{ "Event": { "analysis": "0", "date": "2016-09-15", "extends_uuid": "", "info": "Malspam 2016-09-15 (.wsf in .zip) - campaign: \"SCAN\"", "publish_timestamp": "1473950220", "published": true, "threat_level_id": "3", "timestamp": "1473950155", "uuid": "57dab16c-f32c-4634-b9f1-1b70950d210f", "Orgc": { "name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f" }, "Tag": [ { "colour": "#ffffff", "local": "0", "name": "tlp:white", "relationship_type": "" }, { "colour": "#3a7300", "local": "0", "name": "circl:incident-classification=\"malware\"", "relationship_type": "" } ], "Attribute": [ { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950115", "to_ids": true, "type": "ip-dst", "uuid": "57dab1a3-31a4-4aff-ac62-1b6f950d210f", "value": "108.175.157.20" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950116", "to_ids": true, "type": "ip-dst", "uuid": "57dab1a4-7344-4c1e-86a4-1b6f950d210f", "value": "108.179.200.210" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950117", "to_ids": true, "type": "ip-dst", "uuid": "57dab1a5-99c8-474f-bf39-1b6f950d210f", "value": "125.212.219.132" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950117", "to_ids": true, "type": "ip-dst", "uuid": "57dab1a5-e708-4533-9750-1b6f950d210f", "value": "148.251.40.218" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950118", "to_ids": true, "type": "ip-dst", "uuid": "57dab1a6-32f4-4749-8062-1b6f950d210f", "value": "185.12.92.184" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950118", "to_ids": true, "type": "ip-dst", "uuid": "57dab1a6-a1b0-479d-9d60-1b6f950d210f", "value": "192.186.215.98" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950119", "to_ids": true, "type": "ip-dst", "uuid": "57dab1a7-2a34-4596-b18a-1b6f950d210f", "value": "192.81.129.230" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950119", "to_ids": true, "type": "ip-dst", "uuid": "57dab1a7-268c-4264-8710-1b6f950d210f", "value": "193.110.162.146" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950120", "to_ids": true, "type": "ip-dst", "uuid": "57dab1a8-fe98-4d7d-8079-1b6f950d210f", "value": "194.102.215.57" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950120", "to_ids": true, "type": "ip-dst", "uuid": "57dab1a8-d418-43a4-8f57-1b6f950d210f", "value": "198.46.81.187" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950121", "to_ids": true, "type": "ip-dst", "uuid": "57dab1a9-7510-4d57-a8c8-1b6f950d210f", "value": "209.59.151.220" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950121", "to_ids": true, "type": "ip-dst", "uuid": "57dab1a9-f740-454d-94d2-1b6f950d210f", "value": "210.5.47.92" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950122", "to_ids": true, "type": "ip-dst", "uuid": "57dab1aa-c774-4cd5-a26f-1b6f950d210f", "value": "216.177.136.165" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950122", "to_ids": true, "type": "ip-dst", "uuid": "57dab1aa-cd9c-4c41-bcce-1b6f950d210f", "value": "67.222.14.205" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950123", "to_ids": true, "type": "ip-dst", "uuid": "57dab1ab-d770-4289-86e1-1b6f950d210f", "value": "69.49.96.12" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950124", "to_ids": true, "type": "ip-dst", "uuid": "57dab1ac-c618-4533-8e1b-1b6f950d210f", "value": "74.208.110.201" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950124", "to_ids": true, "type": "ip-dst", "uuid": "57dab1ac-e7dc-4cf7-bacb-1b6f950d210f", "value": "77.245.149.11" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950125", "to_ids": true, "type": "ip-dst", "uuid": "57dab1ad-6424-4178-b11a-1b6f950d210f", "value": "80.93.62.246" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950125", "to_ids": true, "type": "ip-dst", "uuid": "57dab1ad-c724-4daa-a2b4-1b6f950d210f", "value": "81.162.94.254" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950126", "to_ids": true, "type": "ip-dst", "uuid": "57dab1ae-56ec-4a41-95dc-1b6f950d210f", "value": "81.218.219.200" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950126", "to_ids": true, "type": "ip-dst", "uuid": "57dab1ae-d754-43a5-b1cc-1b6f950d210f", "value": "85.248.29.36" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950127", "to_ids": true, "type": "ip-dst", "uuid": "57dab1af-caa8-4f5f-9195-1b6f950d210f", "value": "91.185.209.164" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950127", "to_ids": true, "type": "ip-dst", "uuid": "57dab1af-e370-4974-8ef2-1b6f950d210f", "value": "94.73.150.60" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950128", "to_ids": true, "type": "ip-dst", "uuid": "57dab1b0-47a0-43ab-85dd-1b6f950d210f", "value": "97.74.144.193" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950128", "to_ids": true, "type": "domain", "uuid": "57dab1b0-c87c-4853-99b6-1b6f950d210f", "value": "allovercoupon.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950129", "to_ids": true, "type": "domain", "uuid": "57dab1b1-d25c-4c61-989c-1b6f950d210f", "value": "bet4good.org" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950129", "to_ids": true, "type": "domain", "uuid": "57dab1b1-83c0-4d53-9d21-1b6f950d210f", "value": "bigfishcasting.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950130", "to_ids": true, "type": "domain", "uuid": "57dab1b2-0d74-4927-a1cc-1b6f950d210f", "value": "charlcote1.net" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950130", "to_ids": true, "type": "domain", "uuid": "57dab1b2-733c-455e-96f6-1b6f950d210f", "value": "delicefilm.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950131", "to_ids": true, "type": "domain", "uuid": "57dab1b3-17f4-4194-af5c-1b6f950d210f", "value": "dendang.net" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950131", "to_ids": true, "type": "domain", "uuid": "57dab1b3-c0d8-43cb-be68-1b6f950d210f", "value": "discoverstillwater.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950132", "to_ids": true, "type": "hostname", "uuid": "57dab1b4-0504-4288-8218-1b6f950d210f", "value": "eiti.co.il" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950133", "to_ids": true, "type": "domain", "uuid": "57dab1b5-6b40-4b55-a694-1b6f950d210f", "value": "electua.org" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950133", "to_ids": true, "type": "domain", "uuid": "57dab1b5-674c-4463-b064-1b6f950d210f", "value": "hawaiipoliticalinfo.org" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950134", "to_ids": true, "type": "url", "uuid": "57dab1b6-31a0-463b-8e7e-1b6f950d210f", "value": "http://allovercoupon.com/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950134", "to_ids": true, "type": "url", "uuid": "57dab1b6-7210-4cb0-a80b-1b6f950d210f", "value": "http://bet4good.org/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950135", "to_ids": true, "type": "url", "uuid": "57dab1b7-fc80-4051-a5c9-1b6f950d210f", "value": "http://bigfishcasting.com/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950135", "to_ids": true, "type": "url", "uuid": "57dab1b7-b424-4367-9b13-1b6f950d210f", "value": "http://charlcote1.net/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950136", "to_ids": true, "type": "url", "uuid": "57dab1b8-aadc-46b6-9675-1b6f950d210f", "value": "http://delicefilm.com/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950137", "to_ids": true, "type": "url", "uuid": "57dab1b9-6a48-4846-bd9a-1b6f950d210f", "value": "http://dendang.net/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950137", "to_ids": true, "type": "url", "uuid": "57dab1b9-8088-47d1-871c-1b6f950d210f", "value": "http://discoverstillwater.com/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950138", "to_ids": true, "type": "url", "uuid": "57dab1ba-7b0c-4e05-91f3-1b6f950d210f", "value": "http://eiti.co.il/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950138", "to_ids": true, "type": "url", "uuid": "57dab1ba-b9c8-4a4d-97be-1b6f950d210f", "value": "http://electua.org/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950139", "to_ids": true, "type": "url", "uuid": "57dab1bb-01fc-41a7-8f0f-1b6f950d210f", "value": "http://hawaiipoliticalinfo.org/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950140", "to_ids": true, "type": "url", "uuid": "57dab1bc-09e0-4545-9632-1b6f950d210f", "value": "http://iandistudio.com/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950140", "to_ids": true, "type": "url", "uuid": "57dab1bc-e9b8-4b4f-8a0b-1b6f950d210f", "value": "http://insieutoc.com/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950140", "to_ids": true, "type": "url", "uuid": "57dab1bc-b9fc-4ff9-ae63-1b6f950d210f", "value": "http://jxbestextile.com/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950141", "to_ids": true, "type": "url", "uuid": "57dab1bd-5898-425f-aa17-1b6f950d210f", "value": "http://keratin.sk/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950142", "to_ids": true, "type": "url", "uuid": "57dab1be-35d0-4e35-b1bd-1b6f950d210f", "value": "http://kf-design.com/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950142", "to_ids": true, "type": "url", "uuid": "57dab1be-cc64-446f-9c54-1b6f950d210f", "value": "http://lacumpa.biz/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950143", "to_ids": true, "type": "url", "uuid": "57dab1bf-9824-4171-9270-1b6f950d210f", "value": "http://lowcostveterinarios.com/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950143", "to_ids": true, "type": "url", "uuid": "57dab1bf-5e98-4bc6-9dc8-1b6f950d210f", "value": "http://mika.tohmon.com/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950144", "to_ids": true, "type": "url", "uuid": "57dab1c0-5a24-460f-80a3-1b6f950d210f", "value": "http://pasbardejov.sk/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950144", "to_ids": true, "type": "url", "uuid": "57dab1c0-5764-40e0-b75a-1b6f950d210f", "value": "http://rimpro.ru/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950145", "to_ids": true, "type": "url", "uuid": "57dab1c1-0a20-4cf3-b24d-1b6f950d210f", "value": "http://techboss.net/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950145", "to_ids": true, "type": "url", "uuid": "57dab1c1-58ac-43d4-8448-1b6f950d210f", "value": "http://tommylam.com/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950146", "to_ids": true, "type": "url", "uuid": "57dab1c2-f004-47b6-8b71-1b6f950d210f", "value": "http://trudprom.ru/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950147", "to_ids": true, "type": "url", "uuid": "57dab1c3-8c5c-4d1b-8045-1b6f950d210f", "value": "http://zharikoff.ru/afdIJGY8766gyu" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950147", "to_ids": true, "type": "domain", "uuid": "57dab1c3-ca74-46f7-a658-1b6f950d210f", "value": "iandistudio.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950148", "to_ids": true, "type": "domain", "uuid": "57dab1c4-799c-45c4-b752-1b6f950d210f", "value": "insieutoc.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950148", "to_ids": true, "type": "domain", "uuid": "57dab1c4-49f4-4aa8-b4fd-1b6f950d210f", "value": "jxbestextile.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950149", "to_ids": true, "type": "domain", "uuid": "57dab1c5-c5b8-4a8f-a917-1b6f950d210f", "value": "keratin.sk" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950149", "to_ids": true, "type": "domain", "uuid": "57dab1c5-885c-4b0a-a470-1b6f950d210f", "value": "kf-design.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950150", "to_ids": true, "type": "domain", "uuid": "57dab1c6-dc10-423d-91f9-1b6f950d210f", "value": "lacumpa.biz" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950151", "to_ids": true, "type": "domain", "uuid": "57dab1c7-708c-4e43-bc22-1b6f950d210f", "value": "lowcostveterinarios.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950151", "to_ids": true, "type": "hostname", "uuid": "57dab1c7-dfd4-454c-9a89-1b6f950d210f", "value": "mika.tohmon.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950152", "to_ids": true, "type": "domain", "uuid": "57dab1c8-1f28-4e38-9cef-1b6f950d210f", "value": "pasbardejov.sk" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950152", "to_ids": true, "type": "domain", "uuid": "57dab1c8-3450-4a42-bd96-1b6f950d210f", "value": "rimpro.ru" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950153", "to_ids": true, "type": "domain", "uuid": "57dab1c9-2f70-47f8-b3dc-1b6f950d210f", "value": "techboss.net" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950153", "to_ids": true, "type": "domain", "uuid": "57dab1c9-6c7c-4ca2-b592-1b6f950d210f", "value": "tommylam.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950154", "to_ids": true, "type": "domain", "uuid": "57dab1ca-8a5c-41cc-9882-1b6f950d210f", "value": "trudprom.ru" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1473950155", "to_ids": true, "type": "domain", "uuid": "57dab1cb-0d44-4106-ba58-1b6f950d210f", "value": "zharikoff.ru" } ] } }