{ "Event": { "analysis": "2", "date": "2015-05-01", "extends_uuid": "", "info": "OSINT Introducing HATs: Highly Annoying Threats by BlueCoat", "publish_timestamp": "1430742900", "published": true, "threat_level_id": "3", "timestamp": "1430732207", "uuid": "55473cb9-db8c-416e-8b3c-ce99950d210b", "Orgc": { "name": "CthulhuSPRL.be", "uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f" }, "Tag": [ { "colour": "#004646", "local": "0", "name": "type:OSINT", "relationship_type": "" }, { "colour": "#ffffff", "local": "0", "name": "tlp:white", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1430731977", "to_ids": false, "type": "link", "uuid": "55473cc9-3c18-4689-9caa-ce99950d210b", "value": "https://www.bluecoat.com/security-blog/2015-05-01/introducing-hats-highly-annoying-threats" }, { "category": "Network activity", "comment": "Fiesta Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732128", "to_ids": true, "type": "domain", "uuid": "55473d60-9b90-434a-9f5b-4bb4950d210b", "value": "getseolist.eu" }, { "category": "Network activity", "comment": "Fiesta Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732128", "to_ids": true, "type": "domain", "uuid": "55473d60-0ea4-4a50-904c-4029950d210b", "value": "bestseolist.eu" }, { "category": "Network activity", "comment": "Fiesta Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732128", "to_ids": true, "type": "domain", "uuid": "55473d60-27b0-44c4-a179-45f3950d210b", "value": "justfastmap.eu" }, { "category": "Network activity", "comment": "Fiesta Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732128", "to_ids": true, "type": "domain", "uuid": "55473d60-9b30-481b-912b-4fd7950d210b", "value": "coseolist.eu" }, { "category": "Network activity", "comment": "Fiesta Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732128", "to_ids": true, "type": "domain", "uuid": "55473d60-fefc-41de-8f56-4632950d210b", "value": "afastmap.ws" }, { "category": "Network activity", "comment": "Fiesta Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732128", "to_ids": true, "type": "domain", "uuid": "55473d60-6420-40da-901f-457c950d210b", "value": "thefastmap.ws" }, { "category": "Network activity", "comment": "Fiesta Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732128", "to_ids": true, "type": "domain", "uuid": "55473d60-700c-4b19-8df6-4551950d210b", "value": "nuseolist.eu" }, { "category": "Network activity", "comment": "Fiesta Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732129", "to_ids": true, "type": "domain", "uuid": "55473d61-a554-41e8-b757-46d9950d210b", "value": "topseolist.eu" }, { "category": "Network activity", "comment": "Fiesta Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732129", "to_ids": true, "type": "domain", "uuid": "55473d61-754c-421f-b917-45b7950d210b", "value": "meseolist.eu" }, { "category": "Network activity", "comment": "Fiesta Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732129", "to_ids": true, "type": "domain", "uuid": "55473d61-df98-473a-822d-4bde950d210b", "value": "metafastmap.eu" }, { "category": "Network activity", "comment": "Fiesta Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732129", "to_ids": true, "type": "domain", "uuid": "55473d61-7db4-4916-877a-4819950d210b", "value": "eseolist.eu" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732158", "to_ids": true, "type": "domain", "uuid": "55473d7e-4a90-4082-a4cf-dd36950d210b", "value": "rotonexy.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732159", "to_ids": true, "type": "domain", "uuid": "55473d7f-ace4-4412-b26d-dd36950d210b", "value": "symonash.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732159", "to_ids": true, "type": "domain", "uuid": "55473d7f-ff38-493b-9715-dd36950d210b", "value": "atinenom.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732159", "to_ids": true, "type": "domain", "uuid": "55473d7f-9200-4caa-bc64-dd36950d210b", "value": "naraiarm.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732159", "to_ids": true, "type": "domain", "uuid": "55473d7f-3c14-4c17-a923-dd36950d210b", "value": "einseeld.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732159", "to_ids": true, "type": "domain", "uuid": "55473d7f-bc5c-4314-b5d4-dd36950d210b", "value": "holamecs.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732159", "to_ids": true, "type": "domain", "uuid": "55473d7f-999c-4c54-8485-dd36950d210b", "value": "numerarm.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732159", "to_ids": true, "type": "domain", "uuid": "55473d7f-bb44-42e8-af72-dd36950d210b", "value": "hrortict.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732159", "to_ids": true, "type": "domain", "uuid": "55473d7f-c764-41d4-b66d-dd36950d210b", "value": "indusish.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732160", "to_ids": true, "type": "domain", "uuid": "55473d80-81ac-41e3-a08c-dd36950d210b", "value": "jadilips.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732160", "to_ids": true, "type": "domain", "uuid": "55473d80-336c-4458-9aa2-dd36950d210b", "value": "fogelicy.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732160", "to_ids": true, "type": "domain", "uuid": "55473d80-a664-4b2c-be64-dd36950d210b", "value": "khundalt.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732160", "to_ids": true, "type": "domain", "uuid": "55473d80-6e04-453d-b6a0-dd36950d210b", "value": "spoeract.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732160", "to_ids": true, "type": "domain", "uuid": "55473d80-b4bc-48f0-a85c-dd36950d210b", "value": "kroentro.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732160", "to_ids": true, "type": "domain", "uuid": "55473d80-6534-4464-b86f-dd36950d210b", "value": "xerhardy.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732160", "to_ids": true, "type": "domain", "uuid": "55473d80-d484-4e7b-bfdd-dd36950d210b", "value": "sixperth.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732160", "to_ids": true, "type": "domain", "uuid": "55473d80-ec08-4b5d-b373-dd36950d210b", "value": "pilshorm.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732161", "to_ids": true, "type": "domain", "uuid": "55473d81-1a58-4d26-8dbb-dd36950d210b", "value": "omaidett.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732161", "to_ids": true, "type": "domain", "uuid": "55473d81-31c4-4ecd-af1c-dd36950d210b", "value": "uglanarc.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732161", "to_ids": true, "type": "domain", "uuid": "55473d81-8eec-453e-b7e9-dd36950d210b", "value": "sherymex.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732161", "to_ids": true, "type": "domain", "uuid": "55473d81-4ce0-48d1-923d-dd36950d210b", "value": "nealychy.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732161", "to_ids": true, "type": "domain", "uuid": "55473d81-56cc-4818-b25e-dd36950d210b", "value": "trobirks.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732161", "to_ids": true, "type": "domain", "uuid": "55473d81-1e7c-4a4d-9500-dd36950d210b", "value": "sulecass.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732161", "to_ids": true, "type": "domain", "uuid": "55473d81-021c-49d9-8767-dd36950d210b", "value": "malerror.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732161", "to_ids": true, "type": "domain", "uuid": "55473d81-6a90-4dc6-a0cc-dd36950d210b", "value": "imetheonhe.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732162", "to_ids": true, "type": "domain", "uuid": "55473d82-2fc4-429b-9b8d-dd36950d210b", "value": "sidowery.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732162", "to_ids": true, "type": "domain", "uuid": "55473d82-f6c8-41d0-8d42-dd36950d210b", "value": "mooriarm.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732162", "to_ids": true, "type": "domain", "uuid": "55473d82-ccc0-49d8-8752-dd36950d210b", "value": "risalerr.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732162", "to_ids": true, "type": "domain", "uuid": "55473d82-884c-48b3-822e-dd36950d210b", "value": "pirrains.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732162", "to_ids": true, "type": "domain", "uuid": "55473d82-4d5c-4549-b163-dd36950d210b", "value": "cerinays.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732162", "to_ids": true, "type": "domain", "uuid": "55473d82-9c50-4604-a48f-dd36950d210b", "value": "malerror.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732162", "to_ids": true, "type": "domain", "uuid": "55473d82-803c-4c17-a792-dd36950d210b", "value": "pioblern.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732162", "to_ids": true, "type": "domain", "uuid": "55473d82-dfe4-4f7c-844d-dd36950d210b", "value": "ctelailt.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732163", "to_ids": true, "type": "domain", "uuid": "55473d83-5ef4-44db-b489-dd36950d210b", "value": "blouneth.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732163", "to_ids": true, "type": "domain", "uuid": "55473d83-7db0-4214-87fe-dd36950d210b", "value": "muskiert.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732163", "to_ids": true, "type": "domain", "uuid": "55473d83-1638-4d92-8c4e-dd36950d210b", "value": "aflumery.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732163", "to_ids": true, "type": "domain", "uuid": "55473d83-3a64-4e79-b5b0-dd36950d210b", "value": "zarbrend.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732163", "to_ids": true, "type": "domain", "uuid": "55473d83-0a5c-4d56-9917-dd36950d210b", "value": "kroentro.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732163", "to_ids": true, "type": "domain", "uuid": "55473d83-2138-4652-a8a3-dd36950d210b", "value": "otinaryl.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732163", "to_ids": true, "type": "domain", "uuid": "55473d83-b29c-4020-abe5-dd36950d210b", "value": "mooriarm.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732163", "to_ids": true, "type": "domain", "uuid": "55473d83-8230-480e-82b8-dd36950d210b", "value": "trobirks.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732163", "to_ids": true, "type": "domain", "uuid": "55473d83-b978-4666-9d1b-dd36950d210b", "value": "pokensea.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732164", "to_ids": true, "type": "domain", "uuid": "55473d84-7038-48f9-9ed8-dd36950d210b", "value": "gotedrap.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732164", "to_ids": true, "type": "domain", "uuid": "55473d84-ce50-4c39-9b52-dd36950d210b", "value": "clolband.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732164", "to_ids": true, "type": "domain", "uuid": "55473d84-792c-474f-895d-dd36950d210b", "value": "meditoll.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732164", "to_ids": true, "type": "domain", "uuid": "55473d84-6f6c-4620-9fc9-dd36950d210b", "value": "psehaism.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732164", "to_ids": true, "type": "domain", "uuid": "55473d84-1a48-4527-b82e-dd36950d210b", "value": "nonypeck.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732164", "to_ids": true, "type": "domain", "uuid": "55473d84-9b5c-4771-8525-dd36950d210b", "value": "slulints.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732164", "to_ids": true, "type": "domain", "uuid": "55473d84-f5dc-49eb-9481-dd36950d210b", "value": "potigole.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732164", "to_ids": true, "type": "domain", "uuid": "55473d84-7688-4790-a291-dd36950d210b", "value": "mackeilt.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732165", "to_ids": true, "type": "domain", "uuid": "55473d85-2d70-4d9c-ad30-dd36950d210b", "value": "molporic.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732165", "to_ids": true, "type": "domain", "uuid": "55473d85-63d0-4e4b-9386-dd36950d210b", "value": "octaneft.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732165", "to_ids": true, "type": "domain", "uuid": "55473d85-29ec-4ea7-807a-dd36950d210b", "value": "burdiacs.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732165", "to_ids": true, "type": "domain", "uuid": "55473d85-2a78-4d73-89b1-dd36950d210b", "value": "unitturt.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732165", "to_ids": true, "type": "domain", "uuid": "55473d85-bd38-4448-b954-dd36950d210b", "value": "pioblern.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732165", "to_ids": true, "type": "domain", "uuid": "55473d85-55f0-4094-8505-dd36950d210b", "value": "omaidett.com" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732165", "to_ids": true, "type": "domain", "uuid": "55473d85-3b68-4785-a676-dd36950d210b", "value": "nealychy.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732165", "to_ids": true, "type": "domain", "uuid": "55473d85-471c-43c8-bf34-dd36950d210b", "value": "cleparcy.org" }, { "category": "Network activity", "comment": "BizCN", "deleted": false, "disable_correlation": false, "timestamp": "1430732166", "to_ids": true, "type": "domain", "uuid": "55473d86-2b24-4ad6-aa6d-dd36950d210b", "value": "furarryl.org" }, { "category": "Network activity", "comment": "Nuclear Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732207", "to_ids": true, "type": "domain", "uuid": "55473daf-c950-4046-b938-c20d950d210b", "value": "yellowfrance.info" }, { "category": "Network activity", "comment": "Nuclear Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732207", "to_ids": true, "type": "domain", "uuid": "55473daf-6990-41b0-b0e1-c20d950d210b", "value": "yellowfrance.com" }, { "category": "Network activity", "comment": "Nuclear Exploit Kit", "deleted": false, "disable_correlation": false, "timestamp": "1430732207", "to_ids": true, "type": "domain", "uuid": "55473daf-9848-47bf-bd3d-c20d950d210b", "value": "givemeaudi.com" } ] } }