{ "type": "bundle", "id": "bundle--57b5a125-6cd0-4060-926d-4bf7950d210f", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:51.000Z", "modified": "2016-08-18T11:57:51.000Z", "name": "CthulhuSPRL.be", "identity_class": "organization" }, { "type": "report", "spec_version": "2.1", "id": "report--57b5a125-6cd0-4060-926d-4bf7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:51.000Z", "modified": "2016-08-18T11:57:51.000Z", "name": "OSINT TorrentLocker Ransomware Email IoCs 8/16/2016 by neonPrimeTime user on AlienVault OTX", "published": "2016-08-18T11:58:02Z", "object_refs": [ "observed-data--57b5a20e-f5d4-4897-a7d1-416a950d210f", "url--57b5a20e-f5d4-4897-a7d1-416a950d210f", "observed-data--57b5a20e-9adc-4259-9de0-4777950d210f", "url--57b5a20e-9adc-4259-9de0-4777950d210f", "observed-data--57b5a20e-37d8-4b68-b86c-43c9950d210f", "url--57b5a20e-37d8-4b68-b86c-43c9950d210f", "indicator--57b5a281-3924-4dd0-9c1b-46e2950d210f", "indicator--57b5a281-6474-4912-88fa-40fe950d210f", "indicator--57b5a281-31b8-47ca-a6cb-4fb8950d210f", "indicator--57b5a281-d528-49c6-a826-498d950d210f", "indicator--57b5a281-ef3c-4b5c-b744-494f950d210f", "indicator--57b5a282-cd28-4105-9243-4036950d210f", "indicator--57b5a282-1360-4713-88f7-4b0f950d210f", "indicator--57b5a282-027c-41b9-b6ca-417a950d210f", "indicator--57b5a282-2810-4bb3-b245-479d950d210f", "indicator--57b5a283-91b0-4859-b00c-42aa950d210f", "indicator--57b5a283-2090-4fbc-9ddf-4653950d210f", "indicator--57b5a283-ddac-4904-afd0-4e0f950d210f", "indicator--57b5a283-fc70-48b5-907c-4185950d210f", "indicator--57b5a284-f618-4e84-bc9f-4db8950d210f", "indicator--57b5a284-996c-4d83-b61d-44db950d210f", "indicator--57b5a284-1014-4915-ba14-430b950d210f", "indicator--57b5a284-2fe0-416a-8cf9-4e45950d210f", "indicator--57b5a284-a2a8-4999-8b86-4c75950d210f", "indicator--57b5a285-1494-4ad9-a23e-43e7950d210f", "indicator--57b5a285-cf7c-4af1-83dd-4e85950d210f", "indicator--57b5a285-da30-40d0-be8b-44aa950d210f", "indicator--57b5a285-11b4-4813-8f48-41f2950d210f", "indicator--57b5a286-1a7c-4442-ae35-4434950d210f", "indicator--57b5a286-1ce8-40d5-9756-463d950d210f", "indicator--57b5a286-d734-4f1d-ad2f-4957950d210f", "indicator--57b5a286-d5a8-4d2f-acf9-43e8950d210f", "indicator--57b5a286-6aac-44e0-ae30-4f5e950d210f", "indicator--57b5a287-85f4-4377-aa4e-4530950d210f", "indicator--57b5a287-30b4-4dbe-b1f5-4b51950d210f", "indicator--57b5a287-9b24-4cf6-a304-4534950d210f", "indicator--57b5a287-6c2c-4466-943e-4466950d210f", "indicator--57b5a287-8ab0-4b2c-ab57-4875950d210f", "indicator--57b5a288-6014-40ce-9917-496b950d210f", "indicator--57b5a288-1afc-4671-8739-465f950d210f", "indicator--57b5a288-5e48-4fdf-961e-412f950d210f", "indicator--57b5a288-3294-4728-8f60-4b01950d210f", "indicator--57b5a289-01f0-417e-8fb2-4bce950d210f", "indicator--57b5a289-a2ec-4dc8-bc2a-49f2950d210f", "indicator--57b5a289-a5ec-4171-8ce8-410a950d210f", "indicator--57b5a289-39a8-40eb-872b-49a6950d210f", "indicator--57b5a289-58b4-47d0-a698-4e6f950d210f", "indicator--57b5a28a-2210-45de-b06f-4e23950d210f", "indicator--57b5a28a-f8d0-4363-8d93-4492950d210f", "indicator--57b5a28a-294c-462e-b0c4-4129950d210f", "indicator--57b5a28a-0638-4b13-b92e-4253950d210f", "indicator--57b5a28b-2420-4470-8783-4b69950d210f", "indicator--57b5a28b-d2dc-427a-bc84-4051950d210f", "indicator--57b5a28b-011c-4962-a47b-4e24950d210f", "indicator--57b5a28b-1708-40c7-ad43-4141950d210f", "indicator--57b5a28b-3360-4d1e-8872-4422950d210f", "indicator--57b5a28c-ff1c-46fd-b867-4fea950d210f", "indicator--57b5a28c-e2e4-4f2a-947c-4a58950d210f", "indicator--57b5a28c-8e50-45f3-ab1b-4afd950d210f", "indicator--57b5a28c-3498-44d9-8bc6-495b950d210f", "indicator--57b5a28d-2d78-4285-9dda-4d54950d210f", "indicator--57b5a28d-905c-44f9-9402-4266950d210f", "indicator--57b5a28d-08f0-4a7b-a2ac-45d2950d210f", "indicator--57b5a28d-e9b4-4164-b7be-4835950d210f", "indicator--57b5a28d-840c-4937-85cf-415a950d210f", "indicator--57b5a28e-00fc-487e-b859-4f5c950d210f", "indicator--57b5a28e-46c8-48fb-92e4-4198950d210f", "indicator--57b5a28e-5d64-4004-938e-4d60950d210f", "indicator--57b5a28e-8358-4771-8407-4833950d210f", "indicator--57b5a28e-1f60-4a6a-b810-4ba7950d210f", "indicator--57b5a28f-0c38-4c65-a13e-49c0950d210f", "indicator--57b5a28f-c7b0-401f-8107-46d8950d210f", "indicator--57b5a28f-ede0-4509-9d20-4cae950d210f", "indicator--57b5a28f-7130-47be-9bfd-4e41950d210f", "indicator--57b5a28f-3bc4-456e-bd16-470c950d210f", "indicator--57b5a290-15dc-4ccd-a7c2-4728950d210f", "indicator--57b5a290-3df8-40a1-bb44-4975950d210f", "indicator--57b5a290-d8e4-4dcf-8782-450c950d210f", "indicator--57b5a290-06dc-4c05-a5cf-4594950d210f", "indicator--57b5a290-caf0-43b0-8f83-4670950d210f", "indicator--57b5a291-0348-4f52-907c-4f7f950d210f", "indicator--57b5a291-f5ec-4a0c-9872-46f7950d210f", "indicator--57b5a291-f628-4ceb-a80d-488a950d210f", "indicator--57b5a291-404c-4d08-badc-4041950d210f", "indicator--57b5a292-34ac-4314-b80f-4d1d950d210f", "indicator--57b5a292-4bac-49a8-bb45-43c6950d210f", "indicator--57b5a292-e1a8-4009-873c-465e950d210f", "indicator--57b5a292-6d34-4c4f-99ea-4758950d210f", "indicator--57b5a293-1aa0-402d-9035-473e950d210f", "indicator--57b5a293-0f64-4f3b-828c-4ce1950d210f", "indicator--57b5a293-dc18-42f8-b532-458d950d210f", "indicator--57b5a293-669c-47d6-b85f-4a51950d210f", "indicator--57b5a293-5248-4f55-9e34-4b87950d210f", "indicator--57b5a294-920c-434d-908a-48b0950d210f", "indicator--57b5a294-0b8c-4796-be50-4bf2950d210f", "indicator--57b5a294-3f18-4492-87b5-4fb3950d210f", "indicator--57b5a294-6d48-4015-bc89-4350950d210f", "indicator--57b5a295-f2b8-4f42-890a-4517950d210f", "indicator--57b5a295-54e0-40f7-b9fe-4d4f950d210f", "indicator--57b5a295-ef20-4db4-b837-4ca8950d210f", "indicator--57b5a295-e57c-4273-8ced-4c95950d210f", "indicator--57b5a295-de38-4882-bbce-4124950d210f", "indicator--57b5a296-0608-437c-917f-4c35950d210f", "indicator--57b5a296-0350-43db-b130-4e6b950d210f", "indicator--57b5a296-984c-467c-ab26-42cd950d210f", "indicator--57b5a296-dd34-4950-bf1a-4708950d210f", "indicator--57b5a2bc-baec-4fe0-b4ad-4d2b950d210f", "indicator--57b5a2bc-998c-4e69-92a3-4c14950d210f", "indicator--57b5a2bd-d404-4a8f-9060-4659950d210f", "indicator--57b5a2bd-1040-47ce-9366-48d3950d210f", "indicator--57b5a2bd-d8bc-4a52-9439-4f8a950d210f", "indicator--57b5a2bd-1c9c-47f2-b1ab-4264950d210f", "indicator--57b5a2be-7ef4-4504-8ccb-414a950d210f", "indicator--57b5a2be-d5b0-450c-8125-4efa950d210f", "indicator--57b5a2be-b634-43fe-8819-4cdf950d210f", "indicator--57b5a2be-eca8-4968-8d85-44f8950d210f", "indicator--57b5a2be-0218-4e7b-b6bd-4ba8950d210f", "indicator--57b5a2bf-0c18-44c3-b86a-46bd950d210f", "indicator--57b5a2bf-b48c-4d4c-8ab0-4ecd950d210f" ], "labels": [ "Threat-Report", "misp:tool=\"MISP-STIX-Converter\"", "OSINT" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "observed-data", "spec_version": "2.1", "id": "observed-data--57b5a20e-f5d4-4897-a7d1-416a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:54:54.000Z", "modified": "2016-08-18T11:54:54.000Z", "first_observed": "2016-08-18T11:54:54Z", "last_observed": "2016-08-18T11:54:54Z", "number_observed": 1, "object_refs": [ "url--57b5a20e-f5d4-4897-a7d1-416a950d210f" ], "labels": [ "misp:type=\"link\"", "misp:category=\"External analysis\"" ] }, { "type": "url", "spec_version": "2.1", "id": "url--57b5a20e-f5d4-4897-a7d1-416a950d210f", "value": "https://otx.alienvault.com/pulse/57b48566d19e030139028cc3/" }, { "type": "observed-data", "spec_version": "2.1", "id": "observed-data--57b5a20e-9adc-4259-9de0-4777950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:54:54.000Z", "modified": "2016-08-18T11:54:54.000Z", "first_observed": "2016-08-18T11:54:54Z", "last_observed": "2016-08-18T11:54:54Z", "number_observed": 1, "object_refs": [ "url--57b5a20e-9adc-4259-9de0-4777950d210f" ], "labels": [ "misp:type=\"link\"", "misp:category=\"External analysis\"" ] }, { "type": "url", "spec_version": "2.1", "id": "url--57b5a20e-9adc-4259-9de0-4777950d210f", "value": "http://pastebin.com/d4EpJQgR" }, { "type": "observed-data", "spec_version": "2.1", "id": "observed-data--57b5a20e-37d8-4b68-b86c-43c9950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:54:54.000Z", "modified": "2016-08-18T11:54:54.000Z", "first_observed": "2016-08-18T11:54:54Z", "last_observed": "2016-08-18T11:54:54Z", "number_observed": 1, "object_refs": [ "url--57b5a20e-37d8-4b68-b86c-43c9950d210f" ], "labels": [ "misp:type=\"link\"", "misp:category=\"External analysis\"" ] }, { "type": "url", "spec_version": "2.1", "id": "url--57b5a20e-37d8-4b68-b86c-43c9950d210f", "value": "http://pastebin.com/zKLxFwap" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a281-3924-4dd0-9c1b-46e2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:49.000Z", "modified": "2016-08-18T11:56:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ipecho.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a281-6474-4912-88fa-40fe950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:49.000Z", "modified": "2016-08-18T11:56:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'wtfismyip.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a281-31b8-47ca-a6cb-4fb8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:49.000Z", "modified": "2016-08-18T11:56:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'siasibisaat.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a281-d528-49c6-a826-498d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:49.000Z", "modified": "2016-08-18T11:56:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'gnhdd.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a281-ef3c-4b5c-b744-494f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:49.000Z", "modified": "2016-08-18T11:56:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'myexternalip.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a282-cd28-4105-9243-4036950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:50.000Z", "modified": "2016-08-18T11:56:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'esuhu.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a282-1360-4713-88f7-4b0f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:50.000Z", "modified": "2016-08-18T11:56:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'iruvi.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a282-027c-41b9-b6ca-417a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:50.000Z", "modified": "2016-08-18T11:56:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'yginec.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a282-2810-4bb3-b245-479d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:50.000Z", "modified": "2016-08-18T11:56:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ejivi.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a283-91b0-4859-b00c-42aa950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:51.000Z", "modified": "2016-08-18T11:56:51.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'awxgyqgf.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a283-2090-4fbc-9ddf-4653950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:51.000Z", "modified": "2016-08-18T11:56:51.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'pnako.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a283-ddac-4904-afd0-4e0f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:51.000Z", "modified": "2016-08-18T11:56:51.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ilefin.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a283-fc70-48b5-907c-4185950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:51.000Z", "modified": "2016-08-18T11:56:51.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'etimykul.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a284-f618-4e84-bc9f-4db8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:52.000Z", "modified": "2016-08-18T11:56:52.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ilbj.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a284-996c-4d83-b61d-44db950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:52.000Z", "modified": "2016-08-18T11:56:52.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'pposugasus.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a284-1014-4915-ba14-430b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:52.000Z", "modified": "2016-08-18T11:56:52.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ijofexat.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a284-2fe0-416a-8cf9-4e45950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:52.000Z", "modified": "2016-08-18T11:56:52.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ufylozok.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a284-a2a8-4999-8b86-4c75950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:52.000Z", "modified": "2016-08-18T11:56:52.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ezjpi.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a285-1494-4ad9-a23e-43e7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:53.000Z", "modified": "2016-08-18T11:56:53.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'uhagenyr.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a285-cf7c-4af1-83dd-4e85950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:53.000Z", "modified": "2016-08-18T11:56:53.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'apibyrr.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a285-da30-40d0-be8b-44aa950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:53.000Z", "modified": "2016-08-18T11:56:53.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'adsp.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a285-11b4-4813-8f48-41f2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:53.000Z", "modified": "2016-08-18T11:56:53.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ocuri.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a286-1a7c-4442-ae35-4434950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:54.000Z", "modified": "2016-08-18T11:56:54.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'uxk.aglbillspayment.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a286-1ce8-40d5-9756-463d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:54.000Z", "modified": "2016-08-18T11:56:54.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'yhykoxm.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a286-d734-4f1d-ad2f-4957950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:54.000Z", "modified": "2016-08-18T11:56:54.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'uxev.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a286-d5a8-4d2f-acf9-43e8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:54.000Z", "modified": "2016-08-18T11:56:54.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'yvksega.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a286-6aac-44e0-ae30-4f5e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:54.000Z", "modified": "2016-08-18T11:56:54.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'pkozi.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a287-85f4-4377-aa4e-4530950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:55.000Z", "modified": "2016-08-18T11:56:55.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ocubuloqi.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a287-30b4-4dbe-b1f5-4b51950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:55.000Z", "modified": "2016-08-18T11:56:55.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ttzkndjkex.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a287-9b24-4cf6-a304-4534950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:55.000Z", "modified": "2016-08-18T11:56:55.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'udivecvti.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a287-6c2c-4466-943e-4466950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:55.000Z", "modified": "2016-08-18T11:56:55.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ulebar.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a287-8ab0-4b2c-ab57-4875950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:55.000Z", "modified": "2016-08-18T11:56:55.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'orujyfijy.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a288-6014-40ce-9917-496b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:56.000Z", "modified": "2016-08-18T11:56:56.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'xbocywhjosi.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a288-1afc-4671-8739-465f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:56.000Z", "modified": "2016-08-18T11:56:56.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'vize.aglbillspayment.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a288-5e48-4fdf-961e-412f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:56.000Z", "modified": "2016-08-18T11:56:56.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ariboguvu.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a288-3294-4728-8f60-4b01950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:56.000Z", "modified": "2016-08-18T11:56:56.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'uxoc.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a289-01f0-417e-8fb2-4bce950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:57.000Z", "modified": "2016-08-18T11:56:57.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'etfz.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a289-a2ec-4dc8-bc2a-49f2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:57.000Z", "modified": "2016-08-18T11:56:57.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ubejy.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a289-a5ec-4171-8ce8-410a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:57.000Z", "modified": "2016-08-18T11:56:57.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ohaxwnunav.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a289-39a8-40eb-872b-49a6950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:57.000Z", "modified": "2016-08-18T11:56:57.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'otizureqorv.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a289-58b4-47d0-a698-4e6f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:57.000Z", "modified": "2016-08-18T11:56:57.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'yjedybupo.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28a-2210-45de-b06f-4e23950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:58.000Z", "modified": "2016-08-18T11:56:58.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ehhta.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28a-f8d0-4363-8d93-4492950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:58.000Z", "modified": "2016-08-18T11:56:58.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'unyvafeda.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28a-294c-462e-b0c4-4129950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:58.000Z", "modified": "2016-08-18T11:56:58.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'unyboqexu.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28a-0638-4b13-b92e-4253950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:58.000Z", "modified": "2016-08-18T11:56:58.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'addcawuq.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28b-2420-4470-8783-4b69950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:59.000Z", "modified": "2016-08-18T11:56:59.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'amymofop.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28b-d2dc-427a-bc84-4051950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:59.000Z", "modified": "2016-08-18T11:56:59.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ygupyfogyry.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28b-011c-4962-a47b-4e24950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:59.000Z", "modified": "2016-08-18T11:56:59.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'qpedy.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28b-1708-40c7-ad43-4141950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:59.000Z", "modified": "2016-08-18T11:56:59.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ovibyfice.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28b-3360-4d1e-8872-4422950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:56:59.000Z", "modified": "2016-08-18T11:56:59.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'apaxo.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:56:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28c-ff1c-46fd-b867-4fea950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:00.000Z", "modified": "2016-08-18T11:57:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'yvuvev.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28c-e2e4-4f2a-947c-4a58950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:00.000Z", "modified": "2016-08-18T11:57:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'odypu.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28c-8e50-45f3-ab1b-4afd950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:00.000Z", "modified": "2016-08-18T11:57:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ygisogyzoto.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28c-3498-44d9-8bc6-495b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:00.000Z", "modified": "2016-08-18T11:57:00.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'iqehisorw.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28d-2d78-4285-9dda-4d54950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:01.000Z", "modified": "2016-08-18T11:57:01.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[domain-name:value = 'ejepajodat.kadhyzyi.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28d-905c-44f9-9402-4266950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:01.000Z", "modified": "2016-08-18T11:57:01.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28d-08f0-4a7b-a2ac-45d2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:01.000Z", "modified": "2016-08-18T11:57:01.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28d-e9b4-4164-b7be-4835950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:01.000Z", "modified": "2016-08-18T11:57:01.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28d-840c-4937-85cf-415a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:01.000Z", "modified": "2016-08-18T11:57:01.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28e-00fc-487e-b859-4f5c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:02.000Z", "modified": "2016-08-18T11:57:02.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28e-46c8-48fb-92e4-4198950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:02.000Z", "modified": "2016-08-18T11:57:02.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28e-5d64-4004-938e-4d60950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:02.000Z", "modified": "2016-08-18T11:57:02.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28e-8358-4771-8407-4833950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:02.000Z", "modified": "2016-08-18T11:57:02.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28e-1f60-4a6a-b810-4ba7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:02.000Z", "modified": "2016-08-18T11:57:02.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28f-0c38-4c65-a13e-49c0950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:03.000Z", "modified": "2016-08-18T11:57:03.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28f-c7b0-401f-8107-46d8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:03.000Z", "modified": "2016-08-18T11:57:03.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '85.143.210.188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28f-ede0-4509-9d20-4cae950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:03.000Z", "modified": "2016-08-18T11:57:03.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28f-7130-47be-9bfd-4e41950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:03.000Z", "modified": "2016-08-18T11:57:03.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a28f-3bc4-456e-bd16-470c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:03.000Z", "modified": "2016-08-18T11:57:03.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a290-15dc-4ccd-a7c2-4728950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:04.000Z", "modified": "2016-08-18T11:57:04.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a290-3df8-40a1-bb44-4975950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:04.000Z", "modified": "2016-08-18T11:57:04.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a290-d8e4-4dcf-8782-450c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:04.000Z", "modified": "2016-08-18T11:57:04.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a290-06dc-4c05-a5cf-4594950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:04.000Z", "modified": "2016-08-18T11:57:04.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a290-caf0-43b0-8f83-4670950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:04.000Z", "modified": "2016-08-18T11:57:04.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '107.180.41.89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a291-0348-4f52-907c-4f7f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:05.000Z", "modified": "2016-08-18T11:57:05.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a291-f5ec-4a0c-9872-46f7950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:05.000Z", "modified": "2016-08-18T11:57:05.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a291-f628-4ceb-a80d-488a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:05.000Z", "modified": "2016-08-18T11:57:05.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a291-404c-4d08-badc-4041950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:05.000Z", "modified": "2016-08-18T11:57:05.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a292-34ac-4314-b80f-4d1d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:06.000Z", "modified": "2016-08-18T11:57:06.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a292-4bac-49a8-bb45-43c6950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:06.000Z", "modified": "2016-08-18T11:57:06.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a292-e1a8-4009-873c-465e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:06.000Z", "modified": "2016-08-18T11:57:06.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a292-6d34-4c4f-99ea-4758950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:06.000Z", "modified": "2016-08-18T11:57:06.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a293-1aa0-402d-9035-473e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:07.000Z", "modified": "2016-08-18T11:57:07.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a293-0f64-4f3b-828c-4ce1950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:07.000Z", "modified": "2016-08-18T11:57:07.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a293-dc18-42f8-b532-458d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:07.000Z", "modified": "2016-08-18T11:57:07.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a293-669c-47d6-b85f-4a51950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:07.000Z", "modified": "2016-08-18T11:57:07.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a293-5248-4f55-9e34-4b87950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:07.000Z", "modified": "2016-08-18T11:57:07.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a294-920c-434d-908a-48b0950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:08.000Z", "modified": "2016-08-18T11:57:08.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a294-0b8c-4796-be50-4bf2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:08.000Z", "modified": "2016-08-18T11:57:08.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a294-3f18-4492-87b5-4fb3950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:08.000Z", "modified": "2016-08-18T11:57:08.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a294-6d48-4015-bc89-4350950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:08.000Z", "modified": "2016-08-18T11:57:08.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a295-f2b8-4f42-890a-4517950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:09.000Z", "modified": "2016-08-18T11:57:09.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a295-54e0-40f7-b9fe-4d4f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:09.000Z", "modified": "2016-08-18T11:57:09.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a295-ef20-4db4-b837-4ca8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:09.000Z", "modified": "2016-08-18T11:57:09.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a295-e57c-4273-8ced-4c95950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:09.000Z", "modified": "2016-08-18T11:57:09.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a295-de38-4882-bbce-4124950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:09.000Z", "modified": "2016-08-18T11:57:09.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a296-0608-437c-917f-4c35950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:10.000Z", "modified": "2016-08-18T11:57:10.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a296-0350-43db-b130-4e6b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:10.000Z", "modified": "2016-08-18T11:57:10.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a296-984c-467c-ab26-42cd950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:10.000Z", "modified": "2016-08-18T11:57:10.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a296-dd34-4950-bf1a-4708950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:10.000Z", "modified": "2016-08-18T11:57:10.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a2bc-baec-4fe0-b4ad-4d2b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:48.000Z", "modified": "2016-08-18T11:57:48.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a2bc-998c-4e69-92a3-4c14950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:48.000Z", "modified": "2016-08-18T11:57:48.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a2bd-d404-4a8f-9060-4659950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:49.000Z", "modified": "2016-08-18T11:57:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a2bd-1040-47ce-9366-48d3950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:49.000Z", "modified": "2016-08-18T11:57:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a2bd-d8bc-4a52-9439-4f8a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:49.000Z", "modified": "2016-08-18T11:57:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a2bd-1c9c-47f2-b1ab-4264950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:49.000Z", "modified": "2016-08-18T11:57:49.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a2be-7ef4-4504-8ccb-414a950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:50.000Z", "modified": "2016-08-18T11:57:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a2be-d5b0-450c-8125-4efa950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:50.000Z", "modified": "2016-08-18T11:57:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a2be-b634-43fe-8819-4cdf950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:50.000Z", "modified": "2016-08-18T11:57:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '199.16.199.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a2be-eca8-4968-8d85-44f8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:50.000Z", "modified": "2016-08-18T11:57:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[url:value = 'http://vize.aglbillspayment.com/znlr.php']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a2be-0218-4e7b-b6bd-4ba8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:50.000Z", "modified": "2016-08-18T11:57:50.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[url:value = 'http://gnhdd.com/templates/file.exe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a2bf-0c18-44c3-b86a-46bd950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:51.000Z", "modified": "2016-08-18T11:57:51.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[url:value = 'http://uxk.aglbillspayment.com/s0zv58oz.php']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57b5a2bf-b48c-4d4c-8ab0-4ecd950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T11:57:51.000Z", "modified": "2016-08-18T11:57:51.000Z", "description": "Imported via the Freetext Import Tool", "pattern": "[url:value = 'http://siasibisaat.com/TF4eGc2D0uil/fENDAKSItWp5Xn7a.php']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-18T11:57:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } } ] }