{
  "Event": {
    "analysis": "2",
    "date": "2017-09-13",
    "extends_uuid": "",
    "info": "OSINT New Variants of Agent.BTZ/ComRAT Found: The Threat That Hit The Pentagon In 2008 Still Evolving by Intezer",
    "publish_timestamp": "1505395085",
    "published": true,
    "threat_level_id": "1",
    "timestamp": "1505395005",
    "uuid": "59ba805d-d674-4156-bcc6-473b950d210f",
    "Orgc": {
      "name": "CthulhuSPRL.be",
      "uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f"
    },
    "Tag": [
      {
        "colour": "#00223b",
        "name": "osint:source-type=\"blog-post\""
      },
      {
        "colour": "#ffffff",
        "name": "tlp:white"
      },
      {
        "colour": "#004646",
        "name": "type:OSINT"
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505394854",
        "to_ids": false,
        "type": "link",
        "uuid": "59ba80a6-ebec-40d0-8f24-1630950d210f",
        "value": "http://www.intezer.com/new-variants-of-agent-btz-comrat-found-part-2/"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-b638-4df5-bd79-4bbf950d210f",
        "value": "69690f609140db503463daf6a3699f1bf3e2a5a6049cefe7e6437f762040e548"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-6890-4186-ab2b-4493950d210f",
        "value": "6798b3278ae926b0145ee342ee9840d0b2e6ba11ff995c2bc84d3c6eb3e55ff4"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-1ef8-4a89-a5db-4c2a950d210f",
        "value": "73db4295c5b29958c5d93c20be9482c1efffc89fc4e5c8ba59ac9425a4657a88"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "filename",
        "uuid": "59ba813d-44d8-48e8-a861-4dd0950d210f",
        "value": "activeds.dll"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-8de8-4b00-ae81-42ff950d210f",
        "value": "50067ebcc2d2069b3613a20b81f9d61f2cd5be9c85533c4ea34edbefaeb8a15f"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-ff98-4312-8023-488a950d210f",
        "value": "380b0353ba8cd33da8c5e5b95e3e032e83193019e73c71875b58ec1ed389bdac"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-3db8-44ef-8ee4-4830950d210f",
        "value": "9c163c3f2bd5c5181147c6f4cf2571160197de98f496d16b38c7dc46b5dc1426"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-54c8-4e8a-93d3-4b82950d210f",
        "value": "628d316a983383ed716e3f827720915683a8876b54677878a7d2db376d117a24"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-d870-4b61-8a35-4ea1950d210f",
        "value": "f27e9bba6a2635731845b4334b807c0e4f57d3b790cecdc77d8fef50629f51a2"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-6c1c-4617-a6d5-4911950d210f",
        "value": "a093fa22d7bc4ee99049a29b66a13d4bf4d1899ed4c7a8423fbb8c54f4230f3c"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-337c-4b3e-8515-469a950d210f",
        "value": "6ad78f069c3619d0d18eef8281219679f538cfe0c1b6d40b244beb359762cf96"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "filename",
        "uuid": "59ba813d-93bc-4afc-9ebe-4f20950d210f",
        "value": "stdole2.tlb"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-d264-4a7f-a411-4fd5950d210f",
        "value": "49c5c798689d4a54e5b7099b647b0596fb96b996a437bb8241b5dd76e974c24e"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-1fe4-448f-8df9-42c9950d210f",
        "value": "e88970fa4892150441c1616028982fe63c875f149cd490c3c910a1c091d3ad49"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-5a00-4993-9a81-4c5b950d210f",
        "value": "89db8a69ff030600f26d5c875785d20f15d45331d007733be9a2422261d16cea"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "59ba813d-c428-4696-a647-4ba4950d210f",
        "value": "81.199.34.150"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-7e64-4a98-ac7b-43c7950d210f",
        "value": "elephant.zzux.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-b154-40c6-9fcf-45f4950d210f",
        "value": "angrybear.ignorelist.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-e444-4468-a63a-43a3950d210f",
        "value": "bigalert.mefound.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-db0c-4b60-9768-4d0a950d210f",
        "value": "bughouse.yourtrap.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-cb94-4055-a066-49f2950d210f",
        "value": "getfreetools.strangled.net"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-666c-4e5a-a9c6-498c950d210f",
        "value": "news100top.diskstation.org"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-6d78-4636-832a-49e7950d210f",
        "value": "pro100sport.mein-vigor.de"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-05b0-49f5-a009-43e1950d210f",
        "value": "redneck.yourtrap.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-b7f8-42b7-8714-456b950d210f",
        "value": "savage.2waky.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-97f4-4d07-af5f-48c1950d210f",
        "value": "tehnologtrade.4irc.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "59ba813d-840c-4e2f-8a27-4f62950d210f",
        "value": "81.199.160.11"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-a200-460b-864f-45b4950d210f",
        "value": "forums.chatnook.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-8fa0-4026-a7b1-4ec0950d210f",
        "value": "goodengine.darktech.org"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-423c-4974-aa83-4df9950d210f",
        "value": "locker.strangled.net"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-c5d4-4ebb-8bf1-4b97950d210f",
        "value": "simple-house.zzux.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-4e80-456d-9da1-48cf950d210f",
        "value": "specialcar.mooo.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-f860-46a9-aef5-41ec950d210f",
        "value": "sunseed.strangled.net"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-12c0-4e9a-a1ab-4bb7950d210f",
        "value": "whitelibrary.4irc.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-bbfc-411d-9e16-4fe5950d210f",
        "value": "bloodpearl.strangled.net"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-d94c-4afd-8956-4e3b950d210f",
        "value": "getlucky.ignorelist.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-34f8-472c-97bb-4f41950d210f",
        "value": "proriot.zzux.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-a5a0-41bc-a02b-44af950d210f",
        "value": "fourapi.mooo.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-b7c0-420b-a90e-4ebb950d210f",
        "value": "nopasaran.strangled.net"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "59ba813d-322c-4273-8134-4974950d210f",
        "value": "78.138.25.29"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-9b44-4d31-b8c5-4d21950d210f",
        "value": "showme.twilightparadox.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-2550-4ab2-9d8f-4abe950d210f",
        "value": "mouses.strangled.net"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "59ba813d-b4d4-4799-9618-435d950d210f",
        "value": "82.146.175.69"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "59ba813d-1dc8-48e5-a643-4f23950d210f",
        "value": "178.219.68.242"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-13a4-47d4-ba89-4605950d210f",
        "value": "ftp.fueldust.compress.to"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-3860-4cde-b64a-4de6950d210f",
        "value": "ftp.linear.wikaba.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-3a58-447a-bf7e-4970950d210f",
        "value": "ftp.mysterysoft.epac.to"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-a9b0-42a7-989a-4a91950d210f",
        "value": "ftp.scroller.longmusic.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-2610-44ff-9e0b-4a9e950d210f",
        "value": "ftp.spartano.mefound.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-7754-4367-9fe9-446d950d210f",
        "value": "fueldust.compress.to"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-87dc-442c-958e-406b950d210f",
        "value": "linear.wikaba.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-3eb0-4bac-ac20-4aa0950d210f",
        "value": "mysterysoft.epac.to"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-a4cc-4ee4-8f1c-4435950d210f",
        "value": "safety.deaftone.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-532c-4d64-ad73-40de950d210f",
        "value": "salary.flnet.org"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-cdfc-4f7d-b869-403f950d210f",
        "value": "scroller.longmusic.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-10f0-4172-9a50-44f7950d210f",
        "value": "spartano.mefound.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "59ba813d-6258-40cc-a391-4a57950d210f",
        "value": "88.83.25.122"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-e750-4c10-ae43-4b88950d210f",
        "value": "robot.wikaba.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "59ba813d-79f4-4832-9fdb-4e7a950d210f",
        "value": "41.223.91.217"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-c580-4c25-bb42-4865950d210f",
        "value": "smileman.compress.to"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-73e0-4840-922b-41cc950d210f",
        "value": "decent.ignorelist.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-d5b0-4b60-ba80-4002950d210f",
        "value": "dekka.biz.tm"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-7790-430b-93b5-4f6f950d210f",
        "value": "disol.strangled.net"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-8860-4014-ad34-40fa950d210f",
        "value": "eraser.2waky.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-f308-490c-8162-42bc950d210f",
        "value": "filelord.epac.to"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-1e68-43fb-b825-480d950d210f",
        "value": "justsoft.epac.to"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-9b08-4fbd-b737-4bf5950d210f",
        "value": "smuggler.zzux.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-69d4-4012-bd2c-4da6950d210f",
        "value": "sport-journal.twilightparadox.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-fa84-48c6-bdf4-482b950d210f",
        "value": "sportinfo.yourtrap.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-2fa8-4cf7-9bb2-491d950d210f",
        "value": "stager.ignorelist.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-1774-4f5c-a2b5-47f4950d210f",
        "value": "tankos.wikaba.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-3aa0-48ad-a607-46a4950d210f",
        "value": "grandfathers.mooo.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-c704-4337-a5eb-4058950d210f",
        "value": "homeric.mooo.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-3360-4907-953a-4319950d210f",
        "value": "jamming.mooo.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-2108-4090-857f-411c950d210f",
        "value": "pneumo.mooo.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-74e4-4769-8261-4dee950d210f",
        "value": "razory.mooo.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-f758-43cb-bae3-40be950d210f",
        "value": "anger.scieron.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-4254-4319-8ba5-47b8950d210f",
        "value": "gantama.mefound.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-4810-4b40-aa47-471a950d210f",
        "value": "letgetbad.epac.to"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-c48c-4f06-b6b2-4f05950d210f",
        "value": "rowstate.epac.to"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-2484-4dcc-a41e-483d950d210f",
        "value": "memento.info.tm"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "59ba813d-6b7c-43cc-8c21-41cc950d210f",
        "value": "196.43.240.177"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "59ba813d-4258-4916-bb21-422e950d210f",
        "value": "169.255.102.240"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-71bc-4a55-9d7e-4d47950d210f",
        "value": "harm17.zzux.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59ba813d-e410-4dcf-939d-47cd950d210f",
        "value": "mountain8.wikaba.com"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-6410-47f3-a4f8-4528950d210f",
        "value": "0e0045d2c4bfff4345d460957a543e2e7f1638de745644f6bf58555c1d287286"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-9c94-4a11-8714-4d41950d210f",
        "value": "bdcc7e900f10986cdb6dc7762de35b4f07f2ee153a341bef843b866e999d73a3"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-ec24-483a-aa2f-4188950d210f",
        "value": "fac13f08afe2745fc441ada37120cebce0e0aa16d03a03e9cda3ec9384dd40f2"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505395005",
        "to_ids": true,
        "type": "sha256",
        "uuid": "59ba813d-97e4-4e06-a7cf-4e3c950d210f",
        "value": "bae62f7f96c4cc300ec685f42eb451388cf50a13aa624b3f2a019d071fddaeb1"
      }
    ]
  }
}