{
    "type": "bundle",
    "id": "bundle--57db9e5a-8178-469b-8e29-4e5d950d210f",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:55.000Z",
            "modified": "2016-09-16T07:25:55.000Z",
            "name": "CIRCL",
            "identity_class": "organization"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--57db9e5a-8178-469b-8e29-4e5d950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:55.000Z",
            "modified": "2016-09-16T07:25:55.000Z",
            "name": "Malspam 2016-09-15 (.js in .zip) - campagin: \"Booking confirmation\"",
            "published": "2016-09-16T07:26:36Z",
            "object_refs": [
                "indicator--57db9e7d-bde4-4e26-a67e-4899950d210f",
                "indicator--57db9e7e-4a10-4033-aa6a-4600950d210f",
                "indicator--57db9e7e-f814-4f8c-83cd-465e950d210f",
                "indicator--57db9e7f-db94-4ca5-afee-495d950d210f",
                "indicator--57db9e7f-d804-4e83-951c-43e2950d210f",
                "indicator--57db9e80-c054-419f-ae8e-4edc950d210f",
                "indicator--57db9e80-d9a4-4959-a2f4-44e4950d210f",
                "indicator--57db9e80-4e38-4d28-be3d-46c9950d210f",
                "indicator--57db9e81-347c-4c0f-840e-4dc6950d210f",
                "indicator--57db9e81-b338-4ab6-93a1-49d6950d210f",
                "indicator--57db9e81-86dc-42ea-9bfa-4861950d210f",
                "indicator--57db9e82-42e0-4806-96dd-4b43950d210f",
                "indicator--57db9e82-dd50-4663-94d4-452f950d210f",
                "indicator--57db9e82-2730-4d3d-80de-441d950d210f",
                "indicator--57db9e82-78a0-4290-9c61-4a11950d210f",
                "indicator--57db9e82-dbd8-4b59-a9d5-4ae4950d210f",
                "indicator--57db9e83-6bb8-400d-9e66-47eb950d210f",
                "indicator--57db9e83-92f0-42ff-9ebf-450c950d210f",
                "indicator--57db9e83-f6b0-4da7-b4b3-4879950d210f",
                "indicator--57db9e83-ba08-4010-aae8-4f48950d210f"
            ],
            "labels": [
                "Threat-Report",
                "misp:tool=\"MISP-STIX-Converter\"",
                "circl:incident-classification=\"malware\""
            ],
            "object_marking_refs": [
                "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e7d-bde4-4e26-a67e-4899950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:49.000Z",
            "modified": "2016-09-16T07:25:49.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.212.131.10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e7e-4a10-4033-aa6a-4600950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:50.000Z",
            "modified": "2016-09-16T07:25:50.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '37.200.70.6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e7e-f814-4f8c-83cd-465e950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:50.000Z",
            "modified": "2016-09-16T07:25:50.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'gobantakao.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e7f-db94-4ca5-afee-495d950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:51.000Z",
            "modified": "2016-09-16T07:25:51.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://gobantakao.com/0a64s']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e7f-d804-4e83-951c-43e2950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:51.000Z",
            "modified": "2016-09-16T07:25:51.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://gobantakao.com/3qm01xeb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e80-c054-419f-ae8e-4edc950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:52.000Z",
            "modified": "2016-09-16T07:25:52.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://gobantakao.com/8vdtrq']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e80-d9a4-4959-a2f4-44e4950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:52.000Z",
            "modified": "2016-09-16T07:25:52.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://gobantakao.com/m15l0gez']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e80-4e38-4d28-be3d-46c9950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:52.000Z",
            "modified": "2016-09-16T07:25:52.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://gobantakao.com/q6csqde']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e81-347c-4c0f-840e-4dc6950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:53.000Z",
            "modified": "2016-09-16T07:25:53.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://ponggirr.net/3k3wyjp']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e81-b338-4ab6-93a1-49d6950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:53.000Z",
            "modified": "2016-09-16T07:25:53.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://ponggirr.net/ccbbcu']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e81-86dc-42ea-9bfa-4861950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:53.000Z",
            "modified": "2016-09-16T07:25:53.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://ponggirr.net/erowakv']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e82-42e0-4806-96dd-4b43950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:54.000Z",
            "modified": "2016-09-16T07:25:54.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://ponggirr.net/hbx7xs4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e82-dd50-4663-94d4-452f950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:54.000Z",
            "modified": "2016-09-16T07:25:54.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://ponggirr.net/qs060j5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e82-2730-4d3d-80de-441d950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:54.000Z",
            "modified": "2016-09-16T07:25:54.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://satyrwelf.net/0ygdf9nf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e82-78a0-4290-9c61-4a11950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:54.000Z",
            "modified": "2016-09-16T07:25:54.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://satyrwelf.net/27d4l09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e82-dbd8-4b59-a9d5-4ae4950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:54.000Z",
            "modified": "2016-09-16T07:25:54.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://satyrwelf.net/96cbdy']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e83-6bb8-400d-9e66-47eb950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:55.000Z",
            "modified": "2016-09-16T07:25:55.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://satyrwelf.net/igle880a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e83-92f0-42ff-9ebf-450c950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:55.000Z",
            "modified": "2016-09-16T07:25:55.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://satyrwelf.net/k9nz8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e83-f6b0-4da7-b4b3-4879950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:55.000Z",
            "modified": "2016-09-16T07:25:55.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'ponggirr.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57db9e83-ba08-4010-aae8-4f48950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-16T07:25:55.000Z",
            "modified": "2016-09-16T07:25:55.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'satyrwelf.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-16T07:25:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "marking-definition",
            "spec_version": "2.1",
            "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
            "created": "2017-01-20T00:00:00.000Z",
            "definition_type": "tlp",
            "name": "TLP:WHITE",
            "definition": {
                "tlp": "white"
            }
        }
    ]
}