{
    "type": "bundle",
    "id": "bundle--57d6c85d-01c8-41ba-8ec2-40e7950d210f",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-13T04:47:12.000Z",
            "modified": "2016-09-13T04:47:12.000Z",
            "name": "CIRCL",
            "identity_class": "organization"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--57d6c85d-01c8-41ba-8ec2-40e7950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-13T04:47:12.000Z",
            "modified": "2016-09-13T04:47:12.000Z",
            "name": "Malspam 2016-09-12 (.wsf in .zip) - campaign: \"Photo|Image\"",
            "published": "2016-09-13T04:56:01Z",
            "object_refs": [
                "indicator--57d6c8ff-69a0-47d1-a58d-460a950d210f",
                "indicator--57d6c8ff-32c0-4ce9-a75d-4eb9950d210f",
                "indicator--57d6c8ff-c28c-421e-8e89-40dd950d210f",
                "indicator--57d6c900-c46c-426d-96ae-4468950d210f",
                "indicator--57d6c900-45d8-40c1-bae4-40d2950d210f",
                "indicator--57d6c900-12b4-4d55-9632-48aa950d210f",
                "indicator--57d6c900-2b8c-42c2-8493-483a950d210f",
                "indicator--57d6c901-6804-46ec-b32c-4c3c950d210f",
                "indicator--57d6c901-bc10-430b-92ac-4fc3950d210f",
                "indicator--57d6c901-b0e8-4544-b29c-42ee950d210f",
                "indicator--57d6c901-734c-4f86-ae25-4022950d210f",
                "indicator--57d6c902-56f4-4e46-8d52-4570950d210f",
                "indicator--57d6c902-53ec-4cdd-abc2-4bce950d210f",
                "indicator--57d6c902-bea0-45a2-bfee-471f950d210f",
                "indicator--57d6c902-1708-4803-bc60-4492950d210f",
                "indicator--57d6c903-1284-43a7-b72f-45ed950d210f",
                "indicator--57d6c903-8a5c-418a-9cc1-4eed950d210f",
                "indicator--57d6c903-a668-4cf2-b339-4ae5950d210f",
                "indicator--57d6c903-5af0-40a7-804e-49b6950d210f",
                "indicator--57d6c904-6404-4e47-99ba-4f05950d210f",
                "indicator--57d6c904-10d0-42da-8b86-4761950d210f",
                "indicator--57d6c904-b44c-4d73-9efd-4c53950d210f",
                "indicator--57d6c904-dfc0-446b-b95f-402e950d210f",
                "indicator--57d6c905-1ffc-4518-a6f9-41b6950d210f",
                "indicator--57d6c905-3a58-4493-aee0-4d7f950d210f",
                "indicator--57d6c905-588c-4103-b436-44b4950d210f",
                "indicator--57d6c905-1c80-4892-8a23-47a8950d210f",
                "indicator--57d6c906-1b70-44b9-b570-4244950d210f",
                "indicator--57d6c906-9b88-4b34-9c5d-4a79950d210f",
                "indicator--57d6c906-f534-492c-9277-4de4950d210f",
                "indicator--57d6c906-b1f8-414a-8d43-44ec950d210f",
                "indicator--57d6c907-70e0-43bd-a277-420c950d210f",
                "indicator--57d6c907-39e0-48c2-962d-4e9d950d210f",
                "indicator--57d6c907-2fac-4bbd-adea-44e0950d210f",
                "indicator--57d6c907-a4a4-4e2b-9802-44f6950d210f",
                "indicator--57d6c908-9998-4be7-959d-4b40950d210f",
                "indicator--57d6c908-f1c4-4ed3-92b8-478d950d210f",
                "indicator--57d6c908-25b4-455f-8999-4dcb950d210f",
                "indicator--57d6c908-5b00-455c-b5ea-4704950d210f",
                "indicator--57d6c909-eaac-40c9-9638-470e950d210f",
                "indicator--57d6c909-0b80-46e2-bebd-48cc950d210f",
                "indicator--57d6c909-2bfc-4c01-882c-42df950d210f",
                "indicator--57d784ce-2790-4084-a314-424f950d210f",
                "indicator--57d784cf-8594-4dfb-9dcd-4977950d210f",
                "indicator--57d784cf-b4cc-4eb6-8f0c-4b34950d210f",
                "indicator--57d784cf-3e9c-4852-9072-4ac9950d210f",
                "indicator--57d784d0-8a3c-414f-92a0-418f950d210f",
                "indicator--57d784d0-3a04-48e0-87cf-4cbd950d210f",
                "indicator--57d784d0-5a8c-4504-b45b-47b8950d210f"
            ],
            "labels": [
                "Threat-Report",
                "misp:tool=\"MISP-STIX-Converter\"",
                "circl:incident-classification=\"malware\""
            ],
            "object_marking_refs": [
                "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c8ff-69a0-47d1-a58d-460a950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:51.000Z",
            "modified": "2016-09-12T15:25:51.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '115.124.123.25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c8ff-32c0-4ce9-a75d-4eb9950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:51.000Z",
            "modified": "2016-09-12T15:25:51.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '131.153.37.2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c8ff-c28c-421e-8e89-40dd950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:51.000Z",
            "modified": "2016-09-12T15:25:51.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '131.153.37.4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c900-c46c-426d-96ae-4468950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:52.000Z",
            "modified": "2016-09-12T15:25:52.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '142.4.34.194']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c900-45d8-40c1-bae4-40d2950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:52.000Z",
            "modified": "2016-09-12T15:25:52.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.110.39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c900-12b4-4d55-9632-48aa950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:52.000Z",
            "modified": "2016-09-12T15:25:52.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.82.221.81']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c900-2b8c-42c2-8493-483a950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:52.000Z",
            "modified": "2016-09-12T15:25:52.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '186.202.153.83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c901-6804-46ec-b32c-4c3c950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:53.000Z",
            "modified": "2016-09-12T15:25:53.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '208.113.154.124']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c901-bc10-430b-92ac-4fc3950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:53.000Z",
            "modified": "2016-09-12T15:25:53.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '43.225.54.151']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c901-b0e8-4544-b29c-42ee950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:53.000Z",
            "modified": "2016-09-12T15:25:53.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.9.28.140']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c901-734c-4f86-ae25-4022950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:53.000Z",
            "modified": "2016-09-12T15:25:53.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.87.153.14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c902-56f4-4e46-8d52-4570950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:54.000Z",
            "modified": "2016-09-12T15:25:54.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.87.153.144']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c902-53ec-4cdd-abc2-4bce950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:54.000Z",
            "modified": "2016-09-12T15:25:54.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.97.161.228']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c902-bea0-45a2-bfee-471f950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:54.000Z",
            "modified": "2016-09-12T15:25:54.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '62.149.144.61']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c902-1708-4803-bc60-4492950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:54.000Z",
            "modified": "2016-09-12T15:25:54.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'adss30.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c903-1284-43a7-b72f-45ed950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:55.000Z",
            "modified": "2016-09-12T15:25:55.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'ativa3.tempsite.ws']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c903-8a5c-418a-9cc1-4eed950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:55.000Z",
            "modified": "2016-09-12T15:25:55.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'clickhubli.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c903-a668-4cf2-b339-4ae5950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:55.000Z",
            "modified": "2016-09-12T15:25:55.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'clickroses.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c903-5af0-40a7-804e-49b6950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:55.000Z",
            "modified": "2016-09-12T15:25:55.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'files.mostafaahmadi.ir']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c904-6404-4e47-99ba-4f05950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:56.000Z",
            "modified": "2016-09-12T15:25:56.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'gunturnayeebrahminemployees.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c904-10d0-42da-8b86-4761950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:56.000Z",
            "modified": "2016-09-12T15:25:56.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'herosoft.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c904-b44c-4d73-9efd-4c53950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:56.000Z",
            "modified": "2016-09-12T15:25:56.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'hostit.co.in']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c904-dfc0-446b-b95f-402e950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:56.000Z",
            "modified": "2016-09-12T15:25:56.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://adss30.net/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c905-1ffc-4518-a6f9-41b6950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:57.000Z",
            "modified": "2016-09-12T15:25:57.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://ativa3.tempsite.ws/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c905-3a58-4493-aee0-4d7f950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:57.000Z",
            "modified": "2016-09-12T15:25:57.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://clickhubli.com/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c905-588c-4103-b436-44b4950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:57.000Z",
            "modified": "2016-09-12T15:25:57.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://clickroses.com/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c905-1c80-4892-8a23-47a8950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:57.000Z",
            "modified": "2016-09-12T15:25:57.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://files.mostafaahmadi.ir/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c906-1b70-44b9-b570-4244950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:58.000Z",
            "modified": "2016-09-12T15:25:58.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://gunturnayeebrahminemployees.com/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c906-9b88-4b34-9c5d-4a79950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:58.000Z",
            "modified": "2016-09-12T15:25:58.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://herosoft.biz/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c906-f534-492c-9277-4de4950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:58.000Z",
            "modified": "2016-09-12T15:25:58.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://hostit.co.in/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c906-b1f8-414a-8d43-44ec950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:58.000Z",
            "modified": "2016-09-12T15:25:58.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://mottofotograf.com/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c907-70e0-43bd-a277-420c950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:59.000Z",
            "modified": "2016-09-12T15:25:59.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://samssara.com/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c907-39e0-48c2-962d-4e9d950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:59.000Z",
            "modified": "2016-09-12T15:25:59.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://synergyconnect.in/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c907-2fac-4bbd-adea-44e0950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:59.000Z",
            "modified": "2016-09-12T15:25:59.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://technometics.com/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c907-a4a4-4e2b-9802-44f6950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:25:59.000Z",
            "modified": "2016-09-12T15:25:59.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://websamrat.in/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:25:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c908-9998-4be7-959d-4b40950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:26:00.000Z",
            "modified": "2016-09-12T15:26:00.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://www.villakeratea.it/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:26:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c908-f1c4-4ed3-92b8-478d950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:26:00.000Z",
            "modified": "2016-09-12T15:26:00.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'mottofotograf.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:26:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c908-25b4-455f-8999-4dcb950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:26:00.000Z",
            "modified": "2016-09-12T15:26:00.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'samssara.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:26:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c908-5b00-455c-b5ea-4704950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:26:00.000Z",
            "modified": "2016-09-12T15:26:00.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'synergyconnect.in']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:26:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c909-eaac-40c9-9638-470e950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:26:01.000Z",
            "modified": "2016-09-12T15:26:01.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'technometics.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:26:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c909-0b80-46e2-bebd-48cc950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:26:01.000Z",
            "modified": "2016-09-12T15:26:01.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'websamrat.in']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:26:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d6c909-2bfc-4c01-882c-42df950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-12T15:26:01.000Z",
            "modified": "2016-09-12T15:26:01.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'www.villakeratea.it']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-12T15:26:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d784ce-2790-4084-a314-424f950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-13T04:47:10.000Z",
            "modified": "2016-09-13T04:47:10.000Z",
            "description": "download location",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '198.23.59.178']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-13T04:47:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d784cf-8594-4dfb-9dcd-4977950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-13T04:47:11.000Z",
            "modified": "2016-09-13T04:47:11.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'crazycreations.in']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-13T04:47:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d784cf-b4cc-4eb6-8f0c-4b34950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-13T04:47:11.000Z",
            "modified": "2016-09-13T04:47:11.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'gift2belgaum.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-13T04:47:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d784cf-3e9c-4852-9072-4ac9950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-13T04:47:11.000Z",
            "modified": "2016-09-13T04:47:11.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://crazycreations.in/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-13T04:47:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d784d0-8a3c-414f-92a0-418f950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-13T04:47:12.000Z",
            "modified": "2016-09-13T04:47:12.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://gift2belgaum.com/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-13T04:47:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d784d0-3a04-48e0-87cf-4cbd950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-13T04:47:12.000Z",
            "modified": "2016-09-13T04:47:12.000Z",
            "description": "download location",
            "pattern": "[url:value = 'http://nysekolintsika.mg/8fh34f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-13T04:47:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"url\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--57d784d0-5a8c-4504-b45b-47b8950d210f",
            "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
            "created": "2016-09-13T04:47:12.000Z",
            "modified": "2016-09-13T04:47:12.000Z",
            "description": "download location",
            "pattern": "[domain-name:value = 'nysekolintsika.mg']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-09-13T04:47:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"domain\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "marking-definition",
            "spec_version": "2.1",
            "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
            "created": "2017-01-20T00:00:00.000Z",
            "definition_type": "tlp",
            "name": "TLP:WHITE",
            "definition": {
                "tlp": "white"
            }
        }
    ]
}