{
  "Event": {
    "analysis": "0",
    "date": "2016-09-15",
    "extends_uuid": "",
    "info": "Malspam 2016-09-15 (.wsf in .zip) - campaign: \"SCAN\"",
    "publish_timestamp": "1473950220",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1473950155",
    "uuid": "57dab16c-f32c-4634-b9f1-1b70950d210f",
    "Orgc": {
      "name": "CIRCL",
      "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": "0",
        "name": "tlp:white",
        "relationship_type": ""
      },
      {
        "colour": "#3b7500",
        "local": "0",
        "name": "circl:incident-classification=\"malware\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950115",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1a3-31a4-4aff-ac62-1b6f950d210f",
        "value": "108.175.157.20"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950116",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1a4-7344-4c1e-86a4-1b6f950d210f",
        "value": "108.179.200.210"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950117",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1a5-99c8-474f-bf39-1b6f950d210f",
        "value": "125.212.219.132"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950117",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1a5-e708-4533-9750-1b6f950d210f",
        "value": "148.251.40.218"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950118",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1a6-32f4-4749-8062-1b6f950d210f",
        "value": "185.12.92.184"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950118",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1a6-a1b0-479d-9d60-1b6f950d210f",
        "value": "192.186.215.98"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950119",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1a7-2a34-4596-b18a-1b6f950d210f",
        "value": "192.81.129.230"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950119",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1a7-268c-4264-8710-1b6f950d210f",
        "value": "193.110.162.146"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950120",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1a8-fe98-4d7d-8079-1b6f950d210f",
        "value": "194.102.215.57"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950120",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1a8-d418-43a4-8f57-1b6f950d210f",
        "value": "198.46.81.187"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950121",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1a9-7510-4d57-a8c8-1b6f950d210f",
        "value": "209.59.151.220"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950121",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1a9-f740-454d-94d2-1b6f950d210f",
        "value": "210.5.47.92"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950122",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1aa-c774-4cd5-a26f-1b6f950d210f",
        "value": "216.177.136.165"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950122",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1aa-cd9c-4c41-bcce-1b6f950d210f",
        "value": "67.222.14.205"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950123",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1ab-d770-4289-86e1-1b6f950d210f",
        "value": "69.49.96.12"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950124",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1ac-c618-4533-8e1b-1b6f950d210f",
        "value": "74.208.110.201"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950124",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1ac-e7dc-4cf7-bacb-1b6f950d210f",
        "value": "77.245.149.11"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950125",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1ad-6424-4178-b11a-1b6f950d210f",
        "value": "80.93.62.246"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950125",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1ad-c724-4daa-a2b4-1b6f950d210f",
        "value": "81.162.94.254"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950126",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1ae-56ec-4a41-95dc-1b6f950d210f",
        "value": "81.218.219.200"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950126",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1ae-d754-43a5-b1cc-1b6f950d210f",
        "value": "85.248.29.36"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950127",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1af-caa8-4f5f-9195-1b6f950d210f",
        "value": "91.185.209.164"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950127",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1af-e370-4974-8ef2-1b6f950d210f",
        "value": "94.73.150.60"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950128",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "57dab1b0-47a0-43ab-85dd-1b6f950d210f",
        "value": "97.74.144.193"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950128",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1b0-c87c-4853-99b6-1b6f950d210f",
        "value": "allovercoupon.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950129",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1b1-d25c-4c61-989c-1b6f950d210f",
        "value": "bet4good.org"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950129",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1b1-83c0-4d53-9d21-1b6f950d210f",
        "value": "bigfishcasting.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950130",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1b2-0d74-4927-a1cc-1b6f950d210f",
        "value": "charlcote1.net"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950130",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1b2-733c-455e-96f6-1b6f950d210f",
        "value": "delicefilm.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950131",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1b3-17f4-4194-af5c-1b6f950d210f",
        "value": "dendang.net"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950131",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1b3-c0d8-43cb-be68-1b6f950d210f",
        "value": "discoverstillwater.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950132",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57dab1b4-0504-4288-8218-1b6f950d210f",
        "value": "eiti.co.il"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950133",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1b5-6b40-4b55-a694-1b6f950d210f",
        "value": "electua.org"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950133",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1b5-674c-4463-b064-1b6f950d210f",
        "value": "hawaiipoliticalinfo.org"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950134",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1b6-31a0-463b-8e7e-1b6f950d210f",
        "value": "http://allovercoupon.com/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950134",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1b6-7210-4cb0-a80b-1b6f950d210f",
        "value": "http://bet4good.org/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950135",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1b7-fc80-4051-a5c9-1b6f950d210f",
        "value": "http://bigfishcasting.com/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950135",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1b7-b424-4367-9b13-1b6f950d210f",
        "value": "http://charlcote1.net/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950136",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1b8-aadc-46b6-9675-1b6f950d210f",
        "value": "http://delicefilm.com/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950137",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1b9-6a48-4846-bd9a-1b6f950d210f",
        "value": "http://dendang.net/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950137",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1b9-8088-47d1-871c-1b6f950d210f",
        "value": "http://discoverstillwater.com/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950138",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1ba-7b0c-4e05-91f3-1b6f950d210f",
        "value": "http://eiti.co.il/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950138",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1ba-b9c8-4a4d-97be-1b6f950d210f",
        "value": "http://electua.org/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950139",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1bb-01fc-41a7-8f0f-1b6f950d210f",
        "value": "http://hawaiipoliticalinfo.org/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950140",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1bc-09e0-4545-9632-1b6f950d210f",
        "value": "http://iandistudio.com/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950140",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1bc-e9b8-4b4f-8a0b-1b6f950d210f",
        "value": "http://insieutoc.com/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950140",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1bc-b9fc-4ff9-ae63-1b6f950d210f",
        "value": "http://jxbestextile.com/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950141",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1bd-5898-425f-aa17-1b6f950d210f",
        "value": "http://keratin.sk/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950142",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1be-35d0-4e35-b1bd-1b6f950d210f",
        "value": "http://kf-design.com/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950142",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1be-cc64-446f-9c54-1b6f950d210f",
        "value": "http://lacumpa.biz/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950143",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1bf-9824-4171-9270-1b6f950d210f",
        "value": "http://lowcostveterinarios.com/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950143",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1bf-5e98-4bc6-9dc8-1b6f950d210f",
        "value": "http://mika.tohmon.com/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950144",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1c0-5a24-460f-80a3-1b6f950d210f",
        "value": "http://pasbardejov.sk/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950144",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1c0-5764-40e0-b75a-1b6f950d210f",
        "value": "http://rimpro.ru/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950145",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1c1-0a20-4cf3-b24d-1b6f950d210f",
        "value": "http://techboss.net/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950145",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1c1-58ac-43d4-8448-1b6f950d210f",
        "value": "http://tommylam.com/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950146",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1c2-f004-47b6-8b71-1b6f950d210f",
        "value": "http://trudprom.ru/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950147",
        "to_ids": true,
        "type": "url",
        "uuid": "57dab1c3-8c5c-4d1b-8045-1b6f950d210f",
        "value": "http://zharikoff.ru/afdIJGY8766gyu"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950147",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1c3-ca74-46f7-a658-1b6f950d210f",
        "value": "iandistudio.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950148",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1c4-799c-45c4-b752-1b6f950d210f",
        "value": "insieutoc.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950148",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1c4-49f4-4aa8-b4fd-1b6f950d210f",
        "value": "jxbestextile.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950149",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1c5-c5b8-4a8f-a917-1b6f950d210f",
        "value": "keratin.sk"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950149",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1c5-885c-4b0a-a470-1b6f950d210f",
        "value": "kf-design.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950150",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1c6-dc10-423d-91f9-1b6f950d210f",
        "value": "lacumpa.biz"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950151",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1c7-708c-4e43-bc22-1b6f950d210f",
        "value": "lowcostveterinarios.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950151",
        "to_ids": true,
        "type": "hostname",
        "uuid": "57dab1c7-dfd4-454c-9a89-1b6f950d210f",
        "value": "mika.tohmon.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950152",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1c8-1f28-4e38-9cef-1b6f950d210f",
        "value": "pasbardejov.sk"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950152",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1c8-3450-4a42-bd96-1b6f950d210f",
        "value": "rimpro.ru"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950153",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1c9-2f70-47f8-b3dc-1b6f950d210f",
        "value": "techboss.net"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950153",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1c9-6c7c-4ca2-b592-1b6f950d210f",
        "value": "tommylam.com"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950154",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1ca-8a5c-41cc-9882-1b6f950d210f",
        "value": "trudprom.ru"
      },
      {
        "category": "Network activity",
        "comment": "download location",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1473950155",
        "to_ids": true,
        "type": "domain",
        "uuid": "57dab1cb-0d44-4106-ba58-1b6f950d210f",
        "value": "zharikoff.ru"
      }
    ]
  }
}