{ "Event": { "analysis": "0", "date": "2016-09-20", "extends_uuid": "", "info": "Malspam 2016-09-20 (.hta in .zip) - campaign: \"\"", "publish_timestamp": "1474347876", "published": true, "threat_level_id": "3", "timestamp": "1474347285", "uuid": "57e0c08d-4330-42c0-9c8f-4c8d950d210f", "Orgc": { "name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f" }, "Tag": [ { "colour": "#ffffff", "name": "tlp:white" }, { "colour": "#3b7500", "name": "circl:incident-classification=\"malware\"" } ], "Attribute": [ { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347272", "to_ids": true, "type": "ip-dst", "uuid": "57e0c108-17a8-4064-ab4a-42c9950d210f", "value": "103.254.148.134" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347273", "to_ids": true, "type": "ip-dst", "uuid": "57e0c109-1fcc-4b56-82cd-4e95950d210f", "value": "119.59.103.81" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347273", "to_ids": true, "type": "ip-dst", "uuid": "57e0c109-c91c-4cbf-9062-4a6a950d210f", "value": "123.30.210.74" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347273", "to_ids": true, "type": "ip-dst", "uuid": "57e0c109-bb28-4bac-a7e2-448b950d210f", "value": "143.95.246.211" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347273", "to_ids": true, "type": "ip-dst", "uuid": "57e0c109-2f98-4fd8-9baf-4e2a950d210f", "value": "148.251.99.148" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347273", "to_ids": true, "type": "ip-dst", "uuid": "57e0c109-204c-4b2d-8e56-4ec0950d210f", "value": "173.236.105.50" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347274", "to_ids": true, "type": "ip-dst", "uuid": "57e0c10a-0914-405e-ba80-4d82950d210f", "value": "173.254.28.14" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347274", "to_ids": true, "type": "ip-dst", "uuid": "57e0c10a-084c-42e9-9af5-4d52950d210f", "value": "185.119.173.182" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347274", "to_ids": true, "type": "ip-dst", "uuid": "57e0c10a-ce2c-41de-92e3-482b950d210f", "value": "185.96.93.154" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347274", "to_ids": true, "type": "ip-dst", "uuid": "57e0c10a-32d4-4e9d-a80d-4ec7950d210f", "value": "198.46.82.242" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347275", "to_ids": true, "type": "ip-dst", "uuid": "57e0c10b-5a4c-4850-97da-4a8c950d210f", "value": "207.179.106.94" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347275", "to_ids": true, "type": "ip-dst", "uuid": "57e0c10b-cffc-4be4-a7a7-4d36950d210f", "value": "207.204.33.199" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347275", "to_ids": true, "type": "ip-dst", "uuid": "57e0c10b-3958-4fae-b387-4be8950d210f", "value": "45.55.141.237" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347275", "to_ids": true, "type": "ip-dst", "uuid": "57e0c10b-55d4-4fcb-9dba-4bf3950d210f", "value": "64.119.182.93" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347276", "to_ids": true, "type": "ip-dst", "uuid": "57e0c10c-cc20-445f-9309-40fc950d210f", "value": "69.89.31.79" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347276", "to_ids": true, "type": "ip-dst", "uuid": "57e0c10c-3f64-4b84-a1b0-4dc9950d210f", "value": "70.39.235.94" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347276", "to_ids": true, "type": "ip-dst", "uuid": "57e0c10c-8180-4666-8014-4efa950d210f", "value": "80.179.92.187" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347276", "to_ids": true, "type": "ip-dst", "uuid": "57e0c10c-c12c-4f10-b788-4a36950d210f", "value": "94.136.40.103" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347277", "to_ids": true, "type": "ip-dst", "uuid": "57e0c10d-2c60-4225-9c9f-4fde950d210f", "value": "94.73.150.110" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347277", "to_ids": true, "type": "domain", "uuid": "57e0c10d-f678-4ed6-b0ca-4fbd950d210f", "value": "binhminh-group.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347277", "to_ids": true, "type": "domain", "uuid": "57e0c10d-f13c-44d5-9615-4e3a950d210f", "value": "dealza.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347277", "to_ids": true, "type": "domain", "uuid": "57e0c10d-1440-411c-b2af-4283950d210f", "value": "elsoccer.org" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347277", "to_ids": true, "type": "domain", "uuid": "57e0c10d-9ea4-4ce6-96f3-49f3950d210f", "value": "gelecekdiyarbakirsigorta.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347278", "to_ids": true, "type": "url", "uuid": "57e0c10e-707c-408a-ba0a-4daa950d210f", "value": "http://binhminh-group.com/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347278", "to_ids": true, "type": "url", "uuid": "57e0c10e-e3a0-4115-a7fc-4988950d210f", "value": "http://dealza.com/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347278", "to_ids": true, "type": "url", "uuid": "57e0c10e-c57c-41c5-bf22-4c69950d210f", "value": "http://elsoccer.org/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347278", "to_ids": true, "type": "url", "uuid": "57e0c10e-6118-4962-bf40-479e950d210f", "value": "http://gelecekdiyarbakirsigorta.com/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347278", "to_ids": true, "type": "url", "uuid": "57e0c10e-53a4-4a78-b59e-4f61950d210f", "value": "http://hunt-magazine.com/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347279", "to_ids": true, "type": "url", "uuid": "57e0c10f-c78c-41b7-a3ad-42ea950d210f", "value": "http://isusip.com/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347279", "to_ids": true, "type": "url", "uuid": "57e0c10f-7b08-416d-bc3a-45b3950d210f", "value": "http://oilandgasukwireless.net/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347279", "to_ids": true, "type": "url", "uuid": "57e0c10f-d654-4c03-886f-42a4950d210f", "value": "http://rancho.org/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347279", "to_ids": true, "type": "url", "uuid": "57e0c10f-af3c-4f02-8f55-45d6950d210f", "value": "http://rennie-mackintosh-jewellery.co.uk/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347280", "to_ids": true, "type": "url", "uuid": "57e0c110-ae8c-404f-9da5-4f6e950d210f", "value": "http://roberttrocina.com/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347280", "to_ids": true, "type": "url", "uuid": "57e0c110-645c-4426-a3b7-4511950d210f", "value": "http://sbbsinfotech.com/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347280", "to_ids": true, "type": "url", "uuid": "57e0c110-66ac-4640-8369-4acd950d210f", "value": "http://schneebett.com/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347280", "to_ids": true, "type": "url", "uuid": "57e0c110-b99c-4f3d-8e53-4243950d210f", "value": "http://stirlingblack.com/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347281", "to_ids": true, "type": "url", "uuid": "57e0c111-f214-43da-88ad-4ecd950d210f", "value": "http://teknidataconsultores.com/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347281", "to_ids": true, "type": "url", "uuid": "57e0c111-b404-4144-95f9-432d950d210f", "value": "http://thomasduncanwatt.com/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347281", "to_ids": true, "type": "url", "uuid": "57e0c111-9068-4cd8-8cbc-4456950d210f", "value": "http://trenddatainc.com/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347281", "to_ids": true, "type": "url", "uuid": "57e0c111-cfe0-4dbc-82b7-49e7950d210f", "value": "http://worldpennyjar.com/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347281", "to_ids": true, "type": "url", "uuid": "57e0c111-4b68-445c-bdcd-4e2d950d210f", "value": "http://xn--41a.xn----8sbivjiocsggj.xn--p1ai/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347282", "to_ids": true, "type": "url", "uuid": "57e0c112-da70-4b20-8414-4c21950d210f", "value": "http://yesman.me/56f2gsu782desf" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347282", "to_ids": true, "type": "domain", "uuid": "57e0c112-738c-48e1-ab07-40a7950d210f", "value": "hunt-magazine.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347282", "to_ids": true, "type": "domain", "uuid": "57e0c112-b46c-4c0d-b26d-40fc950d210f", "value": "isusip.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347282", "to_ids": true, "type": "domain", "uuid": "57e0c112-4cd0-456c-ae66-459d950d210f", "value": "oilandgasukwireless.net" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347282", "to_ids": true, "type": "domain", "uuid": "57e0c112-8550-403d-a4ec-4a24950d210f", "value": "rancho.org" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347283", "to_ids": true, "type": "hostname", "uuid": "57e0c113-4c48-4dd2-9220-4d8e950d210f", "value": "rennie-mackintosh-jewellery.co.uk" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347283", "to_ids": true, "type": "domain", "uuid": "57e0c113-6f04-4c34-94ee-42cc950d210f", "value": "roberttrocina.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347283", "to_ids": true, "type": "domain", "uuid": "57e0c113-5530-4f78-b1cb-4d3c950d210f", "value": "sbbsinfotech.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347283", "to_ids": true, "type": "domain", "uuid": "57e0c113-8340-4d27-aea2-4dec950d210f", "value": "schneebett.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347284", "to_ids": true, "type": "domain", "uuid": "57e0c114-74d0-468b-b56e-4730950d210f", "value": "stirlingblack.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347284", "to_ids": true, "type": "domain", "uuid": "57e0c114-5f98-494b-8174-44de950d210f", "value": "teknidataconsultores.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347284", "to_ids": true, "type": "domain", "uuid": "57e0c114-8768-4564-bca8-41e1950d210f", "value": "thomasduncanwatt.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347284", "to_ids": true, "type": "domain", "uuid": "57e0c114-95a0-4332-ace3-4e53950d210f", "value": "trenddatainc.com" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347285", "to_ids": true, "type": "domain", "uuid": "57e0c115-fdc8-4301-9f13-4e62950d210f", "value": "worldpennyjar.com" }, { "category": "Payload delivery", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347285", "to_ids": true, "type": "filename", "uuid": "57e0c115-1870-466a-803a-4de2950d210f", "value": "xn--41a.xn----8sbivjiocsggj.xn--p1ai" }, { "category": "Network activity", "comment": "download location", "deleted": false, "disable_correlation": false, "timestamp": "1474347285", "to_ids": true, "type": "domain", "uuid": "57e0c115-9e70-42d6-a969-40ad950d210f", "value": "yesman.me" } ] } }