{
  "Event": {
    "analysis": "1",
    "date": "2017-09-11",
    "extends_uuid": "",
    "info": "M2M -  Malspam 2017-09-11 \"Email Invoice Requested\"",
    "publish_timestamp": "1505141141",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1505141131",
    "uuid": "59b6a0c8-ed80-4d1a-8693-4551950d210f",
    "Orgc": {
      "name": "CIRCL",
      "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:white",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:ransomware=\"Locky\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140936",
        "to_ids": true,
        "type": "md5",
        "uuid": "59b6a0c8-4d1c-4095-8d53-4d84950d210f",
        "value": "d4b05d9ecb82761df4b1e997c225c216"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140936",
        "to_ids": true,
        "type": "md5",
        "uuid": "59b6a0c8-31c4-4cfe-8ac9-4e50950d210f",
        "value": "6a9181b6e3cb369bdca58c1b98353fa7"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140937",
        "to_ids": true,
        "type": "md5",
        "uuid": "59b6a0c9-4330-4e20-be0d-4251950d210f",
        "value": "fb349ce628eadfd3e56f0bc8f8db6947"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140937",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0c9-14f4-4295-8453-420b950d210f",
        "value": "http://1.babybrain.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140937",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0c9-ecf8-444f-95ef-4433950d210f",
        "value": "1.babybrain.ru"
      },
      {
        "category": "Network activity",
        "comment": "1.babybrain.ru",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140938",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0ca-30c8-4356-ab1b-4e98950d210f",
        "value": "81.177.139.92"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140938",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0ca-e1cc-4527-a3e3-4133950d210f",
        "value": "http://ar777.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140938",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0ca-0324-4a60-b382-4d35950d210f",
        "value": "ar777.ru"
      },
      {
        "category": "Network activity",
        "comment": "ar777.ru",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140938",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0ca-f8a0-4aaf-89ef-4f8b950d210f",
        "value": "151.248.118.201"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140938",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0ca-777c-4991-8c6c-455a950d210f",
        "value": "http://atm-digital.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140939",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0cb-60c8-4f86-8431-48da950d210f",
        "value": "atm-digital.ru"
      },
      {
        "category": "Network activity",
        "comment": "atm-digital.ru",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140939",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0cb-bfa0-46c6-b073-4732950d210f",
        "value": "188.225.77.99"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140939",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0cb-2614-4ff0-be35-45ba950d210f",
        "value": "http://avtomir2.rbs62.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140940",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0cc-8c68-4fe6-8340-4630950d210f",
        "value": "avtomir2.rbs62.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140940",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0cc-dfd0-4134-bad7-fc5a950d210f",
        "value": "http://bestclines.1234max.com/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140941",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0cd-1604-41c5-b644-4856950d210f",
        "value": "bestclines.1234max.com"
      },
      {
        "category": "Network activity",
        "comment": "bestclines.1234max.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140941",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0cd-de90-4961-a7bb-4f85950d210f",
        "value": "5.189.167.10"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140941",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0cd-e25c-47ea-bb21-4634950d210f",
        "value": "http://biohazard.net-live.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140941",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0cd-e230-470f-8245-4df3950d210f",
        "value": "biohazard.net-live.ru"
      },
      {
        "category": "Network activity",
        "comment": "biohazard.net-live.ru",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140942",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0ce-5bc8-4564-83c5-4921950d210f",
        "value": "188.244.34.63"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140942",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0ce-3348-4d6f-afab-4751950d210f",
        "value": "http://bip32.1234max.com/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140942",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0ce-b48c-4612-aa7c-4aa5950d210f",
        "value": "bip32.1234max.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140943",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0cf-094c-4e99-afbd-4cee950d210f",
        "value": "http://civ.net-live.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140943",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0cf-4e14-44d9-9fbb-fc5a950d210f",
        "value": "civ.net-live.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140943",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0cf-ade8-4e24-86fc-4ab6950d210f",
        "value": "http://cyberline-tech.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140943",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0cf-1798-4e79-b4d6-40d3950d210f",
        "value": "cyberline-tech.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140944",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d0-0fe4-4e59-81a2-4399950d210f",
        "value": "http://dice.1234max.com/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140944",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d0-a41c-444f-ad94-4b2e950d210f",
        "value": "dice.1234max.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140944",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d0-2010-4efd-a111-4df1950d210f",
        "value": "http://ecers.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140945",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d1-b184-4081-a883-4e01950d210f",
        "value": "ecers.ru"
      },
      {
        "category": "Network activity",
        "comment": "ecers.ru",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140945",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0d1-6488-48cd-b879-4dd4950d210f",
        "value": "78.110.50.125"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140945",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d1-504c-4ef1-8a3b-46f6950d210f",
        "value": "http://edtrend.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140945",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d1-6e68-41eb-837d-4543950d210f",
        "value": "edtrend.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140946",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d2-ca20-4b80-b51d-437d950d210f",
        "value": "http://edu.ecers.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140946",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d2-cea0-4524-ad2f-468c950d210f",
        "value": "edu.ecers.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140946",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d2-aac8-4ac2-a78c-4c7a950d210f",
        "value": "http://fil.rbs62.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140947",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d3-27b0-478a-9b34-4938950d210f",
        "value": "fil.rbs62.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140947",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d3-1844-477e-960c-4d9e950d210f",
        "value": "http://holdtime.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140947",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d3-4768-4a4c-bc34-4661950d210f",
        "value": "holdtime.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140947",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d3-3e28-4bf8-b59a-478b950d210f",
        "value": "http://isp.mgpu.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140948",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d4-c908-4c9b-8269-4996950d210f",
        "value": "isp.mgpu.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140949",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d5-a2f8-49e2-9d44-4f5d950d210f",
        "value": "http://k1000.rbs62.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140949",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d5-996c-4d96-9187-4446950d210f",
        "value": "k1000.rbs62.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140949",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d5-179c-43ce-8b15-4925950d210f",
        "value": "http://kancmarkt.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140949",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d5-ea8c-4e72-a592-497b950d210f",
        "value": "kancmarkt.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140950",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d6-4a00-4421-a69a-4900950d210f",
        "value": "http://lum0s.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140950",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d6-d464-47ad-8528-4a17950d210f",
        "value": "lum0s.ru"
      },
      {
        "category": "Network activity",
        "comment": "lum0s.ru",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140950",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0d7-4118-46e4-b6d8-450c950d210f",
        "value": "81.177.141.172"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140951",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d7-dcb4-40c1-8bb5-45d1950d210f",
        "value": "http://mama.holdtime.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140951",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d7-840c-4206-9d05-4373950d210f",
        "value": "mama.holdtime.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140951",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d7-ffb4-446e-a3db-4804950d210f",
        "value": "http://martinagebhardt.hu/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140951",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d7-a91c-4b57-b40f-43d7950d210f",
        "value": "martinagebhardt.hu"
      },
      {
        "category": "Network activity",
        "comment": "martinagebhardt.hu",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140952",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0d8-44c0-46db-96c7-47e0950d210f",
        "value": "95.85.29.52"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140952",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d8-313c-4379-85d1-449e950d210f",
        "value": "http://molapple.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140952",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d8-f374-4112-ae52-4db0950d210f",
        "value": "molapple.ru"
      },
      {
        "category": "Network activity",
        "comment": "molapple.ru",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140952",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0d8-0d14-49df-9398-457c950d210f",
        "value": "77.108.83.244"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140953",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d9-c9ec-4db2-8fe4-43bc950d210f",
        "value": "http://old.tsg-upravdom.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140953",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d9-4a08-4ed3-8d3d-49d7950d210f",
        "value": "old.tsg-upravdom.ru"
      },
      {
        "category": "Network activity",
        "comment": "old.tsg-upravdom.ru",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140953",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0d9-f21c-4f54-ba95-4801950d210f",
        "value": "81.177.141.82"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140953",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0d9-5800-49b8-a329-47fc950d210f",
        "value": "http://portal.rbs62.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140953",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0d9-25f0-4b07-94fb-4f8d950d210f",
        "value": "portal.rbs62.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140954",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0da-ece4-46a9-bee9-4567950d210f",
        "value": "http://proxy.tor4.biz/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140954",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0da-218c-4dd0-a37c-4467950d210f",
        "value": "proxy.tor4.biz"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140954",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0da-7224-40ba-a138-4101950d210f",
        "value": "http://ptr-spb.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140955",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0db-f858-4efa-85c3-414a950d210f",
        "value": "ptr-spb.ru"
      },
      {
        "category": "Network activity",
        "comment": "ptr-spb.ru",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140955",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0db-24e0-4a1f-9c49-4dd1950d210f",
        "value": "188.127.230.15"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140955",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0db-bb48-4fa0-b787-405c950d210f",
        "value": "http://rbs62.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140955",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0db-aa78-4a68-8c2f-44ee950d210f",
        "value": "rbs62.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140956",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0dc-8e58-4e24-82b1-4356950d210f",
        "value": "http://reicon.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140956",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0dc-a0e0-4932-8ed0-4e51950d210f",
        "value": "reicon.ru"
      },
      {
        "category": "Network activity",
        "comment": "reicon.ru",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140956",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0dc-ec6c-43ea-bc9f-474b950d210f",
        "value": "109.120.162.26"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140956",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0dc-d618-4f65-8155-4946950d210f",
        "value": "http://renych.net-live.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140957",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0dd-8198-40fb-926e-fc5a950d210f",
        "value": "renych.net-live.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140957",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0dd-789c-41e8-960d-452b950d210f",
        "value": "http://rp.holdtime.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140957",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0dd-94c0-473e-b353-4115950d210f",
        "value": "rp.holdtime.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140958",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0de-89a4-4ef4-aee9-4654950d210f",
        "value": "http://scripts.tor4.biz/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140958",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0de-491c-4cef-bcd5-49c1950d210f",
        "value": "scripts.tor4.biz"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140959",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0df-e08c-4675-af62-4dd9950d210f",
        "value": "http://shtamp.rbs62.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140959",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0df-f4b8-4afc-9af1-fc5a950d210f",
        "value": "shtamp.rbs62.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140959",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0df-b060-4fc5-bdf7-41fb950d210f",
        "value": "http://sptorgsib.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140959",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0df-4e6c-4cf4-89e1-47eb950d210f",
        "value": "sptorgsib.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140960",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0e0-bac0-40e0-896f-4310950d210f",
        "value": "http://team.givati.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140960",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0e0-cf3c-4b2f-a9a0-4c76950d210f",
        "value": "team.givati.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140960",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0e0-df78-4e27-aeff-4566950d210f",
        "value": "http://test.holdtime.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140960",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0e0-578c-4f5c-b96b-4123950d210f",
        "value": "test.holdtime.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140961",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0e1-3a3c-46f1-bbf6-47ad950d210f",
        "value": "http://thenovelgroup.com/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140961",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0e1-352c-49c0-b4f2-4836950d210f",
        "value": "thenovelgroup.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140962",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0e2-ad14-4539-8b8a-4926950d210f",
        "value": "http://tor4.biz/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140962",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0e2-4194-4589-9e25-4309950d210f",
        "value": "tor4.biz"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140962",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0e2-4314-4f08-b111-4378950d210f",
        "value": "http://triumf.rbs62.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140962",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0e3-7d38-4f81-b69d-4efc950d210f",
        "value": "triumf.rbs62.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140963",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0e3-8f50-4d86-9f27-4ee7950d210f",
        "value": "http://umo.holdtime.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140963",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0e3-38b8-48a3-aaf3-409c950d210f",
        "value": "umo.holdtime.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140963",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0e3-229c-4cae-9a37-49a2950d210f",
        "value": "http://urstab.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140964",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0e4-6a64-40a8-bef9-4ec4950d210f",
        "value": "urstab.ru"
      },
      {
        "category": "Network activity",
        "comment": "urstab.ru",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140964",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0e4-ba90-4c39-8f0f-4fbd950d210f",
        "value": "81.177.135.41"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140964",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0e4-361c-4c7b-881e-4f71950d210f",
        "value": "http://visa-sport.ru/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140964",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0e4-5a2c-4651-b824-420a950d210f",
        "value": "visa-sport.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140965",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0e5-2dd0-4983-8f0d-47e0950d210f",
        "value": "http://webmail.tor4.biz/w/"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140965",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0e5-ec10-4f6c-958b-410b950d210f",
        "value": "webmail.tor4.biz"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140965",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0e5-3da0-4036-9cfa-424c950d210f",
        "value": "http://wittinhohemmo.net/load.php"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140966",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0e6-d2c0-44f8-9f1d-fc5a950d210f",
        "value": "wittinhohemmo.net"
      },
      {
        "category": "Network activity",
        "comment": "wittinhohemmo.net",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140966",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0e6-3bb0-473e-801e-4d9e950d210f",
        "value": "47.88.55.29"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140966",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0e6-b9c8-45b0-98c4-4077950d210f",
        "value": "http://phuket-olivia-yoga.com/isklsvx.exe"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140967",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0e7-9dfc-43db-b96b-4961950d210f",
        "value": "phuket-olivia-yoga.com"
      },
      {
        "category": "Network activity",
        "comment": "phuket-olivia-yoga.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140967",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0e7-444c-4a19-94f3-4004950d210f",
        "value": "208.86.184.66"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140967",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0e7-f7fc-4ba2-acaa-40c2950d210f",
        "value": "http://setincon.com/brpxsfr.exe"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140967",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0e7-0a90-43bb-b195-47ed950d210f",
        "value": "setincon.com"
      },
      {
        "category": "Network activity",
        "comment": "setincon.com",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140968",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0e8-2b18-43c7-beec-49f9950d210f",
        "value": "64.6.250.196"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140968",
        "to_ids": false,
        "type": "url",
        "uuid": "59b6a0e8-df70-413c-bf5d-4038950d210f",
        "value": "http://188.127.239.10/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140969",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0e9-b694-463b-982f-fc5a950d210f",
        "value": "188.127.239.10"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140969",
        "to_ids": false,
        "type": "url",
        "uuid": "59b6a0e9-faf0-47cd-8fce-408a950d210f",
        "value": "http://185.67.2.156/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140969",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0e9-c660-46cf-ba0c-40c3950d210f",
        "value": "185.67.2.156"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140969",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0e9-8a6c-4da4-8071-4776950d210f",
        "value": "http://hcpedowpqrgw.biz/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140969",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0e9-1ae0-4629-a9ac-456e950d210f",
        "value": "hcpedowpqrgw.biz"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140970",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0ea-d034-493e-9f02-43d2950d210f",
        "value": "http://vkhwgkp.biz/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140970",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0ea-8b50-439f-b3dc-421a950d210f",
        "value": "vkhwgkp.biz"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140970",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0ea-db5c-45e6-95e6-4fe9950d210f",
        "value": "http://evruhqgfyyw.pl/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140970",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0ea-5360-4b1a-9c87-41be950d210f",
        "value": "evruhqgfyyw.pl"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140971",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0eb-efe0-487a-89d8-477e950d210f",
        "value": "http://ybtjrjdtkxeakbcre.biz/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140971",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0eb-e9e8-44ea-89dc-4e48950d210f",
        "value": "ybtjrjdtkxeakbcre.biz"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140971",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0eb-0880-4327-baa2-40dc950d210f",
        "value": "http://daohevtnaju.biz/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140971",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0eb-a70c-4a23-af70-432c950d210f",
        "value": "daohevtnaju.biz"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140971",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0eb-9cec-4666-8785-4290950d210f",
        "value": "http://giogbxgijr.pw/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140972",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0ec-03f0-493f-8daf-4ac2950d210f",
        "value": "giogbxgijr.pw"
      },
      {
        "category": "Network activity",
        "comment": "giogbxgijr.pw",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140972",
        "to_ids": false,
        "type": "ip-dst",
        "uuid": "59b6a0ec-769c-4be2-b54d-48c1950d210f",
        "value": "141.8.226.58"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140972",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0ec-424c-407d-80ac-49a6950d210f",
        "value": "http://dljyopb.org/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140972",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0ec-bcb0-40d8-af8b-461a950d210f",
        "value": "dljyopb.org"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140972",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0ec-6cf4-451f-b949-43fa950d210f",
        "value": "http://mdojgtygelmlfxmiu.work/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140973",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0ed-aa4c-4b1a-8729-4535950d210f",
        "value": "mdojgtygelmlfxmiu.work"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140973",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0ed-67b4-48d3-9a61-4781950d210f",
        "value": "http://cykyqrpomfks.ru/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140973",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0ed-3d3c-470e-accb-fc5a950d210f",
        "value": "cykyqrpomfks.ru"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140973",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0ed-c0c0-45a4-8dec-4a6b950d210f",
        "value": "http://qjxyuqlikgmkagbns.info/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140974",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0ee-f498-4980-8420-4941950d210f",
        "value": "qjxyuqlikgmkagbns.info"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140974",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0ee-043c-4aae-be8a-4f5d950d210f",
        "value": "http://oxqtrmlafwhumnni.info/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140974",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0ee-a400-4701-a612-44a6950d210f",
        "value": "oxqtrmlafwhumnni.info"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140975",
        "to_ids": true,
        "type": "url",
        "uuid": "59b6a0ef-0140-44c4-85bd-401f950d210f",
        "value": "http://nxlrplajhv.biz/imageload.cgi"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1505140975",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59b6a0ef-1634-4dc4-9471-42fa950d210f",
        "value": "nxlrplajhv.biz"
      }
    ]
  }
}