{ "Event": { "analysis": "0", "date": "2016-09-09", "extends_uuid": "", "info": "Malspam 2016-09-09 (.wsf in .zip) - campaign: \"Documents Requested\"", "publish_timestamp": "1473435776", "published": true, "threat_level_id": "3", "timestamp": "1473435763", "uuid": "57d2cf18-fa64-4a18-978e-4b6e950d210f", "Orgc": { "name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": "0", "name": "tlp:white", "relationship_type": "" }, { "colour": "#3a7300", "local": "0", "name": "circl:incident-classification=\"malware\"", "relationship_type": "" } ], "Attribute": [ { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433391", "to_ids": true, "type": "ip-dst", "uuid": "57d2cf2f-ceb8-4cba-bcef-4d6a950d210f", "value": "103.231.41.127" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433392", "to_ids": true, "type": "ip-dst", "uuid": "57d2cf30-9d0c-4ebf-80f1-464a950d210f", "value": "104.219.250.140" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433392", "to_ids": true, "type": "ip-dst", "uuid": "57d2cf30-bb84-430c-ba92-4550950d210f", "value": "131.153.37.2" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433392", "to_ids": true, "type": "ip-dst", "uuid": "57d2cf30-e904-4cce-9ea1-473c950d210f", "value": "131.153.37.4" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433392", "to_ids": true, "type": "ip-dst", "uuid": "57d2cf30-7134-4760-8cf4-43d0950d210f", "value": "159.253.46.11" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433392", "to_ids": true, "type": "ip-dst", "uuid": "57d2cf30-09e8-4d61-a5fb-4b39950d210f", "value": "166.62.27.165" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433393", "to_ids": true, "type": "ip-dst", "uuid": "57d2cf31-e048-44aa-bea0-4ebe950d210f", "value": "173.254.72.61" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433393", "to_ids": true, "type": "ip-dst", "uuid": "57d2cf31-2b88-4825-b722-46e7950d210f", "value": "192.185.41.190" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433393", "to_ids": true, "type": "ip-dst", "uuid": "57d2cf31-9304-4263-ac4f-4cc0950d210f", "value": "38.99.253.95" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433393", "to_ids": true, "type": "ip-dst", "uuid": "57d2cf31-c9c8-4793-b0f9-48c8950d210f", "value": "43.225.54.151" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433393", "to_ids": true, "type": "ip-dst", "uuid": "57d2cf32-4664-4ad6-9529-4a13950d210f", "value": "50.87.153.14" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433394", "to_ids": true, "type": "ip-dst", "uuid": "57d2cf32-28f4-47f5-933e-44a8950d210f", "value": "64.34.216.104" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433394", "to_ids": true, "type": "ip-dst", "uuid": "57d2cf32-da9c-42c2-b17a-41e0950d210f", "value": "74.81.90.93" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433394", "to_ids": true, "type": "domain", "uuid": "57d2cf32-1f00-4851-af3a-4024950d210f", "value": "abcdraw.biz" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433394", "to_ids": true, "type": "domain", "uuid": "57d2cf32-bf0c-424e-9274-457e950d210f", "value": "allcateringservices.in" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433394", "to_ids": true, "type": "domain", "uuid": "57d2cf32-e6f4-4d5c-843d-4f7b950d210f", "value": "draarun.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433395", "to_ids": true, "type": "domain", "uuid": "57d2cf33-a344-4e05-85db-40a9950d210f", "value": "herosoft.biz" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433395", "to_ids": true, "type": "url", "uuid": "57d2cf33-1cf8-400b-9ba3-4ac7950d210f", "value": "http://abcdraw.biz/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433395", "to_ids": true, "type": "url", "uuid": "57d2cf33-809c-40e1-8ad5-435e950d210f", "value": "http://allcateringservices.in/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433395", "to_ids": true, "type": "url", "uuid": "57d2cf33-32c8-43ee-bb05-457e950d210f", "value": "http://draarun.com/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433395", "to_ids": true, "type": "url", "uuid": "57d2cf34-3264-45ea-9ac2-48a4950d210f", "value": "http://herosoft.biz/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433396", "to_ids": true, "type": "url", "uuid": "57d2cf34-951c-4e2e-9fc3-47b1950d210f", "value": "http://mysoregiftsflowers.com/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433396", "to_ids": true, "type": "url", "uuid": "57d2cf34-5e28-4ae8-a81d-474c950d210f", "value": "http://partyeazy.com/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433396", "to_ids": true, "type": "url", "uuid": "57d2cf34-24ec-4155-9898-4134950d210f", "value": "http://pmlojistik.com/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433396", "to_ids": true, "type": "url", "uuid": "57d2cf34-b7e8-4f57-a9af-4e42950d210f", "value": "http://ratecompares.com/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433396", "to_ids": true, "type": "url", "uuid": "57d2cf34-804c-4172-a1da-44c4950d210f", "value": "http://scpolytechnic.com/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433397", "to_ids": true, "type": "url", "uuid": "57d2cf35-5cc0-4f41-813e-4298950d210f", "value": "http://syamasahithi.com/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433397", "to_ids": true, "type": "url", "uuid": "57d2cf35-482c-4eec-97b9-4c9f950d210f", "value": "http://tranzporthub.com/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433397", "to_ids": true, "type": "url", "uuid": "57d2cf35-951c-4f34-8152-41b0950d210f", "value": "http://vajrammatrimony.com/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433397", "to_ids": true, "type": "url", "uuid": "57d2cf35-2a34-42bf-bf5d-4c01950d210f", "value": "http://wamasoftware.com/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433398", "to_ids": true, "type": "url", "uuid": "57d2cf36-dbbc-4e6f-bdbc-485f950d210f", "value": "http://www.ausaf.pk/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433398", "to_ids": true, "type": "url", "uuid": "57d2cf36-0d40-449e-bd97-4a1a950d210f", "value": "http://www.draarun.com/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433398", "to_ids": true, "type": "domain", "uuid": "57d2cf36-56c4-4e6f-9766-428d950d210f", "value": "mysoregiftsflowers.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433398", "to_ids": true, "type": "domain", "uuid": "57d2cf36-5c7c-423d-935f-43ad950d210f", "value": "partyeazy.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433398", "to_ids": true, "type": "domain", "uuid": "57d2cf36-76a0-43b9-a60d-4e8b950d210f", "value": "pmlojistik.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433398", "to_ids": true, "type": "domain", "uuid": "57d2cf37-cb58-4873-aaac-428d950d210f", "value": "ratecompares.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433399", "to_ids": true, "type": "domain", "uuid": "57d2cf37-48cc-4699-81b9-408e950d210f", "value": "scpolytechnic.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433399", "to_ids": true, "type": "domain", "uuid": "57d2cf37-9ca4-416f-9957-4799950d210f", "value": "syamasahithi.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433399", "to_ids": true, "type": "domain", "uuid": "57d2cf37-7000-4f09-845b-47c0950d210f", "value": "tranzporthub.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433399", "to_ids": true, "type": "domain", "uuid": "57d2cf37-98f4-4edb-a2b7-4fc4950d210f", "value": "vajrammatrimony.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433400", "to_ids": true, "type": "domain", "uuid": "57d2cf38-e574-446e-8f25-4a73950d210f", "value": "wamasoftware.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433400", "to_ids": true, "type": "hostname", "uuid": "57d2cf38-1ea0-42df-803e-4e3b950d210f", "value": "www.ausaf.pk" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473433400", "to_ids": true, "type": "hostname", "uuid": "57d2cf38-b0dc-45e8-8f09-410d950d210f", "value": "www.draarun.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473435761", "to_ids": true, "type": "ip-dst", "uuid": "57d2d871-7ca8-4f8a-89ff-4ba4950d210f", "value": "185.82.221.81" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473435761", "to_ids": true, "type": "ip-dst", "uuid": "57d2d871-a34c-4f7a-91e6-41df950d210f", "value": "50.97.161.228" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473435762", "to_ids": true, "type": "url", "uuid": "57d2d872-e59c-4a51-a564-4598950d210f", "value": "http://mottofotograf.com/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473435762", "to_ids": true, "type": "url", "uuid": "57d2d872-ec88-4189-a25b-4caa950d210f", "value": "http://samssara.com/JHgy64HJBRd" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473435762", "to_ids": true, "type": "domain", "uuid": "57d2d872-19f4-415f-b93a-4a7c950d210f", "value": "mottofotograf.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473435762", "to_ids": true, "type": "domain", "uuid": "57d2d872-6cbc-433c-ac4c-4b38950d210f", "value": "samssara.com" } ] } }