{ "Event": { "analysis": "0", "date": "2016-09-08", "extends_uuid": "", "info": "Malspam 2016-09-08 (.wsf in .zip) - campaign: \"New voice mail message from\"", "publish_timestamp": "1473338937", "published": true, "threat_level_id": "3", "timestamp": "1473338915", "uuid": "57d15dca-ccd0-4e18-b2c5-e6b5950d210f", "Orgc": { "name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": "0", "name": "tlp:white", "relationship_type": "" }, { "colour": "#3a7300", "local": "0", "name": "circl:incident-classification=\"malware\"", "relationship_type": "" } ], "Attribute": [ { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338900", "to_ids": true, "type": "ip-dst", "uuid": "57d15e14-0f48-4a18-b6d3-4488950d210f", "value": "185.107.213.133" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338900", "to_ids": true, "type": "ip-dst", "uuid": "57d15e14-2bc4-4dce-a453-4dcf950d210f", "value": "195.238.0.64" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338900", "to_ids": true, "type": "ip-dst", "uuid": "57d15e14-1440-406b-b513-4b5b950d210f", "value": "202.224.59.191" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338901", "to_ids": true, "type": "ip-dst", "uuid": "57d15e15-4720-4ddd-9d82-4bf2950d210f", "value": "208.71.106.37" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338901", "to_ids": true, "type": "ip-dst", "uuid": "57d15e15-f98c-4c5b-ac9d-4da2950d210f", "value": "208.71.106.45" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338901", "to_ids": true, "type": "ip-dst", "uuid": "57d15e15-58fc-4a30-83f7-4bdf950d210f", "value": "211.134.181.38" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338901", "to_ids": true, "type": "ip-dst", "uuid": "57d15e15-c598-429a-b306-4cdd950d210f", "value": "211.78.38.199" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338901", "to_ids": true, "type": "ip-dst", "uuid": "57d15e15-dfc0-4472-83bb-4fae950d210f", "value": "212.159.8.151" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338902", "to_ids": true, "type": "ip-dst", "uuid": "57d15e16-6464-42a3-a5cd-40fe950d210f", "value": "212.159.9.91" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338902", "to_ids": true, "type": "ip-dst", "uuid": "57d15e16-c02c-4d30-a3c5-49fe950d210f", "value": "213.185.87.30" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338902", "to_ids": true, "type": "ip-dst", "uuid": "57d15e16-f0f0-4148-9489-4799950d210f", "value": "213.186.33.19" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338902", "to_ids": true, "type": "ip-dst", "uuid": "57d15e16-b038-4224-bd39-4d88950d210f", "value": "213.205.40.169" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338903", "to_ids": true, "type": "ip-dst", "uuid": "57d15e17-53ec-4fb8-9555-49fa950d210f", "value": "37.152.88.16" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338903", "to_ids": true, "type": "ip-dst", "uuid": "57d15e17-4a88-442e-adad-4e08950d210f", "value": "62.24.202.31" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338903", "to_ids": true, "type": "ip-dst", "uuid": "57d15e17-3c10-4c3a-ad87-4618950d210f", "value": "62.250.4.180" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338903", "to_ids": true, "type": "ip-dst", "uuid": "57d15e17-9884-454a-a35c-4c80950d210f", "value": "80.150.6.138" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338904", "to_ids": true, "type": "ip-dst", "uuid": "57d15e18-3dd0-40c3-9601-4618950d210f", "value": "81.24.34.9" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338904", "to_ids": true, "type": "ip-dst", "uuid": "57d15e18-9b6c-4a35-a65f-4eff950d210f", "value": "85.18.11.68" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338904", "to_ids": true, "type": "ip-dst", "uuid": "57d15e18-1d80-45d5-aa16-4293950d210f", "value": "86.65.123.70" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338904", "to_ids": true, "type": "ip-dst", "uuid": "57d15e18-e0d4-4998-b7a3-469d950d210f", "value": "94.126.40.48" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338904", "to_ids": true, "type": "hostname", "uuid": "57d15e18-53b0-4585-9d47-4866950d210f", "value": "dashman.web.fc2.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338905", "to_ids": true, "type": "domain", "uuid": "57d15e19-2c24-4a25-a407-448c950d210f", "value": "gam-e20.it" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338905", "to_ids": true, "type": "hostname", "uuid": "57d15e19-8fa0-405f-8283-4aad950d210f", "value": "ghost-tony.com.es" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338905", "to_ids": true, "type": "url", "uuid": "57d15e19-15d8-4957-aba4-4b05950d210f", "value": "http://dashman.web.fc2.com/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338905", "to_ids": true, "type": "url", "uuid": "57d15e19-4fcc-43d1-a28d-4cd4950d210f", "value": "http://gam-e20.it/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338906", "to_ids": true, "type": "url", "uuid": "57d15e1a-cc1c-46d7-b584-4b4b950d210f", "value": "http://ghost-tony.com.es/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338906", "to_ids": true, "type": "url", "uuid": "57d15e1a-1708-4d89-88d1-4d89950d210f", "value": "http://kreativmanagement.homepage.t-online.de/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338906", "to_ids": true, "type": "url", "uuid": "57d15e1a-2064-4d7d-a486-4c05950d210f", "value": "http://ngenge.web.fc2.com/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338906", "to_ids": true, "type": "url", "uuid": "57d15e1a-dde4-444a-b21c-4c1d950d210f", "value": "http://olivier.coroenne.perso.sfr.fr/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338906", "to_ids": true, "type": "url", "uuid": "57d15e1a-19d4-40b5-a64f-4ac8950d210f", "value": "http://thb-berlin.homepage.t-online.de/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338907", "to_ids": true, "type": "url", "uuid": "57d15e1b-9884-4438-84a3-4ac8950d210f", "value": "http://tst-technik.de/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338907", "to_ids": true, "type": "url", "uuid": "57d15e1b-7750-4974-b8d3-4afe950d210f", "value": "http://tujdaehn.homepage.t-online.de/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338907", "to_ids": true, "type": "url", "uuid": "57d15e1b-6f24-4f30-acd3-4a9a950d210f", "value": "http://unimet.tmhandel.com/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338907", "to_ids": true, "type": "url", "uuid": "57d15e1b-ff60-4570-8190-4f11950d210f", "value": "http://www.agridiving.net/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338907", "to_ids": true, "type": "url", "uuid": "57d15e1b-7de4-4ace-8a5c-470a950d210f", "value": "http://www.alanmorgan.plus.com/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338908", "to_ids": true, "type": "url", "uuid": "57d15e1c-bcf4-412a-a5ad-4f59950d210f", "value": "http://www.alpstaxi.co.jp/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338908", "to_ids": true, "type": "url", "uuid": "57d15e1c-5544-47e1-900b-4fc0950d210f", "value": "http://www.gebrvanorsouw.nl/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338908", "to_ids": true, "type": "url", "uuid": "57d15e1c-58c4-440d-9248-4fa2950d210f", "value": "http://www.gengokk.co.jp/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338908", "to_ids": true, "type": "url", "uuid": "57d15e1c-b374-4b8a-81f5-41f6950d210f", "value": "http://www.hung-guan.com.tw/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338908", "to_ids": true, "type": "url", "uuid": "57d15e1c-9b14-42a1-a9b3-4b5e950d210f", "value": "http://www.laribalta.org/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338909", "to_ids": true, "type": "url", "uuid": "57d15e1d-8e00-4cb0-9a98-41a7950d210f", "value": "http://www.mikeg7hen.talktalk.net/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338909", "to_ids": true, "type": "url", "uuid": "57d15e1d-a4ec-418c-942c-487c950d210f", "value": "http://www.plumbntile.talktalk.net/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338909", "to_ids": true, "type": "url", "uuid": "57d15e1d-92d4-4037-a230-4098950d210f", "value": "http://www.radicegioielli.com/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338909", "to_ids": true, "type": "url", "uuid": "57d15e1d-49f4-4710-aa8e-4c55950d210f", "value": "http://www.rioual.com/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338910", "to_ids": true, "type": "url", "uuid": "57d15e1e-5e04-4f7b-9f5a-4caf950d210f", "value": "http://www.spiritueelcentrumaum.net/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338910", "to_ids": true, "type": "url", "uuid": "57d15e1e-9e10-4b34-a7ab-4648950d210f", "value": "http://www.texelvakantiehuisje.nl/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338910", "to_ids": true, "type": "url", "uuid": "57d15e1e-8940-4599-ba77-4c6d950d210f", "value": "http://www.threshold-online.co.uk/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338910", "to_ids": true, "type": "url", "uuid": "57d15e1e-c8e4-44d2-83cf-4474950d210f", "value": "http://www.whitakerpd.co.uk/g76gyui" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338910", "to_ids": true, "type": "hostname", "uuid": "57d15e1e-0498-4158-a402-41cd950d210f", "value": "kreativmanagement.homepage.t-online.de" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338911", "to_ids": true, "type": "hostname", "uuid": "57d15e1f-8c98-4b3c-a990-4870950d210f", "value": "ngenge.web.fc2.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338911", "to_ids": true, "type": "hostname", "uuid": "57d15e1f-3794-4756-8d8e-49f0950d210f", "value": "olivier.coroenne.perso.sfr.fr" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338911", "to_ids": true, "type": "hostname", "uuid": "57d15e1f-6d54-41da-9662-4e1c950d210f", "value": "thb-berlin.homepage.t-online.de" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338911", "to_ids": true, "type": "domain", "uuid": "57d15e1f-75bc-477b-ac70-4353950d210f", "value": "tst-technik.de" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338911", "to_ids": true, "type": "hostname", "uuid": "57d15e1f-5e88-4dc5-8101-46fc950d210f", "value": "tujdaehn.homepage.t-online.de" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338912", "to_ids": true, "type": "hostname", "uuid": "57d15e20-1aa8-42b6-a591-40f3950d210f", "value": "unimet.tmhandel.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338912", "to_ids": true, "type": "hostname", "uuid": "57d15e20-4774-440e-aa95-484e950d210f", "value": "www.agridiving.net" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338912", "to_ids": true, "type": "hostname", "uuid": "57d15e20-2164-4a53-a6d1-4793950d210f", "value": "www.alanmorgan.plus.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338912", "to_ids": true, "type": "hostname", "uuid": "57d15e20-d694-4e2d-a620-468d950d210f", "value": "www.alpstaxi.co.jp" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338912", "to_ids": true, "type": "hostname", "uuid": "57d15e21-88f0-4fff-babb-49a2950d210f", "value": "www.gebrvanorsouw.nl" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338913", "to_ids": true, "type": "hostname", "uuid": "57d15e21-08f8-435e-9add-4480950d210f", "value": "www.gengokk.co.jp" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338913", "to_ids": true, "type": "hostname", "uuid": "57d15e21-4d9c-4cc7-a1c3-4226950d210f", "value": "www.hung-guan.com.tw" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338913", "to_ids": true, "type": "hostname", "uuid": "57d15e21-b29c-4afa-90a6-461e950d210f", "value": "www.laribalta.org" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338913", "to_ids": true, "type": "hostname", "uuid": "57d15e21-9e90-4add-9d60-454b950d210f", "value": "www.mikeg7hen.talktalk.net" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338914", "to_ids": true, "type": "hostname", "uuid": "57d15e22-2ba0-447a-a7a2-4d40950d210f", "value": "www.plumbntile.talktalk.net" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338914", "to_ids": true, "type": "hostname", "uuid": "57d15e22-6490-43ac-9223-408c950d210f", "value": "www.radicegioielli.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338914", "to_ids": true, "type": "hostname", "uuid": "57d15e22-f188-404c-ac80-44ad950d210f", "value": "www.rioual.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338914", "to_ids": true, "type": "hostname", "uuid": "57d15e22-af78-468f-b59b-4fb1950d210f", "value": "www.spiritueelcentrumaum.net" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338914", "to_ids": true, "type": "hostname", "uuid": "57d15e22-05f4-4aa9-9af2-4260950d210f", "value": "www.texelvakantiehuisje.nl" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338915", "to_ids": true, "type": "hostname", "uuid": "57d15e23-6948-4d15-923a-4d17950d210f", "value": "www.threshold-online.co.uk" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473338915", "to_ids": true, "type": "hostname", "uuid": "57d15e23-4fbc-481a-bf02-4ada950d210f", "value": "www.whitakerpd.co.uk" } ] } }