{
  "Event": {
    "analysis": "2",
    "date": "2016-01-20",
    "extends_uuid": "",
    "info": "OSINT Threat Actors Use Sketchy Dating Website to Launch New Home Router Attacks by Damballa",
    "publish_timestamp": "1454327855",
    "published": true,
    "threat_level_id": "1",
    "timestamp": "1454339053",
    "uuid": "56af46bd-e4d0-4bf8-aa4a-4228950d210f",
    "Orgc": {
      "name": "CthulhuSPRL.be",
      "uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f"
    },
    "Tag": [
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:white",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327523",
        "to_ids": false,
        "type": "link",
        "uuid": "56af46e3-bdb4-465e-af63-4caf950d210f",
        "value": "https://www.damballa.com/threat-actors-use-sketchy-dating-website-to-launch-new-home-router-attacks/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327551",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "56af46ff-c5b8-49c1-8fc1-4148950d210f",
        "value": "176.103.48.34"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327565",
        "to_ids": true,
        "type": "domain",
        "uuid": "56af470d-7d54-4c2a-a1f7-4956950d210f",
        "value": "sexyworldtouralliance.com"
      },
      {
        "category": "Network activity",
        "comment": "Domains registered with same IP",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327651",
        "to_ids": true,
        "type": "domain",
        "uuid": "56af4763-1e2c-4323-8edd-4841950d210f",
        "value": "allinceofsexuality.com"
      },
      {
        "category": "Network activity",
        "comment": "Domains registered with same IP",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327651",
        "to_ids": true,
        "type": "domain",
        "uuid": "56af4763-3fe4-4cdb-ac7d-4301950d210f",
        "value": "anniversaryaliancesex.com"
      },
      {
        "category": "Network activity",
        "comment": "Domains registered with same IP",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327651",
        "to_ids": true,
        "type": "domain",
        "uuid": "56af4763-0568-4df5-9e3c-4da1950d210f",
        "value": "superadultnat.com"
      },
      {
        "category": "Network activity",
        "comment": "Domains registered with same IP",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327652",
        "to_ids": true,
        "type": "domain",
        "uuid": "56af4764-0764-4ba6-bbe9-4b93950d210f",
        "value": "violationcyberatack.com"
      },
      {
        "category": "Attribution",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327706",
        "to_ids": false,
        "type": "whois-registrant-email",
        "uuid": "56af479a-41d4-4775-bb13-46fa950d210f",
        "value": "gordon_polo@yahoo.com"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327807",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56af47ff-5b08-42bf-98af-4312950d210f",
        "value": "2b82c715c2f1480b57e59bd7c55ef32db312e008"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327807",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56af47ff-a02c-493a-be12-40b3950d210f",
        "value": "c05bd53f91032f2c8cae509477d760537f014621"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327807",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56af47ff-c0bc-43aa-8408-41d8950d210f",
        "value": "9b22373e8cd7c6b087ca62d1b154faa04d684549"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327808",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56af4800-58ec-4b70-bd88-417d950d210f",
        "value": "7f168f8f17774feb5f3fe35d39c41564645afa24"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327808",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56af4800-c3b8-4287-8d93-4e87950d210f",
        "value": "92632bd26fb2828ddf5a86687c837ca734d0fbbf"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327808",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56af4800-91ac-4bd5-b7c5-4b49950d210f",
        "value": "9e61bb2da5e3b9760d992d052d824ffdd584e2ff"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327809",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56af4801-5fbc-42f2-b045-4276950d210f",
        "value": "ea24cded99b27ff44d2ed2688dea93e3ca0214c2"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454327834",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "56af481a-d628-41a1-994d-4d5b950d210f",
        "value": "176.103.49.34"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 9e61bb2da5e3b9760d992d052d824ffdd584e2ff",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339054",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56af73ee-88bc-466b-9a0c-450c02de0b81",
        "value": "c6a8c74711b1c6d38b7bb7b35772b80347f80cf16296e6439d21c877474ac2e6"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 9e61bb2da5e3b9760d992d052d824ffdd584e2ff",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339054",
        "to_ids": true,
        "type": "md5",
        "uuid": "56af73ee-afc0-46a9-b817-4d0d02de0b81",
        "value": "ec7378a79eb9ffd88098932a505f53cc"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339054",
        "to_ids": false,
        "type": "link",
        "uuid": "56af73ee-2a38-4a8e-b1c4-460802de0b81",
        "value": "https://www.virustotal.com/file/c6a8c74711b1c6d38b7bb7b35772b80347f80cf16296e6439d21c877474ac2e6/analysis/1453383429/"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 92632bd26fb2828ddf5a86687c837ca734d0fbbf",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339054",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56af73ee-2628-4579-8d87-424902de0b81",
        "value": "a42786bec02b889675fdca7ebcc533dbc5f8d93609b6cf110d965b75dd22c971"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 92632bd26fb2828ddf5a86687c837ca734d0fbbf",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339055",
        "to_ids": true,
        "type": "md5",
        "uuid": "56af73ef-9200-469e-ba8b-4d6202de0b81",
        "value": "d5c96a4f2e1e146a12f140f22b700333"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339055",
        "to_ids": false,
        "type": "link",
        "uuid": "56af73ef-9d38-47c6-80ee-498902de0b81",
        "value": "https://www.virustotal.com/file/a42786bec02b889675fdca7ebcc533dbc5f8d93609b6cf110d965b75dd22c971/analysis/1454058592/"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 7f168f8f17774feb5f3fe35d39c41564645afa24",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339055",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56af73ef-95e0-4e21-894c-4b6a02de0b81",
        "value": "794d07497f5b96efeb9428ac0fecd755878eaf906da6ffce14e940055fa7f17c"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 7f168f8f17774feb5f3fe35d39c41564645afa24",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339055",
        "to_ids": true,
        "type": "md5",
        "uuid": "56af73ef-4ac4-4873-b518-4ba402de0b81",
        "value": "7b8b829fd94f2a070543cc2c6bfc4040"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339056",
        "to_ids": false,
        "type": "link",
        "uuid": "56af73f0-9bf0-4865-a5c9-484402de0b81",
        "value": "https://www.virustotal.com/file/794d07497f5b96efeb9428ac0fecd755878eaf906da6ffce14e940055fa7f17c/analysis/1453383400/"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 9b22373e8cd7c6b087ca62d1b154faa04d684549",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339056",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56af73f0-91e8-4af7-bcc8-4cc002de0b81",
        "value": "fdb4fc6c833353ea0202fd751900f3ac498db5209e8ca2b8de8f8bfca1fe1fdd"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 9b22373e8cd7c6b087ca62d1b154faa04d684549",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339056",
        "to_ids": true,
        "type": "md5",
        "uuid": "56af73f0-e09c-4b96-8611-464602de0b81",
        "value": "bbf1327c1a5213b41a4d22c4b4806f7c"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339056",
        "to_ids": false,
        "type": "link",
        "uuid": "56af73f0-cb58-4238-9992-40f202de0b81",
        "value": "https://www.virustotal.com/file/fdb4fc6c833353ea0202fd751900f3ac498db5209e8ca2b8de8f8bfca1fe1fdd/analysis/1453383386/"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: c05bd53f91032f2c8cae509477d760537f014621",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339057",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56af73f1-15e4-47b3-adb7-413402de0b81",
        "value": "f12b086eaf3a190e7882167638bfc418b438d0e95b846dc2c3c1e7a092b1596e"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: c05bd53f91032f2c8cae509477d760537f014621",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339057",
        "to_ids": true,
        "type": "md5",
        "uuid": "56af73f1-d60c-4da3-81dc-400a02de0b81",
        "value": "514b7da4b811da11fe7033aea155dba6"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339057",
        "to_ids": false,
        "type": "link",
        "uuid": "56af73f1-b738-4032-b703-414202de0b81",
        "value": "https://www.virustotal.com/file/f12b086eaf3a190e7882167638bfc418b438d0e95b846dc2c3c1e7a092b1596e/analysis/1454330041/"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 2b82c715c2f1480b57e59bd7c55ef32db312e008",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339057",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56af73f1-2400-4eac-847e-495702de0b81",
        "value": "cf1bbcaf1e6902c09da35ffe6f9b93081575e7e6e2e4754684f88eb7bb8ec478"
      },
      {
        "category": "Artifacts dropped",
        "comment": "- Xchecked via VT: 2b82c715c2f1480b57e59bd7c55ef32db312e008",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339058",
        "to_ids": true,
        "type": "md5",
        "uuid": "56af73f2-0e8c-40a6-9355-478802de0b81",
        "value": "c44f2d8ad37c18ea84a99db584d6992d"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1454339058",
        "to_ids": false,
        "type": "link",
        "uuid": "56af73f2-a6ec-41a8-94ca-4ade02de0b81",
        "value": "https://www.virustotal.com/file/cf1bbcaf1e6902c09da35ffe6f9b93081575e7e6e2e4754684f88eb7bb8ec478/analysis/1453894645/"
      }
    ]
  }
}