{ "Event": { "analysis": "2", "date": "2018-05-24", "extends_uuid": "", "info": "Hancitor", "publish_timestamp": "1527262681", "published": true, "threat_level_id": "3", "timestamp": "1527262642", "uuid": "5b06e5c0-0038-48bf-ae71-c25d0acd0835", "Orgc": { "name": "Synovus Financial", "uuid": "5a68c02d-959c-4c8a-a571-0dcac0a8060a" }, "Tag": [ { "colour": "#0c9200", "name": "misp-galaxy:tool=\"Hancitor\"" } ], "Attribute": [ { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178696", "to_ids": true, "type": "url", "uuid": "b89884af-2260-4787-bdea-c00cb1b30d0a", "value": "http://torsjogeca.com/4/forum.php" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178702", "to_ids": true, "type": "url", "uuid": "fddb6853-4ac0-4dc0-8f65-0e3f3eeb5d04", "value": "http://dotorsfito.ru/4/forum.php" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178708", "to_ids": true, "type": "url", "uuid": "2941d464-5521-4f56-9789-65f163182510", "value": "http://hisbutterof.ru/4/forum.php" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178715", "to_ids": true, "type": "url", "uuid": "b7131687-7fd8-4cf0-b815-93196be0a4aa", "value": "http://orgasmosfemeninos.net/wp-content/plugins/post-types-order/include/1" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178721", "to_ids": true, "type": "url", "uuid": "f3d0a00f-c25d-4781-adc8-e7fddc56ddb7", "value": "http://happyellaafter.com/wp-content/plugins/regenerate-thumbnails/includes/1" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178728", "to_ids": true, "type": "url", "uuid": "a9d6baee-d26c-47f5-8a3a-2315c28fe4b8", "value": "http://lauragordonblog.com/wp-content/plugins/html404/1" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178734", "to_ids": true, "type": "url", "uuid": "7e554802-4193-4f66-b99b-a2bf59869cad", "value": "http://grehu.net/wp-content/plugins/easy-tables-vc/lib/1" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178741", "to_ids": true, "type": "url", "uuid": "ff97e354-d209-4610-bd03-04bf8739b00b", "value": "http://www.panageries.com/includes/1" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178747", "to_ids": true, "type": "url", "uuid": "5f1a90bb-8b1c-4d10-b130-12948da06a4a", "value": "http://orgasmosfemeninos.net/wp-content/plugins/post-types-order/include/2" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178753", "to_ids": true, "type": "url", "uuid": "b6890763-660b-434f-b3b2-52748dd60efd", "value": "http://happyellaafter.com/wp-content/plugins/regenerate-thumbnails/includes/2" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178759", "to_ids": true, "type": "url", "uuid": "f81d8cb1-7ac8-43f6-8359-a940d702cdff", "value": "http://lauragordonblog.com/wp-content/plugins/html404/2" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178765", "to_ids": true, "type": "url", "uuid": "7bd8e71c-b532-4d5b-854a-4c5e2ac5bd4e", "value": "http://grehu.net/wp-content/plugins/easy-tables-vc/lib/2" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178771", "to_ids": true, "type": "url", "uuid": "8432b814-11b5-44f0-95bc-fb1ed5df59d7", "value": "http://www.panageries.com/includes/2" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178778", "to_ids": true, "type": "url", "uuid": "679997d7-505e-4dbd-a1da-d81c1e923afe", "value": "http://orgasmosfemeninos.net/wp-content/plugins/post-types-order/include/3" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178784", "to_ids": true, "type": "url", "uuid": "8aaf5844-fa29-4e63-a84d-28b09384a14f", "value": "http://happyellaafter.com/wp-content/plugins/regenerate-thumbnails/includes/3" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178790", "to_ids": true, "type": "url", "uuid": "15d46602-c607-4424-b1c0-135e1a250211", "value": "http://lauragordonblog.com/wp-content/plugins/html404/3" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178796", "to_ids": true, "type": "url", "uuid": "0cceee29-571c-4193-b3ec-bc0ee63c3a06", "value": "http://grehu.net/wp-content/plugins/easy-tables-vc/lib/3" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178802", "to_ids": true, "type": "url", "uuid": "484db206-3288-42c6-804c-c6849f84da39", "value": "http://www.panageries.com/includes/3" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178808", "to_ids": true, "type": "url", "uuid": "bc0aa1ec-5d40-4d00-855e-2eeefa27ea54", "value": "http://torsjogeca.com/mlu/forum.php" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178814", "to_ids": true, "type": "url", "uuid": "d169e6c6-a363-4f5b-a5d4-e58cb65ef524", "value": "http://dotorsfito.ru/mlu/forum.php" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178820", "to_ids": true, "type": "url", "uuid": "be133cb8-8032-4215-beed-dc5a2b28560e", "value": "http://hisbutterof.ru/mlu/forum.php" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178826", "to_ids": true, "type": "url", "uuid": "5f9d6c63-14b9-4c4d-ac41-24f579645f64", "value": "https://robwassotdint.ru/1kewoimzatybewoliowof.dat" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178832", "to_ids": true, "type": "url", "uuid": "3f1d342d-0206-431f-8d09-a5b3ddc9dbf4", "value": "https://robwassotdint.ru/68webinjects.dat" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178838", "to_ids": true, "type": "url", "uuid": "4882aa6b-30e3-488c-9d62-66be7b842879", "value": "https://robwassotdint.ru/1kewoimzatybewoliowof.exe" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178844", "to_ids": true, "type": "url", "uuid": "21adf312-01c9-473e-922a-d3e4454ae3f1", "value": "https://robwassotdint.ru/68webinject32.bin" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178850", "to_ids": true, "type": "url", "uuid": "a0cea779-f1db-4ec4-9b9c-ed93b2565508", "value": "https://robwassotdint.ru/68webinject64.bin" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178856", "to_ids": true, "type": "url", "uuid": "d9da86af-ee7e-4ae0-8705-25d2bac3deee", "value": "https://robwassotdint.ru/68vnc32.bin" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178862", "to_ids": true, "type": "url", "uuid": "55039210-99c1-4154-884f-986314d5e514", "value": "https://robwassotdint.ru/68vnc64.bin" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178868", "to_ids": true, "type": "url", "uuid": "2e1f0373-97e4-45cf-84c7-f0690a41a2b9", "value": "https://robwassotdint.ru/68backsocks.bin" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178874", "to_ids": true, "type": "url", "uuid": "2812c15a-26d8-49b0-bdd7-eda97224028c", "value": "https://robwassotdint.ru/68grabber.bin" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527178880", "to_ids": true, "type": "url", "uuid": "28a5529f-50b0-464f-bc67-4c9200828047", "value": "https://robwassotdint.ru/68keylogger.bin" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527179023", "to_ids": true, "type": "url", "uuid": "ecd43bac-1205-4e18-a9fb-90b4ee06f20b", "value": "https://robwassotdint.ru/1kewoimzatybewoliowof.dat"" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527179029", "to_ids": true, "type": "url", "uuid": "bbbbef7b-0f3f-4845-9e97-ce6f0c70828f", "value": "https://robwassotdint.ru/68webinjects.dat"" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527179035", "to_ids": true, "type": "url", "uuid": "7327eee9-8d9c-4260-b743-260e84cf4411", "value": "https://robwassotdint.ru/1kewoimzatybewoliowof.exe"" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527179042", "to_ids": true, "type": "url", "uuid": "21aa3867-cdf9-4212-b702-b19eff7876ea", "value": "https://robwassotdint.ru/68webinject32.bin"" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527179048", "to_ids": true, "type": "url", "uuid": "e43f8190-d71c-4157-862b-208d9cddd691", "value": "https://robwassotdint.ru/68webinject64.bin"" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527179054", "to_ids": true, "type": "url", "uuid": "838c1fca-df41-4b87-a325-c88e2826e3eb", "value": "https://robwassotdint.ru/68vnc32.bin"" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527179060", "to_ids": true, "type": "url", "uuid": "b1c399ab-8597-49b6-8430-816c468e9c63", "value": "https://robwassotdint.ru/68vnc64.bin"" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527179066", "to_ids": true, "type": "url", "uuid": "17ad50da-525b-4ea5-aaab-2b66e400d236", "value": "https://robwassotdint.ru/68backsocks.bin"" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527179073", "to_ids": true, "type": "url", "uuid": "35eef300-ab3e-4280-a43c-eb3ca852820f", "value": "https://robwassotdint.ru/68grabber.bin"" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1527179079", "to_ids": true, "type": "url", "uuid": "05e60f08-cf40-4304-8316-f08a2ef5d455", "value": "https://robwassotdint.ru/68keylogger.bin"" } ] } }