{ "Event": { "analysis": "2", "date": "2015-12-28", "extends_uuid": "", "info": "OSINT Neutrino Exploit Kit \u00e2\u20ac\u201c One Flash File to Rule Them All by SpiderLabs", "publish_timestamp": "1454408532", "published": true, "threat_level_id": "3", "timestamp": "1454408491", "uuid": "56b06dc5-2cac-46c1-9827-40f7950d210f", "Orgc": { "name": "CthulhuSPRL.be", "uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f" }, "Tag": [ { "colour": "#004646", "local": "0", "name": "type:OSINT", "relationship_type": "" }, { "colour": "#ffffff", "local": "0", "name": "tlp:white", "relationship_type": "" }, { "colour": "#075200", "local": "0", "name": "admiralty-scale:source-reliability=\"b\"", "relationship_type": "" }, { "colour": "#0eb100", "local": "0", "name": "admiralty-scale:information-credibility=\"1\"", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "Links", "deleted": false, "disable_correlation": false, "timestamp": "1454403136", "to_ids": false, "type": "link", "uuid": "56b06e40-1d8c-4c17-a38a-4edd950d210f", "value": "https://www.trustwave.com/Resources/SpiderLabs-Blog/Neutrino-Exploit-Kit-%E2%80%93-One-Flash-File-to-Rule-Them-All/" }, { "category": "External analysis", "comment": "Links", "deleted": false, "disable_correlation": false, "timestamp": "1454403136", "to_ids": false, "type": "link", "uuid": "56b06e40-0720-4f15-a55a-45bd950d210f", "value": "https://www.virustotal.com/en/file/05a50b8b9cccdfa6adcb1f1173c021c8944b3aa5312e21e0af015a98735263b2/analysis/1447730847/" }, { "category": "External analysis", "comment": "Links", "deleted": false, "disable_correlation": false, "timestamp": "1454403137", "to_ids": false, "type": "link", "uuid": "56b06e41-49e0-42e1-be2e-4996950d210f", "value": "https://www.virustotal.com/en/file/7a1a1e3ae834e7682f3762c743ac44c5c35eeaf35f84ed6dcfff603c1e0357e8/analysis/1450952590/" }, { "category": "External analysis", "comment": "Links", "deleted": false, "disable_correlation": false, "timestamp": "1454403137", "to_ids": false, "type": "link", "uuid": "56b06e41-7338-45c2-be4a-4d02950d210f", "value": "https://www.virustotal.com/en/file/aee8a02ac4176d4c712520ea0eef75850ad88bf196db983d6d4ccbba6f100d76/analysis/1450952600/" }, { "category": "External analysis", "comment": "Links", "deleted": false, "disable_correlation": false, "timestamp": "1454403137", "to_ids": false, "type": "link", "uuid": "56b06e41-c220-43ab-85d8-4b65950d210f", "value": "https://www.virustotal.com/en/file/34b609d980a6baffe4ffe5927730c641b58c274239df68d1846566366940dcea/analysis/1450952611/" }, { "category": "External analysis", "comment": "Links", "deleted": false, "disable_correlation": false, "timestamp": "1454403137", "to_ids": false, "type": "link", "uuid": "56b06e41-8174-4851-8b69-4f47950d210f", "value": "https://www.virustotal.com/en/file/972ec16e4fc85c88326d7bb616f7091dbc1448369e23107bb7bc0ad15a1046bd/analysis/1450952680/" }, { "category": "External analysis", "comment": "Links", "deleted": false, "disable_correlation": false, "timestamp": "1454403138", "to_ids": false, "type": "link", "uuid": "56b06e42-6d78-48db-981d-4e9e950d210f", "value": "https://www.virustotal.com/en/file/806ab2c5b089bd3db019bc98ce00b28a57a936e06b3ad81104453b7aab2be43a/analysis/1450952686/" }, { "category": "External analysis", "comment": "Links", "deleted": false, "disable_correlation": false, "timestamp": "1454403138", "to_ids": false, "type": "link", "uuid": "56b06e42-9248-48b9-94e9-4661950d210f", "value": "https://www.virustotal.com/en/file/163822f0eda6927994cb60736b9eb51600c203c4869b51db362aaba5203c2e98/analysis/1450952692/" }, { "category": "External analysis", "comment": "Links", "deleted": false, "disable_correlation": false, "timestamp": "1454403138", "to_ids": false, "type": "link", "uuid": "56b06e42-884c-41e1-9d02-4dea950d210f", "value": "https://www.virustotal.com/en/file/fe5bfee142d70d9d2e80f9e09659a244a7aaa262df9088b3643626b0fdba11e0/analysis/1450952540/" }, { "category": "External analysis", "comment": "Vulnerabilities", "deleted": false, "disable_correlation": false, "timestamp": "1454403139", "to_ids": false, "type": "vulnerability", "uuid": "56b06e43-bb98-4f46-8f01-47dd950d210f", "value": "CVE-2015-2419" }, { "category": "External analysis", "comment": "Vulnerabilities", "deleted": false, "disable_correlation": false, "timestamp": "1454403139", "to_ids": false, "type": "vulnerability", "uuid": "56b06e43-31b8-4c43-a4ca-4cf7950d210f", "value": "CVE-2013-2551" }, { "category": "External analysis", "comment": "Vulnerabilities", "deleted": false, "disable_correlation": false, "timestamp": "1454403139", "to_ids": false, "type": "vulnerability", "uuid": "56b06e43-5e4c-49b1-a587-45da950d210f", "value": "CVE-2014-6332" }, { "category": "External analysis", "comment": "Vulnerabilities", "deleted": false, "disable_correlation": false, "timestamp": "1454403139", "to_ids": false, "type": "vulnerability", "uuid": "56b06e43-9aa4-45ea-af96-4db5950d210f", "value": "CVE-2015-7645" }, { "category": "External analysis", "comment": "Vulnerabilities", "deleted": false, "disable_correlation": false, "timestamp": "1454403139", "to_ids": false, "type": "vulnerability", "uuid": "56b06e43-e444-402f-b7c9-40df950d210f", "value": "CVE-2014-0569" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408484", "to_ids": true, "type": "md5", "uuid": "56b08324-818c-454e-ad50-4dbc950d210f", "value": "d4b9af141d7f2e1b97e55f17133f4919" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408484", "to_ids": true, "type": "sha1", "uuid": "56b08324-53dc-4e5a-ad8e-49c4950d210f", "value": "e6607695a56f13c001c29ae0a4d9ac2b5741626c" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408484", "to_ids": true, "type": "sha256", "uuid": "56b08324-e65c-4764-b7a1-47c2950d210f", "value": "fe5bfee142d70d9d2e80f9e09659a244a7aaa262df9088b3643626b0fdba11e0" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408485", "to_ids": true, "type": "md5", "uuid": "56b08325-c95c-4ac3-816a-4a50950d210f", "value": "d523b243c629f71bcdbbd09a1274ec59" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408485", "to_ids": true, "type": "sha1", "uuid": "56b08325-d3f4-4fd1-b883-484b950d210f", "value": "453a2e0069a26e9b7e2db638a8b1942e95c0a5a7" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408485", "to_ids": true, "type": "sha256", "uuid": "56b08325-0fbc-4079-ad7f-4721950d210f", "value": "163822f0eda6927994cb60736b9eb51600c203c4869b51db362aaba5203c2e98" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408486", "to_ids": true, "type": "md5", "uuid": "56b08326-70a0-45a7-ab8c-4b12950d210f", "value": "4fc2d57dd2b96eca1d3e24441fc3c401" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408486", "to_ids": true, "type": "sha1", "uuid": "56b08326-1ff4-4d32-b2a7-48af950d210f", "value": "3c0b6cf1d75aca0e339efecb700a3458aa27017e" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408486", "to_ids": true, "type": "sha256", "uuid": "56b08326-a488-4231-b083-4f54950d210f", "value": "806ab2c5b089bd3db019bc98ce00b28a57a936e06b3ad81104453b7aab2be43a" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408487", "to_ids": true, "type": "md5", "uuid": "56b08327-1a8c-40ae-9a0d-47b1950d210f", "value": "dbb069409242bcf180c48bbc22df9dd1" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408487", "to_ids": true, "type": "sha1", "uuid": "56b08327-55d4-4d21-afee-4b59950d210f", "value": "efdb659b75d4af0aab67b40042755bfb1f84357e" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408487", "to_ids": true, "type": "sha256", "uuid": "56b08327-9544-4acc-9589-41f0950d210f", "value": "972ec16e4fc85c88326d7bb616f7091dbc1448369e23107bb7bc0ad15a1046bd" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408488", "to_ids": true, "type": "md5", "uuid": "56b08328-301c-4c14-a1b3-4ee7950d210f", "value": "955c42d4d9ac6b821dcb022b790aad82" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408488", "to_ids": true, "type": "sha1", "uuid": "56b08328-3fc0-466a-b935-429c950d210f", "value": "5eb520aec1f1c992771f6a4559cda73cd60a5aaf" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408488", "to_ids": true, "type": "sha256", "uuid": "56b08328-9104-4032-9412-4ce8950d210f", "value": "34b609d980a6baffe4ffe5927730c641b58c274239df68d1846566366940dcea" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408489", "to_ids": true, "type": "md5", "uuid": "56b08329-1264-47d0-95e7-4a78950d210f", "value": "4b0235980414e7fa8e188a0c2fc52b1a" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408489", "to_ids": true, "type": "sha1", "uuid": "56b08329-6804-4c65-828b-48c0950d210f", "value": "90e6bb86cb96abdcd82576669b7a3dfd3a5c641d" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408489", "to_ids": true, "type": "sha256", "uuid": "56b08329-6708-4024-8bf0-4e82950d210f", "value": "aee8a02ac4176d4c712520ea0eef75850ad88bf196db983d6d4ccbba6f100d76" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408490", "to_ids": true, "type": "md5", "uuid": "56b0832a-2aa4-4456-9c85-4979950d210f", "value": "cd4ac99e8fe25c9365708745db6ac7ad" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408490", "to_ids": true, "type": "sha1", "uuid": "56b0832a-9614-4c39-9c4f-44d0950d210f", "value": "7bc541ef970788a07c973ff8844ea758136fd711" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408490", "to_ids": true, "type": "sha256", "uuid": "56b0832a-bd8c-4789-9d90-4f79950d210f", "value": "7a1a1e3ae834e7682f3762c743ac44c5c35eeaf35f84ed6dcfff603c1e0357e8" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408490", "to_ids": true, "type": "md5", "uuid": "56b0832b-b0ac-4d5e-b482-4f17950d210f", "value": "7f2b2f029fdc740b61d3b88c89913cf6" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408491", "to_ids": true, "type": "sha1", "uuid": "56b0832b-0b14-4b57-941c-49d4950d210f", "value": "7a044056194b07daa6a4c104be03e6fccd9089dc" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1454408491", "to_ids": true, "type": "sha256", "uuid": "56b0832b-7bcc-452a-beb9-4867950d210f", "value": "05a50b8b9cccdfa6adcb1f1173c021c8944b3aa5312e21e0af015a98735263b2" } ] } }