-477b950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:15.000Z", "modified": "2016-06-28T06:02:15.000Z", "description": "download location", "pattern": "[domain-name:value = 'certifiedbanker.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e7-a6b4-4c42-b31d-4337950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:15.000Z", "modified": "2016-06-28T06:02:15.000Z", "description": "download location", "pattern": "[domain-name:value = 'clients.seospell.co.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e7-af64-4ab4-a311-4ca6950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:15.000Z", "modified": "2016-06-28T06:02:15.000Z", "description": "download location", "pattern": "[domain-name:value = 'climairuk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e7-02e8-497f-9a2a-4601950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:15.000Z", "modified": "2016-06-28T06:02:15.000Z", "description": "download location", "pattern": "[domain-name:value = 'delicious-doughnuts.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e8-a90c-47a3-b0e0-4ea0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:16.000Z", "modified": "2016-06-28T06:02:16.000Z", "description": "download location", "pattern": "[domain-name:value = 'empiredeckandfence.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e8-39b4-46fb-8c60-491b950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:16.000Z", "modified": "2016-06-28T06:02:16.000Z", "description": "download location", "pattern": "[domain-name:value = 'euro-support.be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e8-9fc8-47f4-a3ca-4d74950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:16.000Z", "modified": "2016-06-28T06:02:16.000Z", "description": "download location", "pattern": "[domain-name:value = 'focolareostuni.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e8-0ef4-454e-b14c-45dc950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:16.000Z", "modified": "2016-06-28T06:02:16.000Z", "description": "download location", "pattern": "[url:value = 'http://192.186.246.134/~advancedptr/4kw2yb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e8-4f94-4706-82a2-45c9950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:16.000Z", "modified": "2016-06-28T06:02:16.000Z", "description": "download location", "pattern": "[url:value = 'http://210.171.0.30/~akfa8701/76p9su']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e8-e474-4e7b-aac9-4ff0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:16.000Z", "modified": "2016-06-28T06:02:16.000Z", "description": "download location", "pattern": "[url:value = 'http://216.218.93.172/~thelma2/7a4q7knx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e9-ac70-4591-919b-4976950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:17.000Z", "modified": "2016-06-28T06:02:17.000Z", "description": "download location", "pattern": "[url:value = 'http://217.172.226.2/~redpaluch/8ji21s5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e9-2ba8-4756-a546-4368950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:17.000Z", "modified": "2016-06-28T06:02:17.000Z", "description": "download location", "pattern": "[url:value = 'http://217.172.226.2/~vikolor/3pdqsh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e9-e3c4-406f-a2bc-4afc950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:17.000Z", "modified": "2016-06-28T06:02:17.000Z", "description": "download location", "pattern": "[url:value = 'http://3141592.ru/rvhijql']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e9-97b0-4e31-9610-4a67950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:17.000Z", "modified": "2016-06-28T06:02:17.000Z", "description": "download location", "pattern": "[url:value = 'http://4k18.com/lpschs']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e9-b5d0-4269-99e0-4792950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:17.000Z", "modified": "2016-06-28T06:02:17.000Z", "description": "download location", "pattern": "[url:value = 'http://80.244.134.169/x4jzt5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212e9-9028-4046-a6b7-4804950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:17.000Z", "modified": "2016-06-28T06:02:17.000Z", "description": "download location", "pattern": "[url:value = 'http://82.140.32.172/~hoddl/4etb1e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ea-0d90-4bb7-85ef-4a79950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:18.000Z", "modified": "2016-06-28T06:02:18.000Z", "description": "download location", "pattern": "[url:value = 'http://adbm.co.uk/104ky']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ea-7488-4c1e-9f6d-47ab950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:18.000Z", "modified": "2016-06-28T06:02:18.000Z", "description": "download location", "pattern": "[url:value = 'http://addonworks.com/aaotksj']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ea-8548-417e-93c6-474e950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:18.000Z", "modified": "2016-06-28T06:02:18.000Z", "description": "download location", "pattern": "[url:value = 'http://asliaypak.com/zcubi7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ea-8c5c-4bba-a4dd-4a07950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:18.000Z", "modified": "2016-06-28T06:02:18.000Z", "description": "download location", "pattern": "[url:value = 'http://atlantaelectronics.co.id/kjdfbm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ea-3b18-45c1-986a-43be950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:18.000Z", "modified": "2016-06-28T06:02:18.000Z", "description": "download location", "pattern": "[url:value = 'http://beautifulhosting.com.au/ljtxwrr4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ea-63cc-4d8a-bedb-452b950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:18.000Z", "modified": "2016-06-28T06:02:18.000Z", "description": "download location", "pattern": "[url:value = 'http://bisericaromaneasca.ro/amfcy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212eb-74f0-444b-8ed2-486d950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:19.000Z", "modified": "2016-06-28T06:02:19.000Z", "description": "download location", "pattern": "[url:value = 'http://bobbysinghwpg.com/fx1jpyt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212eb-1f3c-4485-8297-4b38950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:19.000Z", "modified": "2016-06-28T06:02:19.000Z", "description": "download location", "pattern": "[url:value = 'http://camera-test.hi2.ro/5w9tcm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212eb-2910-4813-821d-45a7950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:19.000Z", "modified": "2016-06-28T06:02:19.000Z", "description": "download location", "pattern": "[url:value = 'http://cameramartusa.info/qaghx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212eb-3450-4e32-9ab7-45b9950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:19.000Z", "modified": "2016-06-28T06:02:19.000Z", "description": "download location", "pattern": "[url:value = 'http://certifiedbanker.org/faplav8m']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212eb-82bc-4873-8fdc-4b91950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:19.000Z", "modified": "2016-06-28T06:02:19.000Z", "description": "download location", "pattern": "[url:value = 'http://clients.seospell.co.in/8jq6cu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ec-6f40-416e-a6eb-4827950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:20.000Z", "modified": "2016-06-28T06:02:20.000Z", "description": "download location", "pattern": "[url:value = 'http://climairuk.com/bv7haqcm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ec-40e4-4202-ba61-48bc950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:20.000Z", "modified": "2016-06-28T06:02:20.000Z", "description": "download location", "pattern": "[url:value = 'http://delicious-doughnuts.net/t81of0k']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ec-5a58-42e5-b00b-4afc950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:20.000Z", "modified": "2016-06-28T06:02:20.000Z", "description": "download location", "pattern": "[url:value = 'http://empiredeckandfence.com/8wytfp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ec-d518-4e15-beb1-4a09950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:20.000Z", "modified": "2016-06-28T06:02:20.000Z", "description": "download location", "pattern": "[url:value = 'http://euro-support.be/jo1s8r3k']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ec-7f54-49c0-9db9-4075950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:20.000Z", "modified": "2016-06-28T06:02:20.000Z", "description": "download location", "pattern": "[url:value = 'http://focolareostuni.it/1tl199rq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ec-8674-4617-9d62-4402950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:20.000Z", "modified": "2016-06-28T06:02:20.000Z", "description": "download location", "pattern": "[url:value = 'http://hudebiah.net/vyz44p8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ed-3b38-403d-8d02-4475950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:21.000Z", "modified": "2016-06-28T06:02:21.000Z", "description": "download location", "pattern": "[url:value = 'http://jd-products.nl/msjswnn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ed-acf0-4155-8f8c-4acf950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:21.000Z", "modified": "2016-06-28T06:02:21.000Z", "description": "download location", "pattern": "[url:value = 'http://potolok-profit.ru/w9oyt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ed-22c0-4012-8a6a-431d950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:21.000Z", "modified": "2016-06-28T06:02:21.000Z", "description": "download location", "pattern": "[url:value = 'http://sherlock.uvishere.com/2ujlndd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ed-a5a4-4729-9a88-4ea3950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:21.000Z", "modified": "2016-06-28T06:02:21.000Z", "description": "download location", "pattern": "[url:value = 'http://staffsolut.nichost.ru/wif31sug']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ed-3f90-4713-98b6-4e0a950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:21.000Z", "modified": "2016-06-28T06:02:21.000Z", "description": "download location", "pattern": "[url:value = 'http://tip.ub.ac.id/bzrnweoo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ed-1bdc-4eb2-b3ec-493c950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:21.000Z", "modified": "2016-06-28T06:02:21.000Z", "description": "download location", "pattern": "[url:value = 'http://www.centroinfantilelmolino.com/2sgw0ch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ee-7e88-45ee-bdd0-43cd950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:22.000Z", "modified": "2016-06-28T06:02:22.000Z", "description": "download location", "pattern": "[domain-name:value = 'hudebiah.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ee-ed2c-4aa4-8a84-425d950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:22.000Z", "modified": "2016-06-28T06:02:22.000Z", "description": "download location", "pattern": "[domain-name:value = 'jd-products.nl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ee-c7f8-4c42-881d-45ee950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:22.000Z", "modified": "2016-06-28T06:02:22.000Z", "description": "download location", "pattern": "[domain-name:value = 'potolok-profit.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ee-5804-4422-b0b6-474d950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:22.000Z", "modified": "2016-06-28T06:02:22.000Z", "description": "download location", "pattern": "[domain-name:value = 'sherlock.uvishere.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ee-f35c-4e1a-ace2-472b950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:22.000Z", "modified": "2016-06-28T06:02:22.000Z", "description": "download location", "pattern": "[domain-name:value = 'staffsolut.nichost.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ef-29bc-46c1-803f-47a0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:23.000Z", "modified": "2016-06-28T06:02:23.000Z", "description": "download location", "pattern": "[domain-name:value = 'tip.ub.ac.id']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--577212ef-56a8-439a-ba50-48fe950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-28T06:02:23.000Z", "modified": "2016-06-28T06:02:23.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.centroinfantilelmolino.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-28T06:02:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } } ] }