{
  "Event": {
    "analysis": "0",
    "date": "2016-09-05",
    "extends_uuid": "",
    "info": "Malspam 2016-09-05 (.wsf in .zip)",
    "publish_timestamp": "1473091148",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1473091137",
    "uuid": "57cd8beb-79e4-4497-931f-4249950d210f",
    "Orgc": {
      "name": "CIRCL",
      "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": "0",
        "name": "tlp:white",
        "relationship_type": ""
      },
      {
        "colour": "#3b7500",
        "local": "0",
        "name": "circl:incident-classification=\"malware\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088704",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd8cc0-4fa8-4be1-97c3-3307950d210f",
        "value": "158.69.147.89"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088705",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd8cc1-8260-41bc-a757-3307950d210f",
        "value": "185.33.52.18"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088705",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd8cc1-db9c-477d-957d-3307950d210f",
        "value": "195.208.0.121"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088705",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd8cc1-5598-4c85-a2d9-3307950d210f",
        "value": "195.238.0.64"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088705",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd8cc1-d4f0-4693-a7e5-3307950d210f",
        "value": "195.248.63.109"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088705",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd8cc1-3640-4e27-bc8b-3307950d210f",
        "value": "200.83.4.62"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088706",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd8cc2-6398-471d-ad4e-3307950d210f",
        "value": "208.71.106.37"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088706",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd8cc2-6798-4bc5-8ba0-3307950d210f",
        "value": "213.180.150.17"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088706",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd8cc2-3430-4466-8645-3307950d210f",
        "value": "213.205.40.169"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088706",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd8cc2-e330-42ad-b14e-3307950d210f",
        "value": "78.110.50.113"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088706",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd8cc2-2814-49c3-9262-3307950d210f",
        "value": "80.150.6.138"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088707",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd8cc3-cfa4-440d-9fba-3307950d210f",
        "value": "81.196.20.134"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088707",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd8cc3-aeb4-4d74-8ecc-3307950d210f",
        "value": "frumuseanudaniela.go.ro"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088707",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc3-1700-4a49-bfc9-3307950d210f",
        "value": "http://frumuseanudaniela.go.ro/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088707",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc3-9d3c-43cb-b079-3307950d210f",
        "value": "http://jvelizg.vtrbandaancha.net/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088708",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc4-6218-4d8a-9217-3307950d210f",
        "value": "http://lcc.vtrbandaancha.net/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088708",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc4-5aec-4aeb-8c91-3307950d210f",
        "value": "http://maxshoppppsr.biz/js/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088708",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc4-b24c-4f97-9fbc-3307950d210f",
        "value": "http://monkeeey.web.fc2.com/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088708",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc4-113c-4299-b72a-3307950d210f",
        "value": "http://roadstercrew-nw.homepage.t-online.de/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088708",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc4-7de4-45c4-9c92-3307950d210f",
        "value": "http://www.bals.nichost.ru/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088709",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc5-88f0-4fac-be57-3307950d210f",
        "value": "http://www.equipe4.net/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088709",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc5-7060-47f7-b3b4-3307950d210f",
        "value": "http://www.officinaomc.com/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088709",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc5-a990-4f1e-a1a4-3307950d210f",
        "value": "http://www.poli-mec.it/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088709",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc5-786c-4a5b-9f56-3307950d210f",
        "value": "http://www.rossorelli.ru/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088709",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc5-bca8-4557-a805-3307950d210f",
        "value": "http://www.trzynastkajg.republika.pl/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088710",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc6-d574-4136-89a5-3307950d210f",
        "value": "http://www.yacht-market.eu/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088710",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd8cc6-4ff0-42e1-bdbf-3307950d210f",
        "value": "http://yggithuq.utawebhost.at/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088710",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd8cc6-6b7c-4b5a-b7d1-3307950d210f",
        "value": "jvelizg.vtrbandaancha.net"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088710",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd8cc6-cb88-4b36-9fd8-3307950d210f",
        "value": "lcc.vtrbandaancha.net"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088710",
        "to_ids": true,
        "type": "domain",
        "uuid": "57cd8cc6-6818-4cc3-bfac-3307950d210f",
        "value": "maxshoppppsr.biz"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088711",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd8cc7-def8-4723-a98d-3307950d210f",
        "value": "monkeeey.web.fc2.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088711",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd8cc7-2780-4620-8465-3307950d210f",
        "value": "roadstercrew-nw.homepage.t-online.de"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088711",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd8cc7-c2c0-4f6f-8c06-3307950d210f",
        "value": "www.bals.nichost.ru"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088711",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd8cc7-6790-4c18-ad13-3307950d210f",
        "value": "www.equipe4.net"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088711",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd8cc7-ef68-4d5d-8b40-3307950d210f",
        "value": "www.officinaomc.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088712",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd8cc8-4334-47b2-a8cc-3307950d210f",
        "value": "www.poli-mec.it"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088712",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd8cc8-5478-430a-a2b6-3307950d210f",
        "value": "www.rossorelli.ru"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088712",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd8cc8-d2a4-4d73-a1ba-3307950d210f",
        "value": "www.trzynastkajg.republika.pl"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088712",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd8cc8-e664-45b1-ad8a-3307950d210f",
        "value": "www.yacht-market.eu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473088713",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd8cc9-3688-4686-a908-3307950d210f",
        "value": "yggithuq.utawebhost.at"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091132",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd963c-a890-4339-9597-4152950d210f",
        "value": "112.140.42.29"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091132",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd963c-4904-4473-8858-47d4950d210f",
        "value": "208.71.106.62"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091132",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd963c-cd08-438e-b0b9-4d89950d210f",
        "value": "212.46.196.141"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091133",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd963d-7938-4060-b1d1-47f5950d210f",
        "value": "23.95.106.213"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091133",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd963d-a74c-4fa1-b58a-46f3950d210f",
        "value": "52433865.fn.freenet-hosting.de"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091133",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd963d-2314-413c-8bdf-4bed950d210f",
        "value": "68.65.121.203"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091133",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57cd963d-6a88-4f01-8e04-4544950d210f",
        "value": "81.169.145.153"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091134",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd963e-9914-4211-ab0a-43da950d210f",
        "value": "deemc.homepage.t-online.de"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091134",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd963e-5b48-4e93-853f-43c8950d210f",
        "value": "gregor-weiss.business.t-online.de"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091134",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd963e-5cc4-4b4c-b7c6-4c93950d210f",
        "value": "http://52433865.fn.freenet-hosting.de/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091134",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd963e-8580-4ee8-960f-4b5a950d210f",
        "value": "http://deemc.homepage.t-online.de/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091134",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd963e-1a1c-430e-8b69-44d3950d210f",
        "value": "http://gregor-weiss.business.t-online.de/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091135",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd963f-edf8-4db6-b458-4912950d210f",
        "value": "http://miyufortuneteller.web.fc2.com/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091135",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd963f-9abc-4c2e-aedb-414b950d210f",
        "value": "http://mojejeze.republika.pl/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091135",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd963f-c1c4-40a1-8c49-4de7950d210f",
        "value": "http://quietvain.nobody.jp/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091135",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd963f-4d1c-440e-af03-4bf1950d210f",
        "value": "http://tensai.wallst.ru/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091136",
        "to_ids": true,
        "type": "url",
        "uuid": "57cd9640-9c20-430d-90c8-4100950d210f",
        "value": "http://treasure-force.com/87b3ff3rc"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091136",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd9640-f4bc-4279-99e7-4e1b950d210f",
        "value": "miyufortuneteller.web.fc2.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091136",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd9640-6970-41ca-b5a3-4506950d210f",
        "value": "mojejeze.republika.pl"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091136",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd9640-f380-4f25-b7ae-48e8950d210f",
        "value": "quietvain.nobody.jp"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091137",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57cd9641-6fa4-467d-9aec-4626950d210f",
        "value": "tensai.wallst.ru"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473091137",
        "to_ids": true,
        "type": "domain",
        "uuid": "57cd9641-0068-48d3-9580-43bf950d210f",
        "value": "treasure-force.com"
      }
    ]
  }
}