{ "type": "bundle", "id": "bundle--57b5a522-573c-48d1-83e4-46bf950d210f", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:50.000Z", "modified": "2017-06-22T20:09:50.000Z", "name": "CthulhuSPRL.be", "identity_class": "organization" }, { "type": "report", "spec_version": "2.1", "id": "report--57b5a522-573c-48d1-83e4-46bf950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:50.000Z", "modified": "2017-06-22T20:09:50.000Z", "name": "Pivot on whois registrant 844148030@qq.com", "published": "2017-06-22T20:11:37Z", "object_refs": [ "x-misp-attribute--57b5a53e-6e8c-42eb-96b3-4837950d210f", "observed-data--57b5a5d9-37dc-4df6-ba11-4ddf950d210f", "url--57b5a5d9-37dc-4df6-ba11-4ddf950d210f", "indicator--594c23f9-0ddc-45e4-ac8f-4a53950d210f", "indicator--594c23f9-88d0-44fd-9c72-4fd6950d210f", "indicator--594c23f9-840c-4476-a250-4763950d210f", "indicator--594c23f9-6290-4493-8052-469f950d210f", "indicator--594c23f9-235c-4c48-bae3-49ac950d210f", "indicator--594c23f9-2648-4bcb-920f-4a25950d210f", "indicator--594c23f9-8910-4222-8c1e-432e950d210f", "indicator--594c23f9-5d48-4c87-a79a-467e950d210f", "indicator--594c23f9-ec90-4dad-81ed-489c950d210f", "indicator--594c23f9-6d5c-4746-bce8-4b5d950d210f", "indicator--594c23f9-8ac0-4338-ad2a-4442950d210f", "indicator--594c23fa-db78-4284-a06a-4b75950d210f", "indicator--594c23fa-3adc-4401-83db-44ad950d210f", "indicator--594c23fa-e328-4378-af99-4aee950d210f", "indicator--594c23fa-2210-4ae8-acad-4fb0950d210f", "indicator--594c23fa-b314-41ad-bb1e-4352950d210f", "indicator--594c23fa-c014-4dbb-83b3-4f80950d210f", "indicator--594c23fa-ccdc-4062-b1bd-4a3d950d210f", "indicator--594c23fa-cb94-44d1-8e43-40bc950d210f", "indicator--594c23fa-b95c-4d47-829f-4c66950d210f", "indicator--594c23fa-a750-4233-b930-41b5950d210f", "indicator--594c23fa-118c-4c96-962a-4a45950d210f", "indicator--594c23fa-6548-4f03-95d4-4eeb950d210f", "indicator--594c23fa-1364-4700-9e11-4210950d210f", "indicator--594c23fa-1520-4550-9b21-4c50950d210f", "indicator--594c23fa-b870-4d17-82f1-4552950d210f", "indicator--594c23fa-4e54-49a6-9197-4200950d210f", "indicator--594c23fa-f58c-423d-9bc2-421d950d210f", "indicator--594c23fa-a614-4f76-8538-4385950d210f", "indicator--594c23fa-1cd4-4f5d-9c11-4da8950d210f", "indicator--594c23fa-10cc-43fe-9d5a-4367950d210f", "indicator--594c23fa-d204-46cb-b010-4b30950d210f", "indicator--594c23fa-25c0-4f29-bba3-4566950d210f", "indicator--594c23fa-0de0-41d6-9eef-4915950d210f", "indicator--594c23fa-2a08-4f30-9526-41ce950d210f", "indicator--594c23fa-032c-49f9-991b-4f5d950d210f", "indicator--594c23fa-5cf8-4bda-880b-44f8950d210f", "indicator--594c23fa-0dc8-49f1-8d50-49da950d210f", "indicator--594c23fa-820c-4720-9697-4b90950d210f", "indicator--594c23fa-dca4-4a6a-8ab9-4873950d210f", "indicator--594c23fa-2200-466e-8919-4368950d210f", "indicator--594c23fa-ccc4-4aea-891c-4f1d950d210f", "indicator--594c23fa-fc18-4342-9f67-4428950d210f", "indicator--594c23fa-9394-4544-8cae-45d3950d210f", "indicator--594c23fa-d32c-4f88-ba30-4707950d210f", "indicator--594c23fa-8024-491f-85ff-43d8950d210f", "indicator--594c23fa-4e2c-4a1f-b326-4dfd950d210f", "indicator--594c23fa-aa88-4ad6-95c6-4d0f950d210f", "indicator--594c23fa-d2e8-4c37-95e2-430b950d210f", "indicator--594c23fa-a2f8-4b8b-9edb-43fb950d210f", "indicator--594c23fa-f4cc-4012-bafe-41e0950d210f", "indicator--594c23fa-c45c-4cdf-abeb-4c4f950d210f", "indicator--594c23fa-88fc-461d-8a84-4398950d210f", "indicator--594c23fa-4724-4269-bccb-408c950d210f", "indicator--594c23fa-daf0-46a5-9400-45a1950d210f", "indicator--594c23fa-88ac-4361-a4fe-40a2950d210f", "indicator--594c23fa-3ba4-40b2-8d87-459b950d210f", "indicator--594c23fa-12e4-4564-96a9-4e4b950d210f", "indicator--594c23fa-23e0-4017-be65-4465950d210f", "indicator--594c23fa-3338-4a9c-837f-4663950d210f", "indicator--594c23fa-ee04-42c5-977e-4380950d210f", "indicator--594c23fa-77e0-44e6-b042-44f2950d210f", "indicator--594c23fa-0420-4eda-8ee9-4c96950d210f", "indicator--594c23fa-7e1c-4ced-8217-4925950d210f", "indicator--594c23fa-f968-49a3-9cd1-4a63950d210f" ], "labels": [ "Threat-Report", "misp:tool=\"MISP-STIX-Converter\"" ], "object_marking_refs": [ "marking-definition--34098fce-860f-48ae-8e50-ebd3cc5e41da" ] }, { "type": "x-misp-attribute", "spec_version": "2.1", "id": "x-misp-attribute--57b5a53e-6e8c-42eb-96b3-4837950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T12:08:30.000Z", "modified": "2016-08-18T12:08:30.000Z", "labels": [ "misp:type=\"whois-registrant-email\"", "misp:category=\"Attribution\"" ], "x_misp_category": "Attribution", "x_misp_type": "whois-registrant-email", "x_misp_value": "844148030@qq.com" }, { "type": "observed-data", "spec_version": "2.1", "id": "observed-data--57b5a5d9-37dc-4df6-ba11-4ddf950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2016-08-18T12:11:05.000Z", "modified": "2016-08-18T12:11:05.000Z", "first_observed": "2016-08-18T12:11:05Z", "last_observed": "2016-08-18T12:11:05Z", "number_observed": 1, "object_refs": [ "url--57b5a5d9-37dc-4df6-ba11-4ddf950d210f" ], "labels": [ "misp:type=\"link\"", "misp:category=\"External analysis\"" ] }, { "type": "url", "spec_version": "2.1", "id": "url--57b5a5d9-37dc-4df6-ba11-4ddf950d210f", "value": "https://reversewhois.domaintools.com/?refine#q=[[[%22email%22%2C%220%22%2C%22844148030%40qq.com%22]]]&historical=1" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23f9-0ddc-45e4-ac8f-4a53950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:29.000Z", "modified": "2017-06-22T20:09:29.000Z", "pattern": "[domain-name:value = '6b6p.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23f9-88d0-44fd-9c72-4fd6950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:29.000Z", "modified": "2017-06-22T20:09:29.000Z", "pattern": "[domain-name:value = '7b7p.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23f9-840c-4476-a250-4763950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:29.000Z", "modified": "2017-06-22T20:09:29.000Z", "pattern": "[domain-name:value = '7b7p.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23f9-6290-4493-8052-469f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:29.000Z", "modified": "2017-06-22T20:09:29.000Z", "pattern": "[domain-name:value = '9b9p.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23f9-235c-4c48-bae3-49ac950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:29.000Z", "modified": "2017-06-22T20:09:29.000Z", "pattern": "[domain-name:value = '9b9p.tel']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23f9-2648-4bcb-920f-4a25950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:29.000Z", "modified": "2017-06-22T20:09:29.000Z", "pattern": "[domain-name:value = 'b9p.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23f9-8910-4222-8c1e-432e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:29.000Z", "modified": "2017-06-22T20:09:29.000Z", "pattern": "[domain-name:value = 'chaccc.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23f9-5d48-4c87-a79a-467e950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:29.000Z", "modified": "2017-06-22T20:09:29.000Z", "pattern": "[domain-name:value = 'chmmm.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23f9-ec90-4dad-81ed-489c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:29.000Z", "modified": "2017-06-22T20:09:29.000Z", "pattern": "[domain-name:value = 'gaobb.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23f9-6d5c-4746-bce8-4b5d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:29.000Z", "modified": "2017-06-22T20:09:29.000Z", "pattern": "[domain-name:value = 'gaomm.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23f9-8ac0-4338-ad2a-4442950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:29.000Z", "modified": "2017-06-22T20:09:29.000Z", "pattern": "[domain-name:value = 'hshs995.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-db78-4284-a06a-4b75950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'kanhuangse.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-3adc-4401-83db-44ad950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'mmm666.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-e328-4378-af99-4aee950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb11.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-2210-4ae8-acad-4fb0950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb12.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-b314-41ad-bb1e-4352950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb13.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-c014-4dbb-83b3-4f80950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb14.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-ccdc-4062-b1bd-4a3d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb15.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-cb94-44d1-8e43-40bc950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb16.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-b95c-4d47-829f-4c66950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb17.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-a750-4233-b930-41b5950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb18.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-118c-4c96-962a-4a45950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb19.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-6548-4f03-95d4-4eeb950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb20.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-1364-4700-9e11-4210950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb21.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-1520-4550-9b21-4c50950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb22.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-b870-4d17-82f1-4552950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb23.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-4e54-49a6-9197-4200950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb24.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-f58c-423d-9bc2-421d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb25.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-a614-4f76-8538-4385950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb27.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-1cd4-4f5d-9c11-4da8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb28.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-10cc-43fe-9d5a-4367950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb30.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-d204-46cb-b010-4b30950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb31.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-25c0-4f29-bba3-4566950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb32.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-0de0-41d6-9eef-4915950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb33.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-2a08-4f30-9526-41ce950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb34.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-032c-49f9-991b-4f5d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb35.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-5cf8-4bda-880b-44f8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb36.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-0dc8-49f1-8d50-49da950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb37.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-820c-4720-9697-4b90950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb38.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-dca4-4a6a-8ab9-4873950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb39.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-2200-466e-8919-4368950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb40.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-ccc4-4aea-891c-4f1d950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb41.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-fc18-4342-9f67-4428950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb42.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-9394-4544-8cae-45d3950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb43.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-d32c-4f88-ba30-4707950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb44.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-8024-491f-85ff-43d8950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb45.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-4e2c-4a1f-b326-4dfd950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb46.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-aa88-4ad6-95c6-4d0f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb47.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-d2e8-4c37-95e2-430b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb48.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-a2f8-4b8b-9edb-43fb950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb49.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-f4cc-4012-bafe-41e0950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb50.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-c45c-4cdf-abeb-4c4f950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb52.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-88fc-461d-8a84-4398950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb54.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-4724-4269-bccb-408c950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'sebbb56.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-daf0-46a5-9400-45a1950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'yaobb.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-88ac-4361-a4fe-40a2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'yaoeee.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-3ba4-40b2-8d87-459b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'yaokanb.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-12e4-4564-96a9-4e4b950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'yaokanhp.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-23e0-4017-be65-4465950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'yaokk.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-3338-4a9c-837f-4663950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'yaomm.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-ee04-42c5-977e-4380950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'yaopp.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-77e0-44e6-b042-44f2950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'yaoqqq.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-0420-4eda-8ee9-4c96950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'yaorrr.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-7e1c-4ced-8217-4925950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'yaowww.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--594c23fa-f968-49a3-9cd1-4a63950d210f", "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f", "created": "2017-06-22T20:09:30.000Z", "modified": "2017-06-22T20:09:30.000Z", "pattern": "[domain-name:value = 'yaoxx.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2017-06-22T20:09:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--34098fce-860f-48ae-8e50-ebd3cc5e41da", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:GREEN", "definition": { "tlp": "green" } } ] }