{ "type": "bundle", "id": "bundle--57ab2b08-fcd8-48b2-ba43-4cf3950d210f", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:28:57.000Z", "modified": "2016-08-17T13:28:57.000Z", "name": "CthulhuSPRL.be", "identity_class": "organization" }, { "type": "report", "spec_version": "2.1", "id": "report--57ab2b08-fcd8-48b2-ba43-4cf3950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:28:57.000Z", "modified": "2016-08-17T13:28:57.000Z", "name": "OSINT EFF Report Operation Manul", "published": "2016-08-17T13:29:13Z", "object_refs": [ "observed-data--57ab2b3f-9b80-49f5-99a5-4803950d210f", "url--57ab2b3f-9b80-49f5-99a5-4803950d210f", "observed-data--57ab2b3f-6aa4-42b7-aa4f-4fc6950d210f", "url--57ab2b3f-6aa4-42b7-aa4f-4fc6950d210f", "indicator--57ab2b63-0a20-413c-a455-4d0a950d210f", "indicator--57ab2b64-07dc-4cd3-8915-4b7a950d210f", "indicator--57ab2b64-d810-46d4-95dd-460a950d210f", "indicator--57ab2b64-7f58-44ba-9c62-439c950d210f", "indicator--57ab2b64-8058-452e-bd87-4690950d210f", "indicator--57ab2b64-8fb0-49df-adea-4af6950d210f", "indicator--57ab2b65-2794-43e1-88a1-408c950d210f", "indicator--57ab2b65-5740-44d2-a60b-42d9950d210f", "indicator--57ab2b8c-0824-456d-b8dc-41d2950d210f", "indicator--57ab2b8c-41f8-4064-8673-4ae3950d210f", "indicator--57ab2bbf-cbdc-4d20-af0d-4197950d210f", "indicator--57ab2bbf-fc34-48e7-b446-4916950d210f", "indicator--57ab2bc0-ee94-44d5-bce1-4870950d210f", "indicator--57ab2bc0-b8fc-4ec6-8e49-4037950d210f", "indicator--57ab2bc1-dbec-4e0e-ad97-48a4950d210f", "indicator--57ab2bc1-1bf4-465f-9e1a-4dd7950d210f", "indicator--57ab2bc2-c070-47ae-ae3e-453f950d210f", "indicator--57ab2bc2-22d4-45dc-9512-4b94950d210f", "indicator--57ab2bc2-acc0-46e3-9f9b-42dd950d210f", "indicator--57ab2bc3-065c-4d01-94ed-4f9f950d210f", "indicator--57ab2bc4-2c8c-41ad-87d4-4e83950d210f", "indicator--57ab2bc4-7608-4c6f-984d-4d5a950d210f", "indicator--57ab2bc5-82a4-4924-9a7d-4f0f950d210f", "indicator--57ab2bc5-25a4-4d2a-be3d-479f950d210f", "indicator--57ab2bc5-51d0-4100-8754-41b6950d210f", "indicator--57ab2bc6-fff0-49e8-847e-49ad950d210f", "indicator--57ab2bc6-2810-48cd-bc71-4124950d210f", "indicator--57ab2bc7-dbb4-4e2f-ade8-4eb8950d210f", "indicator--57ab2bc7-4770-47df-b8b7-4e3d950d210f", "indicator--57ab2bc8-5118-40d4-8d66-4f9a950d210f", "indicator--57ab2bc8-0d94-448d-a1e5-49aa950d210f", "indicator--57ab2bc9-bd90-4e68-a68c-475a950d210f", "indicator--57ab2bc9-7334-47c4-a504-42df950d210f", "indicator--57ab2bca-1698-468f-8cd8-412e950d210f", "indicator--57ab2bca-afbc-41da-9db5-412c950d210f", "indicator--57ab2bcb-6730-4f2d-8530-46b5950d210f", "indicator--57ab2bcb-e2c0-4630-a2c7-47b0950d210f", "indicator--57ab2bcb-7280-4724-94ba-46e7950d210f", "indicator--57ab2bcb-20b4-4873-bded-4c9c950d210f", "indicator--57ab2bcb-dc08-47f9-ab62-48ae950d210f", "indicator--57ab2bcc-4d10-4766-800c-420f950d210f", "indicator--57ab2bcc-82b8-42ac-9abb-4deb950d210f", "indicator--57ab2bcc-7200-4fa2-84d7-4aa7950d210f", "indicator--57ab2bcd-c680-4c98-a8c7-4ee7950d210f", "indicator--57ab33e7-cd60-4c68-bd03-4231950d210f", "indicator--57ab33ed-0524-4a2e-aa35-41a3950d210f", "indicator--57ab33f0-5e9c-4352-8d4f-4c99950d210f", "indicator--57ab33f3-05f0-46cd-911d-4e03950d210f", "indicator--57ab33f9-5dc4-4327-a516-47de950d210f", "indicator--57ab33fd-be4c-45ff-894b-4ef4950d210f", "indicator--57ab3402-8cdc-4f2a-9228-4895950d210f", "indicator--57ab3406-c6c8-4c82-badd-4dd5950d210f", "indicator--57ab33e9-818c-4d59-8b33-478e950d210f", "indicator--57ab33ed-53f8-4c93-83f2-4791950d210f", "indicator--57ab33f1-b74c-4210-9d96-4e94950d210f", "indicator--57ab33f4-f790-4fb7-9a9a-4259950d210f", "indicator--57ab33fa-9b58-4ebf-ad7d-4038950d210f", "indicator--57ab33fe-d04c-45f8-874b-49ea950d210f", "indicator--57ab3403-c560-4d52-8c6b-466a950d210f", "indicator--57ab3408-faf0-4902-ab37-40ec950d210f", "indicator--57ab340c-b8e8-4a2b-926e-4300950d210f", "indicator--57ab3410-5980-457d-8178-488c950d210f", "indicator--57ab3414-bd98-4403-bd13-49a7950d210f", "indicator--57ab3417-a908-4ab3-b4c0-49db950d210f", "indicator--57ab3407-dc54-4d85-bfc3-4351950d210f", "indicator--57ab3409-9f14-4e2b-8a7d-4f11950d210f", "indicator--57ab340d-1048-406c-890c-482f950d210f", "indicator--57ab3411-ff50-4ec1-99ca-47ef950d210f", "indicator--57ab3414-8ab8-4f0d-ba4e-4c4b950d210f", "indicator--57ab3418-c8c4-4962-9300-431a950d210f", "indicator--57b464a6-1154-4bb3-963b-47df950d210f", "indicator--57b464a6-6a34-4963-a8fd-4ec5950d210f", "indicator--57b464a7-532c-4578-9357-41d1950d210f", "indicator--57b464a8-18b0-4282-b046-4a5d950d210f", "indicator--57b464a9-5110-4784-b3bb-426c950d210f", "indicator--57b464a9-b154-4770-8861-4216950d210f", "indicator--57b464aa-e170-4336-8e9e-42c6950d210f", "indicator--57b464aa-445c-47e4-9558-4cab950d210f", "indicator--57b464ad-26bc-4a20-8ff7-4ccd950d210f", "indicator--57b464ae-f624-408c-a04b-42e0950d210f", "indicator--57b464af-cf08-41be-8983-46e5950d210f", "indicator--57b4656f-19c0-4631-83bb-4ab8950d210f", "indicator--57b46570-18fc-4b58-afd8-401d950d210f", "indicator--57b46570-79e0-4de9-a73d-49f3950d210f", "indicator--57b46570-8508-4c40-8810-478f950d210f", "indicator--57b46570-eb4c-4127-8640-4845950d210f", "indicator--57b46570-0ff8-43af-89ab-4ec0950d210f", "indicator--57b465df-13c0-4cf6-be76-4917950d210f", "indicator--57b46698-58c4-417b-bb33-4ee9950d210f" ], "labels": [ "Threat-Report", "misp:tool=\"MISP-STIX-Converter\"", "OSINT" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "observed-data", "spec_version": "2.1", "id": "observed-data--57ab2b3f-9b80-49f5-99a5-4803950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:25:19.000Z", "modified": "2016-08-10T13:25:19.000Z", "first_observed": "2016-08-10T13:25:19Z", "last_observed": "2016-08-10T13:25:19Z", "number_observed": 1, "object_refs": [ "url--57ab2b3f-9b80-49f5-99a5-4803950d210f" ], "labels": [ "misp:type=\"link\"", "misp:category=\"External analysis\"" ] }, { "type": "url", "spec_version": "2.1", "id": "url--57ab2b3f-9b80-49f5-99a5-4803950d210f", "value": "https://www.eff.org/files/2016/08/03/i-got-a-letter-from-the-government.pdf" }, { "type": "observed-data", "spec_version": "2.1", "id": "observed-data--57ab2b3f-6aa4-42b7-aa4f-4fc6950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:25:19.000Z", "modified": "2016-08-10T13:25:19.000Z", "first_observed": "2016-08-10T13:25:19Z", "last_observed": "2016-08-10T13:25:19Z", "number_observed": 1, "object_refs": [ "url--57ab2b3f-6aa4-42b7-aa4f-4fc6950d210f" ], "labels": [ "misp:type=\"link\"", "misp:category=\"External analysis\"" ] }, { "type": "url", "spec_version": "2.1", "id": "url--57ab2b3f-6aa4-42b7-aa4f-4fc6950d210f", "value": "https://www.eff.org/wp/operation-manul" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2b63-0a20-413c-a455-4d0a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:25:55.000Z", "modified": "2016-08-10T13:25:55.000Z", "pattern": "[domain-name:value = 'axroot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:25:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2b64-07dc-4cd3-8915-4b7a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:25:56.000Z", "modified": "2016-08-10T13:25:56.000Z", "pattern": "[domain-name:value = 'kaliex.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:25:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2b64-d810-46d4-95dd-460a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:25:56.000Z", "modified": "2016-08-10T13:25:56.000Z", "pattern": "[domain-name:value = 'adobeair.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:25:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2b64-7f58-44ba-9c62-439c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:25:56.000Z", "modified": "2016-08-10T13:25:56.000Z", "pattern": "[domain-name:value = 'mangoco.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:25:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2b64-8058-452e-bd87-4690950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:25:56.000Z", "modified": "2016-08-10T13:25:56.000Z", "pattern": "[domain-name:value = 'orange2015.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:25:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2b64-8fb0-49df-adea-4af6950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:25:56.000Z", "modified": "2016-08-10T13:25:56.000Z", "pattern": "[domain-name:value = 'accountslogin.services']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:25:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2b65-2794-43e1-88a1-408c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:25:57.000Z", "modified": "2016-08-10T13:25:57.000Z", "pattern": "[domain-name:value = 'adobeinstall.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:25:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2b65-5740-44d2-a60b-42d9950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:25:57.000Z", "modified": "2016-08-10T13:25:57.000Z", "pattern": "[domain-name:value = 'dropboxonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:25:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2b8c-0824-456d-b8dc-41d2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:26:36.000Z", "modified": "2016-08-10T13:26:36.000Z", "pattern": "[domain-name:value = 'jaysonj.no-ip.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:26:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2b8c-41f8-4064-8673-4ae3950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:26:36.000Z", "modified": "2016-08-10T13:26:36.000Z", "pattern": "[domain-name:value = 'adobe-flashviewer.accountslogin.services']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:26:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bbf-cbdc-4d20-af0d-4197950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:27.000Z", "modified": "2016-08-10T13:27:27.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '0491f4e55158d745fd1653950c89fcc9b37d3c1102680bd3ce67616a36bb2592']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bbf-fc34-48e7-b446-4916950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:27.000Z", "modified": "2016-08-10T13:27:27.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '06529ac1d3388732ebca75b8ee0adf0bc7f45d4c448ec98223dd7a258a0f1f33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc0-ee94-44d5-bce1-4870950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:28.000Z", "modified": "2016-08-10T13:27:28.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '1192b5111f7c75417215a1285a20147f5ab085368fa95d74e7603d26736057ac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc0-b8fc-4ec6-8e49-4037950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:28.000Z", "modified": "2016-08-10T13:27:28.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '1e3966e77ad1cbf3e3ef76803fbf92300b2b88af39650a1208520e0cdc05645b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc1-dbec-4e0e-ad97-48a4950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:29.000Z", "modified": "2016-08-10T13:27:29.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '2431ff8ba00923a9c115a57e541d9d20e0a68b6cb1b48b87e7797864cf07dfab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc1-1bf4-465f-9e1a-4dd7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:29.000Z", "modified": "2016-08-10T13:27:29.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '345773dc4215c8c189d21536755614ca7b89082b96563239e363dd72c0cd8c68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc2-c070-47ae-ae3e-453f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:30.000Z", "modified": "2016-08-10T13:27:30.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '373231f5be17e09e4ce94f76b35e5be57c961d6c8a9286b2e20e203d53b3c9dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc2-22d4-45dc-9512-4b94950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:30.000Z", "modified": "2016-08-10T13:27:30.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '39802d53ae4a29c528626b0870872040dc5c994fb3b6b9e4a3b982144ad56e6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc2-acc0-46e3-9f9b-42dd950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:30.000Z", "modified": "2016-08-10T13:27:30.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '40d30bc2db27e2a8a12cdeb5aae19f04064e5a1775bd3e6cf61a7070b797d3b3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc3-065c-4d01-94ed-4f9f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:31.000Z", "modified": "2016-08-10T13:27:31.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '40e9c694901aeb27993a8cd81f872076ee430e151f64af06993eb79442103ef8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc4-2c8c-41ad-87d4-4e83950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:32.000Z", "modified": "2016-08-10T13:27:32.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '4730c6033d8644c0aae46003bab3254e4beb62187573ffb5ba5bc95a28ddcd93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc4-7608-4c6f-984d-4d5a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:32.000Z", "modified": "2016-08-10T13:27:32.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '4f1923485e8cdd052467d335a6384f93cd1d50b5d927aea471e56290be29ffa3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc5-82a4-4924-9a7d-4f0f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:33.000Z", "modified": "2016-08-10T13:27:33.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '576ca2b0c5fe1c756c245cb82d6a2ecce7f6976d5c3f3b338f686e06955032cb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc5-25a4-4d2a-be3d-479f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:33.000Z", "modified": "2016-08-10T13:27:33.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '5e322d208d61dcbf17914e24103710c52878e8cf50957f3d336736f4a1851951']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc5-51d0-4100-8754-41b6950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:33.000Z", "modified": "2016-08-10T13:27:33.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '652ec150db9a191942807ee5cf4772e75dfac562739477eacc6655fbec880ad7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc6-fff0-49e8-847e-49ad950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:34.000Z", "modified": "2016-08-10T13:27:34.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '65af112ce229ad888bf4bbba1e3dba701e0e68c9caf81543bb395a8b8192ba8e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc6-2810-48cd-bc71-4124950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:34.000Z", "modified": "2016-08-10T13:27:34.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '6eea4a67305f67cc7c016256e93eb816de32b6e9ad700f75828be9f97c28c0e0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc7-dbb4-4e2f-ade8-4eb8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:35.000Z", "modified": "2016-08-10T13:27:35.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '75ee00a36d324a89fc9ef4d7dbe606b885ec072388ef7b55d39112af7dbca665']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc7-4770-47df-b8b7-4e3d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:35.000Z", "modified": "2016-08-10T13:27:35.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '75f51845de4d0deae8aaab737a71bb8aed14bfa4919712bcdea212f62b70c07f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc8-5118-40d4-8d66-4f9a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:36.000Z", "modified": "2016-08-10T13:27:36.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '778a01389b17a8ff20c445e0856b3704ac50844faa8d36c01e0ff02518e4c6d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc8-0d94-448d-a1e5-49aa950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:36.000Z", "modified": "2016-08-10T13:27:36.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '8c33b645e6362ab7e8c8a9989715193b4c9655fd576812218f3957c3fff8c429']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc9-bd90-4e68-a68c-475a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:37.000Z", "modified": "2016-08-10T13:27:37.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '8d054753e0ed754398835bed794ba4fae64a2efb018f98d3c61064de8aaa231d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:37Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bc9-7334-47c4-a504-42df950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:37.000Z", "modified": "2016-08-10T13:27:37.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '91d251b11c59b5e25e0c1ae55421893fce8f180a97e2eef88122c61e8cdf1bae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:37Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bca-1698-468f-8cd8-412e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:38.000Z", "modified": "2016-08-10T13:27:38.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '926a0196e4a72ed6eb20b51953cc17e8856ea9c0ef554681b7d7f0ecad870a2e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bca-afbc-41da-9db5-412c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:38.000Z", "modified": "2016-08-10T13:27:38.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = '99e699e358be9e59cfad6124f44a96d3d1577edf9767afe17281adb37d901e22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bcb-6730-4f2d-8530-46b5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:39.000Z", "modified": "2016-08-10T13:27:39.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = 'a91c2cad20935a85d6eed72ef663254396914811f043018732d29276424a9578']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bcb-e2c0-4630-a2c7-47b0950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:39.000Z", "modified": "2016-08-10T13:27:39.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = 'ade5bd96bfba79051f8e8ed8fe973edd89e5f1ec6469393967c3ad7519a95650']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bcb-7280-4724-94ba-46e7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:39.000Z", "modified": "2016-08-10T13:27:39.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = 'b002e8b6406fbdf3de9bfcb3493e61c8a44b331f53125e8fed9daa351c49fd34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bcb-20b4-4873-bded-4c9c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:39.000Z", "modified": "2016-08-10T13:27:39.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = 'd803c4d736bcb247d23735a7160b93c2f3d98de5d432680f5eaf9212f965248c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bcb-dc08-47f9-ab62-48ae950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:39.000Z", "modified": "2016-08-10T13:27:39.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = 'e4381ad27b10d895ad8338ba399221d385653b83b8d5dbd5a32cb86a0c318d44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bcc-4d10-4766-800c-420f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:40.000Z", "modified": "2016-08-10T13:27:40.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = 'eccb3d7d1e8a7cd27c7caf21885c95122eed28361651e8e47b8c02828b232c7e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:40Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bcc-82b8-42ac-9abb-4deb950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:40.000Z", "modified": "2016-08-10T13:27:40.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = 'f56c545a3157f1cf753de5ac56bb52e5af42bc6b8225d26aafdce3b430287f34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:40Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bcc-7200-4fa2-84d7-4aa7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:40.000Z", "modified": "2016-08-10T13:27:40.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = 'fc49b37b879af6e675f223d324d32c894ba83952b2ee109d52bfa9bd8212e005']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:40Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab2bcd-c680-4c98-a8c7-4ee7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T13:27:41.000Z", "modified": "2016-08-10T13:27:41.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[file:hashes.SHA256 = 'f9dd8ebb062842798d53e78633ed9ca296f4a93dafb0fe60320a34a3d58d78d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T13:27:41Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha256\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab33e7-cd60-4c68-bd03-4231950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:15.000Z", "modified": "2016-08-10T14:02:15.000Z", "description": "Automatically added (via 0491f4e55158d745fd1653950c89fcc9b37d3c1102680bd3ce67616a36bb2592)", "pattern": "[file:hashes.MD5 = 'e5a5ecc04210ced0c5e7871bc5942518']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab33ed-0524-4a2e-aa35-41a3950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:21.000Z", "modified": "2016-08-10T14:02:21.000Z", "description": "Automatically added (via 1e3966e77ad1cbf3e3ef76803fbf92300b2b88af39650a1208520e0cdc05645b)", "pattern": "[file:hashes.MD5 = '405dba47e2b03f53db2101444e6a925c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab33f0-5e9c-4352-8d4f-4c99950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:24.000Z", "modified": "2016-08-10T14:02:24.000Z", "description": "Automatically added (via 345773dc4215c8c189d21536755614ca7b89082b96563239e363dd72c0cd8c68)", "pattern": "[file:hashes.MD5 = '34d19df50f7dc936b5e4e13bb29a74ac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab33f3-05f0-46cd-911d-4e03950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:27.000Z", "modified": "2016-08-10T14:02:27.000Z", "description": "Automatically added (via 373231f5be17e09e4ce94f76b35e5be57c961d6c8a9286b2e20e203d53b3c9dd)", "pattern": "[file:hashes.MD5 = '6a4df36f8f92b1b3c99949936e4407ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab33f9-5dc4-4327-a516-47de950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:33.000Z", "modified": "2016-08-10T14:02:33.000Z", "description": "Automatically added (via 4f1923485e8cdd052467d335a6384f93cd1d50b5d927aea471e56290be29ffa3)", "pattern": "[file:hashes.MD5 = 'f000ca9522aafa0c54b863528228a43b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab33fd-be4c-45ff-894b-4ef4950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:37.000Z", "modified": "2016-08-10T14:02:37.000Z", "description": "Automatically added (via 5e322d208d61dcbf17914e24103710c52878e8cf50957f3d336736f4a1851951)", "pattern": "[file:hashes.MD5 = '748e0825e487071146fdf811d55e4cc5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:37Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab3402-8cdc-4f2a-9228-4895950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:42.000Z", "modified": "2016-08-10T14:02:42.000Z", "description": "Automatically added (via 75ee00a36d324a89fc9ef4d7dbe606b885ec072388ef7b55d39112af7dbca665)", "pattern": "[file:hashes.MD5 = 'd1bd6495636412713f10d5014cd32582']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab3406-c6c8-4c82-badd-4dd5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:46.000Z", "modified": "2016-08-10T14:02:46.000Z", "description": "Automatically added (via 8d054753e0ed754398835bed794ba4fae64a2efb018f98d3c61064de8aaa231d)", "pattern": "[file:hashes.MD5 = '55cc4f9e159a225709dba3b570a722c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab33e9-818c-4d59-8b33-478e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:17.000Z", "modified": "2016-08-10T14:02:17.000Z", "description": "Automatically added (via 0491f4e55158d745fd1653950c89fcc9b37d3c1102680bd3ce67616a36bb2592)", "pattern": "[file:hashes.SHA1 = '7daa85fa02ee70bbd70c51affae4e6f835f1455c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha1\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab33ed-53f8-4c93-83f2-4791950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:21.000Z", "modified": "2016-08-10T14:02:21.000Z", "description": "Automatically added (via 1e3966e77ad1cbf3e3ef76803fbf92300b2b88af39650a1208520e0cdc05645b)", "pattern": "[file:hashes.SHA1 = 'ed769ff77f46730a9b58a111c52f9e498ec00838']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha1\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab33f1-b74c-4210-9d96-4e94950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:25.000Z", "modified": "2016-08-10T14:02:25.000Z", "description": "Automatically added (via 345773dc4215c8c189d21536755614ca7b89082b96563239e363dd72c0cd8c68)", "pattern": "[file:hashes.SHA1 = '65da12d59bf64f80f728c8dc9fa46e18f6ad08cb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha1\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab33f4-f790-4fb7-9a9a-4259950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:28.000Z", "modified": "2016-08-10T14:02:28.000Z", "description": "Automatically added (via 373231f5be17e09e4ce94f76b35e5be57c961d6c8a9286b2e20e203d53b3c9dd)", "pattern": "[file:hashes.SHA1 = '43eeda0b33b97f18f1e4eb885e4211f1ae33bcc8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha1\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab33fa-9b58-4ebf-ad7d-4038950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:34.000Z", "modified": "2016-08-10T14:02:34.000Z", "description": "Automatically added (via 4f1923485e8cdd052467d335a6384f93cd1d50b5d927aea471e56290be29ffa3)", "pattern": "[file:hashes.SHA1 = 'c636e88b9e8079ba086f5cdb132fa39e747d0f23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha1\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab33fe-d04c-45f8-874b-49ea950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:38.000Z", "modified": "2016-08-10T14:02:38.000Z", "description": "Automatically added (via 5e322d208d61dcbf17914e24103710c52878e8cf50957f3d336736f4a1851951)", "pattern": "[file:hashes.SHA1 = 'a5baf0d5cac512713ae3a6925d02b592a2bcbb1b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha1\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab3403-c560-4d52-8c6b-466a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:43.000Z", "modified": "2016-08-10T14:02:43.000Z", "description": "Automatically added (via 75ee00a36d324a89fc9ef4d7dbe606b885ec072388ef7b55d39112af7dbca665)", "pattern": "[file:hashes.SHA1 = '100f40a5ae4e748e8e74f9dc01e692697bfbde33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha1\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab3408-faf0-4902-ab37-40ec950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:48.000Z", "modified": "2016-08-10T14:02:48.000Z", "description": "Automatically added (via 91d251b11c59b5e25e0c1ae55421893fce8f180a97e2eef88122c61e8cdf1bae)", "pattern": "[file:hashes.MD5 = '00dd12e8106d4679c580a3d5d5e33fb7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab340c-b8e8-4a2b-926e-4300950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:52.000Z", "modified": "2016-08-10T14:02:52.000Z", "description": "Automatically added (via a91c2cad20935a85d6eed72ef663254396914811f043018732d29276424a9578)", "pattern": "[file:hashes.MD5 = '643b0db380149d220ce9074a29f83841']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab3410-5980-457d-8178-488c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:56.000Z", "modified": "2016-08-10T14:02:56.000Z", "description": "Automatically added (via d803c4d736bcb247d23735a7160b93c2f3d98de5d432680f5eaf9212f965248c)", "pattern": "[file:hashes.MD5 = '4bbcc24d287d2d2dbca475047976d178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab3414-bd98-4403-bd13-49a7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:03:00.000Z", "modified": "2016-08-10T14:03:00.000Z", "description": "Automatically added (via eccb3d7d1e8a7cd27c7caf21885c95122eed28361651e8e47b8c02828b232c7e)", "pattern": "[file:hashes.MD5 = 'ca6f9ce45b99751dc63d16a690390ce8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:03:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab3417-a908-4ab3-b4c0-49db950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:03:03.000Z", "modified": "2016-08-10T14:03:03.000Z", "description": "Automatically added (via fc49b37b879af6e675f223d324d32c894ba83952b2ee109d52bfa9bd8212e005)", "pattern": "[file:hashes.MD5 = '274ba30d17c6b1ad63df9d03dce36be8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:03:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"md5\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab3407-dc54-4d85-bfc3-4351950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:47.000Z", "modified": "2016-08-10T14:02:47.000Z", "description": "Automatically added (via 8d054753e0ed754398835bed794ba4fae64a2efb018f98d3c61064de8aaa231d)", "pattern": "[file:hashes.SHA1 = 'adb7fc1cc9dd76725c1a81c5f17d03de64f73296']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha1\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab3409-9f14-4e2b-8a7d-4f11950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:49.000Z", "modified": "2016-08-10T14:02:49.000Z", "description": "Automatically added (via 91d251b11c59b5e25e0c1ae55421893fce8f180a97e2eef88122c61e8cdf1bae)", "pattern": "[file:hashes.SHA1 = '4b584d44c2bbb1a54af07f4cf744010b769a8d07']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha1\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab340d-1048-406c-890c-482f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:53.000Z", "modified": "2016-08-10T14:02:53.000Z", "description": "Automatically added (via a91c2cad20935a85d6eed72ef663254396914811f043018732d29276424a9578)", "pattern": "[file:hashes.SHA1 = '8aff7278e29341030e4b4c3ff1ae644303fe896b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha1\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab3411-ff50-4ec1-99ca-47ef950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:02:57.000Z", "modified": "2016-08-10T14:02:57.000Z", "description": "Automatically added (via d803c4d736bcb247d23735a7160b93c2f3d98de5d432680f5eaf9212f965248c)", "pattern": "[file:hashes.SHA1 = '710733f641bfaccd1f8fe9949b7d7485be17a0dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:02:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha1\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab3414-8ab8-4f0d-ba4e-4c4b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:03:00.000Z", "modified": "2016-08-10T14:03:00.000Z", "description": "Automatically added (via eccb3d7d1e8a7cd27c7caf21885c95122eed28361651e8e47b8c02828b232c7e)", "pattern": "[file:hashes.SHA1 = '916df5b73b75f03e86c78fc3d19ef5d2dc1b7b92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:03:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha1\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57ab3418-c8c4-4962-9300-431a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-10T14:03:04.000Z", "modified": "2016-08-10T14:03:04.000Z", "description": "Automatically added (via fc49b37b879af6e675f223d324d32c894ba83952b2ee109d52bfa9bd8212e005)", "pattern": "[file:hashes.SHA1 = '7748a42d7db1ddd455c1ac9017f05c8b9620dd35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-10T14:03:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"sha1\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b464a6-1154-4bb3-963b-47df950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:20:38.000Z", "modified": "2016-08-17T13:20:38.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '111.90.150.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:20:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b464a6-6a34-4963-a8fd-4ec5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:20:38.000Z", "modified": "2016-08-17T13:20:38.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '111.90.150.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:20:38Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b464a7-532c-4578-9357-41d1950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:20:39.000Z", "modified": "2016-08-17T13:20:39.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '184.168.221.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:20:39Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b464a8-18b0-4282-b046-4a5d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:20:40.000Z", "modified": "2016-08-17T13:20:40.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.63.202.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:20:40Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b464a9-5110-4784-b3bb-426c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:20:41.000Z", "modified": "2016-08-17T13:20:41.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.39.10.93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:20:41Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b464a9-b154-4770-8861-4216950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:20:41.000Z", "modified": "2016-08-17T13:20:41.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.32.230.24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:20:41Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b464aa-e170-4336-8e9e-42c6950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:20:42.000Z", "modified": "2016-08-17T13:20:42.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '65.19.141.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:20:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b464aa-445c-47e4-9558-4cab950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:20:42.000Z", "modified": "2016-08-17T13:20:42.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '111.90.140.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:20:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b464ad-26bc-4a20-8ff7-4ccd950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:20:45.000Z", "modified": "2016-08-17T13:20:45.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.63.197.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:20:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b464ae-f624-408c-a04b-42e0950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:20:46.000Z", "modified": "2016-08-17T13:20:46.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.62.160.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:20:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b464af-cf08-41be-8983-46e5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:20:47.000Z", "modified": "2016-08-17T13:20:47.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '74.208.167.252']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:20:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b4656f-19c0-4631-83bb-4ab8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:23:59.000Z", "modified": "2016-08-17T13:23:59.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.202.189.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:23:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b46570-18fc-4b58-afd8-401d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:24:00.000Z", "modified": "2016-08-17T13:24:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '174.120.120.15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:24:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b46570-79e0-4de9-a73d-49f3950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:24:00.000Z", "modified": "2016-08-17T13:24:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '208.73.211.167']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:24:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b46570-8508-4c40-8810-478f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:24:00.000Z", "modified": "2016-08-17T13:24:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '208.73.210.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:24:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b46570-eb4c-4127-8640-4845950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:24:00.000Z", "modified": "2016-08-17T13:24:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '209.99.40.220']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:24:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b46570-0ff8-43af-89ab-4ec0950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:24:00.000Z", "modified": "2016-08-17T13:24:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '68.178.232.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:24:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b465df-13c0-4cf6-be76-4917950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:25:51.000Z", "modified": "2016-08-17T13:25:51.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '209.99.40.225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:25:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b46698-58c4-417b-bb33-4ee9950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-17T13:28:56.000Z", "modified": "2016-08-17T13:28:56.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '209.99.40.224']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-17T13:28:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } } ] }