{ "type": "bundle", "id": "bundle--576a3d71-3fec-423a-86cd-3470950d210f", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T11:57:01.000Z", "modified": "2016-06-22T11:57:01.000Z", "name": "CIRCL", "identity_class": "organization" }, { "type": "report", "spec_version": "2.1", "id": "report--576a3d71-3fec-423a-86cd-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T11:57:01.000Z", "modified": "2016-06-22T11:57:01.000Z", "name": "Malspam (2016-06-22) - .js in .zip - Locky is back", "published": "2016-06-22T21:04:35Z", "object_refs": [ "indicator--576a3dfe-deac-44b1-be3a-3470950d210f", "indicator--576a3dff-b85c-4111-baae-3470950d210f", "indicator--576a3dff-7cac-4673-ba29-3470950d210f", "indicator--576a3e00-46d8-4e5a-ab2c-3470950d210f", "indicator--576a3e00-08b4-4b5b-b463-3470950d210f", "indicator--576a3e00-854c-4698-a535-3470950d210f", "indicator--576a3e01-d5a4-4245-b412-3470950d210f", "indicator--576a3e01-1c28-48fa-99c6-3470950d210f", "indicator--576a3e01-a028-42c1-9e1e-3470950d210f", "indicator--576a3e02-3f68-4816-b58d-3470950d210f", "indicator--576a3e02-d70c-40f0-898f-3470950d210f", "indicator--576a3e03-b7d4-45c9-b89f-3470950d210f", "indicator--576a3e03-1c10-4e0d-9085-3470950d210f", "indicator--576a3e03-a8ec-4ec1-9d47-3470950d210f", "indicator--576a3e04-6720-448b-8044-3470950d210f", "indicator--576a3e04-0de0-442d-a896-3470950d210f", "indicator--576a3e05-661c-4ecc-a66b-3470950d210f", "indicator--576a3e05-7420-4cea-a0f4-3470950d210f", "indicator--576a3e05-3454-4199-b3bc-3470950d210f", "indicator--576a3e06-d464-4a82-bf4d-3470950d210f", "indicator--576a3e06-5e54-4032-9837-3470950d210f", "indicator--576a3e06-282c-44c7-aa81-3470950d210f", "indicator--576a3e07-8700-4c9d-b959-3470950d210f", "indicator--576a3e07-5dcc-4ada-9e05-3470950d210f", "indicator--576a3e07-bec0-436f-907f-3470950d210f", "indicator--576a3e08-6fd4-479f-8ebb-3470950d210f", "indicator--576a3e08-52f0-4a14-b873-3470950d210f", "indicator--576a3e09-8a38-4a43-b37e-3470950d210f", "indicator--576a3e09-230c-40ab-8d22-3470950d210f", "indicator--576a3e09-9f00-4543-b685-3470950d210f", "indicator--576a3e0a-bd24-44ea-9f11-3470950d210f", "indicator--576a3e0a-a4a0-40b2-ba9c-3470950d210f", "indicator--576a3e0a-c424-47fa-8dab-3470950d210f", "indicator--576a3e0b-6c7c-448d-ad4d-3470950d210f", "indicator--576a3e0b-40a0-435a-9aff-3470950d210f", "indicator--576a3e0b-8334-45c6-aeef-3470950d210f", "indicator--576a3e0c-4624-4f3c-b809-3470950d210f", "indicator--576a3e0c-cff0-423a-afe3-3470950d210f", "indicator--576a3e0c-9454-4ceb-b66c-3470950d210f", "indicator--576a3e0d-c7e4-447c-9d48-3470950d210f", "indicator--576a3e0d-f920-48f2-bdbd-3470950d210f", "indicator--576a3e0d-c500-45ec-82c9-3470950d210f", "indicator--576a3e0e-8990-456a-bcfe-3470950d210f", "indicator--576a3e0e-d0d4-4a7a-9103-3470950d210f", "indicator--576a3e0f-d9c4-46cf-aa9e-3470950d210f", "indicator--576a3e0f-cd68-4032-b13f-3470950d210f", "indicator--576a3e0f-040c-4afc-9d69-3470950d210f", "indicator--576a3e10-2448-4560-8822-3470950d210f", "indicator--576a3e10-8a38-4024-9ad8-3470950d210f", "indicator--576a3e10-7a64-47e6-b30d-3470950d210f", "indicator--576a3e11-ec5c-4235-8f77-3470950d210f", "indicator--576a3e11-cf04-4b54-8ac4-3470950d210f", "indicator--576a3e11-cb48-431f-8841-3470950d210f", "indicator--576a3e12-3da0-40de-8931-3470950d210f", "indicator--576a3e12-9d34-4f37-8b60-3470950d210f", "indicator--576a3e13-0374-4f2a-9be8-3470950d210f", "indicator--576a3e13-0e04-45b4-bea9-3470950d210f", "indicator--576a3e14-a6d0-48d4-9670-3470950d210f", "indicator--576a3e14-0af8-47d3-afe8-3470950d210f", "indicator--576a3e15-f5d8-4659-8859-3470950d210f", "indicator--576a3e15-ac00-44d5-863b-3470950d210f", "indicator--576a3e15-ffc0-48b6-95f3-3470950d210f", "indicator--576a3e16-d5b0-4aa5-95c1-3470950d210f", "indicator--576a3e16-24f0-443a-ac2f-3470950d210f", "indicator--576a3e17-c86c-4e5e-a5fb-3470950d210f", "indicator--576a3e17-482c-4fa7-9aa1-3470950d210f", "indicator--576a3e18-66d8-4943-b8e1-3470950d210f", "indicator--576a3e18-72f8-48e0-96c3-3470950d210f", "indicator--576a3e18-4e4c-49e3-aa0f-3470950d210f", "indicator--576a3e19-58c8-4b2a-badc-3470950d210f", "indicator--576a3e19-0c4c-49ca-8cbb-3470950d210f", "indicator--576a3e1a-eb54-48b7-82fd-3470950d210f", "indicator--576a3e1a-2f90-4ebb-8384-3470950d210f", "indicator--576a3e1a-8bfc-4742-881b-3470950d210f", "indicator--576a3e1b-4698-473c-9088-3470950d210f", "indicator--576a3e1b-a39c-49db-9e65-3470950d210f", "indicator--576a3e1c-0740-4f98-90d7-3470950d210f", "indicator--576a3e1c-2f84-4dcb-9cfc-3470950d210f", "indicator--576a3e1c-40a4-480a-b5e1-3470950d210f", "indicator--576a3e1d-56d8-4819-8d0e-3470950d210f", "indicator--576a3e1d-d298-445b-a4d5-3470950d210f", "indicator--576a3e1d-3050-47ac-860b-3470950d210f", "indicator--576a3e1e-9030-4783-8544-3470950d210f", "indicator--576a3e1e-9c58-40da-89b5-3470950d210f", "indicator--576a3e1e-9520-45e1-adc8-3470950d210f", "indicator--576a3e1f-a974-4852-abd1-3470950d210f", "indicator--576a3e1f-8244-4a62-b337-3470950d210f", "indicator--576a3e20-95a4-4078-9cc1-3470950d210f", "indicator--576a3e20-18a0-4524-9377-3470950d210f", "indicator--576a3e20-18c8-4431-9969-3470950d210f", "indicator--576a3e21-73a4-4ca8-ba65-3470950d210f", "indicator--576a4056-9590-406d-9d0e-3cc0950d210f", "indicator--576a4057-2d80-4c5d-bdfe-3cc0950d210f", "indicator--576a4057-172c-4c1f-bbd7-3cc0950d210f", "indicator--576a4057-b564-4854-ad0a-3cc0950d210f", "indicator--576a4058-1590-418e-af5f-3cc0950d210f", "indicator--576a4058-d770-46cb-8818-3cc0950d210f", "indicator--576a4059-bc30-4692-8364-3cc0950d210f", "indicator--576a4059-407c-4552-a1ba-3cc0950d210f", "indicator--576a405a-326c-4c41-b2c4-3cc0950d210f", "indicator--576a405a-2d80-46b4-b88a-3cc0950d210f", "indicator--576a405b-e684-4a47-bb65-3cc0950d210f", "indicator--576a405b-0608-42b0-8724-3cc0950d210f", "indicator--576a405b-0474-4568-8bfd-3cc0950d210f", "indicator--576a405c-1ed8-4ab6-b6be-3cc0950d210f", "indicator--576a405c-dfd4-4477-b649-3cc0950d210f", "indicator--576a405d-79fc-4305-936e-3cc0950d210f", "indicator--576a405d-f8d8-490a-b26d-3cc0950d210f", "indicator--576a405e-ad7c-4e7d-a0f7-3cc0950d210f", "indicator--576a405e-9084-421d-8ef4-3cc0950d210f", "indicator--576a405f-4e08-496d-a502-3cc0950d210f", "indicator--576a405f-2fc0-4013-9cc7-3cc0950d210f", "indicator--576a4060-d638-412a-8ccd-3cc0950d210f", "indicator--576a4060-e690-47b5-8a35-3cc0950d210f", "indicator--576a4060-7074-4ff8-93ed-3cc0950d210f", "indicator--576a4061-97fc-431a-b0dd-3cc0950d210f", "indicator--576a4061-68a0-4f7b-b6a1-3cc0950d210f", "indicator--576a4062-5580-4679-9729-3cc0950d210f", "indicator--576a4062-80f0-4ac7-aa28-3cc0950d210f", "indicator--576a4063-f5e4-43ab-b2e3-3cc0950d210f", "indicator--576a4063-2458-43ba-a5db-3cc0950d210f", "indicator--576a4064-875c-476f-9535-3cc0950d210f", "indicator--576a4064-02d8-4758-b017-3cc0950d210f", "indicator--576a4064-b5e0-483c-9948-3cc0950d210f", "indicator--576a4065-937c-4259-9eb2-3cc0950d210f", "indicator--576a4065-2edc-4b52-8669-3cc0950d210f", "indicator--576a4066-8fc0-4bb2-8282-3cc0950d210f", "indicator--576a4066-10e0-4f53-aaa8-3cc0950d210f", "indicator--576a4067-4ff4-437e-91ac-3cc0950d210f", "indicator--576a4067-fca0-412f-a423-3cc0950d210f", "indicator--576a4068-9988-45ef-8960-3cc0950d210f", "indicator--576a4068-b26c-4a28-80c5-3cc0950d210f", "indicator--576a4069-c124-4ac5-a706-3cc0950d210f", "indicator--576a4069-9a44-44c6-bfa6-3cc0950d210f", "indicator--576a4069-5f08-4eec-863c-3cc0950d210f", "indicator--576a406a-a548-42a5-b6b0-3cc0950d210f", "indicator--576a406a-5bd0-4716-8cbd-3cc0950d210f", "indicator--576a40d5-6ac8-411b-9e38-3f73950d210f", "indicator--576a59b6-d7b0-4947-acb7-3471950d210f", "indicator--576a59b6-16e0-40bc-86e6-3471950d210f", "indicator--576a59b6-f600-4c62-9bbf-3471950d210f", "indicator--576a59b6-73ac-4613-b5f7-3471950d210f", "indicator--576a59b6-0178-49e3-b1f1-3471950d210f", "indicator--576a59b6-cfb0-48c9-a837-3471950d210f" ], "labels": [ "Threat-Report", "misp:tool=\"MISP-STIX-Converter\"", "circl:incident-classification=\"malware\"" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3dfe-deac-44b1-be3a-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:27:58.000Z", "modified": "2016-06-22T07:27:58.000Z", "description": "download location", "pattern": "[url:value = 'http://depaardestal.nl/z5htsm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:27:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3dff-b85c-4111-baae-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:27:59.000Z", "modified": "2016-06-22T07:27:59.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.30.213.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:27:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3dff-7cac-4673-ba29-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:27:59.000Z", "modified": "2016-06-22T07:27:59.000Z", "description": "download location", "pattern": "[url:value = 'http://jasoncoroy.com/szlzqni']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:27:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e00-46d8-4e5a-ab2c-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:00.000Z", "modified": "2016-06-22T07:28:00.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '162.213.157.131']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e00-08b4-4b5b-b463-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:00.000Z", "modified": "2016-06-22T07:28:00.000Z", "description": "download location", "pattern": "[url:value = 'http://stbb.pt/z59ifwj']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e00-854c-4698-a535-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:00.000Z", "modified": "2016-06-22T07:28:00.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '109.71.40.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e01-d5a4-4245-b412-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:01.000Z", "modified": "2016-06-22T07:28:01.000Z", "description": "download location", "pattern": "[url:value = 'http://handicraftmag.com/mrihc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e01-1c28-48fa-99c6-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:01.000Z", "modified": "2016-06-22T07:28:01.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '27.254.33.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e01-a028-42c1-9e1e-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:01.000Z", "modified": "2016-06-22T07:28:01.000Z", "description": "download location", "pattern": "[url:value = 'http://scpremiumbikes.com/3y1b0n4s']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e02-3f68-4816-b58d-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:02.000Z", "modified": "2016-06-22T07:28:02.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.6.198.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e02-d70c-40f0-898f-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:02.000Z", "modified": "2016-06-22T07:28:02.000Z", "description": "download location", "pattern": "[url:value = 'http://arabian-star.com/nay7jq7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e03-b7d4-45c9-b89f-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:03.000Z", "modified": "2016-06-22T07:28:03.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '129.121.5.191']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e03-1c10-4e0d-9085-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:03.000Z", "modified": "2016-06-22T07:28:03.000Z", "description": "download location", "pattern": "[url:value = 'http://innatesynergy.com/mrgdve3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e03-a8ec-4ec1-9d47-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:03.000Z", "modified": "2016-06-22T07:28:03.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.6.198.219']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e04-6720-448b-8044-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:04.000Z", "modified": "2016-06-22T07:28:04.000Z", "description": "download location", "pattern": "[url:value = 'http://easysupport.us/fl85xie']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e04-0de0-442d-a896-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:04.000Z", "modified": "2016-06-22T07:28:04.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '198.58.93.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e05-661c-4ecc-a66b-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:05.000Z", "modified": "2016-06-22T07:28:05.000Z", "description": "download location", "pattern": "[url:value = 'http://modelestrazackie.za.pl/zfww8nx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e05-7420-4cea-a0f4-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:05.000Z", "modified": "2016-06-22T07:28:05.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.203.99.113']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e05-3454-4199-b3bc-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:05.000Z", "modified": "2016-06-22T07:28:05.000Z", "description": "download location", "pattern": "[url:value = 'http://searchforamy.com/1fz0k9kp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e06-d464-4a82-bf4d-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:06.000Z", "modified": "2016-06-22T07:28:06.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '91.186.0.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e06-5e54-4032-9837-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:06.000Z", "modified": "2016-06-22T07:28:06.000Z", "description": "download location", "pattern": "[url:value = 'http://wasearch.us/6mm3hk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e06-282c-44c7-aa81-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:06.000Z", "modified": "2016-06-22T07:28:06.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '216.117.166.34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e07-8700-4c9d-b959-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:07.000Z", "modified": "2016-06-22T07:28:07.000Z", "description": "download location", "pattern": "[url:value = 'http://yourworshipspace.com/a3py3w']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e07-5dcc-4ada-9e05-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:07.000Z", "modified": "2016-06-22T07:28:07.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '160.153.77.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e07-bec0-436f-907f-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:07.000Z", "modified": "2016-06-22T07:28:07.000Z", "description": "download location", "pattern": "[url:value = 'http://ugmp.nazwa.pl/xkhhf2n']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e08-6fd4-479f-8ebb-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:08.000Z", "modified": "2016-06-22T07:28:08.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '77.55.97.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e08-52f0-4a14-b873-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:08.000Z", "modified": "2016-06-22T07:28:08.000Z", "description": "download location", "pattern": "[url:value = 'http://otolocphat.com/bv2n241r']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e09-8a38-4a43-b37e-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:09.000Z", "modified": "2016-06-22T07:28:09.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '123.30.145.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e09-230c-40ab-8d22-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:09.000Z", "modified": "2016-06-22T07:28:09.000Z", "description": "download location", "pattern": "[url:value = 'http://reginamargherita96.net/hhtvomcw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e09-9f00-4543-b685-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:09.000Z", "modified": "2016-06-22T07:28:09.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.205.38.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0a-bd24-44ea-9f11-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:10.000Z", "modified": "2016-06-22T07:28:10.000Z", "description": "download location", "pattern": "[url:value = 'http://testfacility.awsome.pl/zc73v']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0a-a4a0-40b2-ba9c-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:10.000Z", "modified": "2016-06-22T07:28:10.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.203.99.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0a-c424-47fa-8dab-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:10.000Z", "modified": "2016-06-22T07:28:10.000Z", "description": "download location", "pattern": "[url:value = 'http://clerici.info/g1sd5d59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0b-6c7c-448d-ad4d-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:11.000Z", "modified": "2016-06-22T07:28:11.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.205.38.24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0b-40a0-435a-9aff-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:11.000Z", "modified": "2016-06-22T07:28:11.000Z", "description": "download location", "pattern": "[url:value = 'http://marxforschung.de/tt18a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0b-8334-45c6-aeef-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:11.000Z", "modified": "2016-06-22T07:28:11.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '89.107.186.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0c-4624-4f3c-b809-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:12.000Z", "modified": "2016-06-22T07:28:12.000Z", "description": "download location", "pattern": "[url:value = 'http://kitchenconceptagra.com/5s9xb7j']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0c-cff0-423a-afe3-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:12.000Z", "modified": "2016-06-22T07:28:12.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '142.4.60.226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0c-9454-4ceb-b66c-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:12.000Z", "modified": "2016-06-22T07:28:12.000Z", "description": "download location", "pattern": "[url:value = 'http://vantagenetsvc.com/a7xssz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0d-c7e4-447c-9d48-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:13.000Z", "modified": "2016-06-22T07:28:13.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '23.229.133.197']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0d-f920-48f2-bdbd-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:13.000Z", "modified": "2016-06-22T07:28:13.000Z", "description": "download location", "pattern": "[url:value = 'http://rzezba-bierowiec.za.pl/y7fbo1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0d-c500-45ec-82c9-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:13.000Z", "modified": "2016-06-22T07:28:13.000Z", "description": "download location", "pattern": "[url:value = 'http://akdenizozalit.com/ixoxi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0e-8990-456a-bcfe-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:14.000Z", "modified": "2016-06-22T07:28:14.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.73.151.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0e-d0d4-4a7a-9103-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:14.000Z", "modified": "2016-06-22T07:28:14.000Z", "description": "download location", "pattern": "[url:value = 'http://unitedprogamers.za.pl/ylxt67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0f-d9c4-46cf-aa9e-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:15.000Z", "modified": "2016-06-22T07:28:15.000Z", "description": "download location", "pattern": "[url:value = 'http://204.232.192.84/abjvucr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0f-cd68-4032-b13f-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:15.000Z", "modified": "2016-06-22T07:28:15.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '204.232.192.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e0f-040c-4afc-9d69-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:15.000Z", "modified": "2016-06-22T07:28:15.000Z", "description": "download location", "pattern": "[url:value = 'http://samrhamburg.com/jrh9b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e10-2448-4560-8822-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:16.000Z", "modified": "2016-06-22T07:28:16.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '149.115.19.219']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e10-8a38-4024-9ad8-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:16.000Z", "modified": "2016-06-22T07:28:16.000Z", "description": "download location", "pattern": "[url:value = 'http://beluxfurniture.com/0jcxx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e10-7a64-47e6-b30d-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:16.000Z", "modified": "2016-06-22T07:28:16.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '144.76.82.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e11-ec5c-4235-8f77-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:17.000Z", "modified": "2016-06-22T07:28:17.000Z", "description": "download location", "pattern": "[url:value = 'http://racedayworld.com/808k8pd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e11-cf04-4b54-8ac4-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:17.000Z", "modified": "2016-06-22T07:28:17.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '23.229.189.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e11-cb48-431f-8841-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:17.000Z", "modified": "2016-06-22T07:28:17.000Z", "description": "download location", "pattern": "[url:value = 'http://totalsportnetwork.com/kpbrp2mq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e12-3da0-40de-8931-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:18.000Z", "modified": "2016-06-22T07:28:18.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.186.209.5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e12-9d34-4f37-8b60-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:18.000Z", "modified": "2016-06-22T07:28:18.000Z", "description": "download location", "pattern": "[url:value = 'http://fuji-mig.com/awcigpa1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e13-0374-4f2a-9be8-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:19.000Z", "modified": "2016-06-22T07:28:19.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '93.190.41.97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e13-0e04-45b4-bea9-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:19.000Z", "modified": "2016-06-22T07:28:19.000Z", "description": "download location", "pattern": "[url:value = 'http://pawelbuczynski.za.pl/z1q8u']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e14-a6d0-48d4-9670-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:20.000Z", "modified": "2016-06-22T07:28:20.000Z", "description": "download location", "pattern": "[url:value = 'http://ekonova.nazwa.pl/wc0coj']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e14-0af8-47d3-afe8-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:20.000Z", "modified": "2016-06-22T07:28:20.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '85.128.210.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e15-f5d8-4659-8859-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:21.000Z", "modified": "2016-06-22T07:28:21.000Z", "description": "download location", "pattern": "[url:value = 'http://cbactive.com/1sdfs']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e15-ac00-44d5-863b-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:21.000Z", "modified": "2016-06-22T07:28:21.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '23.229.171.33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e15-ffc0-48b6-95f3-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:21.000Z", "modified": "2016-06-22T07:28:21.000Z", "description": "download location", "pattern": "[url:value = 'http://passagegoldtravel.com/bqugo3qb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e16-d5b0-4aa5-95c1-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:22.000Z", "modified": "2016-06-22T07:28:22.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '23.229.182.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e16-24f0-443a-ac2f-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:22.000Z", "modified": "2016-06-22T07:28:22.000Z", "description": "download location", "pattern": "[url:value = 'http://iminlife.com/cqoanbzr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e17-c86c-4e5e-a5fb-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:23.000Z", "modified": "2016-06-22T07:28:23.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.40.143.233']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e17-482c-4fa7-9aa1-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:23.000Z", "modified": "2016-06-22T07:28:23.000Z", "description": "download location", "pattern": "[url:value = 'http://hrlpk.com/s5ibqz1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e18-66d8-4943-b8e1-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:24.000Z", "modified": "2016-06-22T07:28:24.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '203.124.43.226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e18-72f8-48e0-96c3-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:24.000Z", "modified": "2016-06-22T07:28:24.000Z", "description": "download location", "pattern": "[url:value = 'http://allchannel.net/lue6c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e18-4e4c-49e3-aa0f-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:24.000Z", "modified": "2016-06-22T07:28:24.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.73.146.80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e19-58c8-4b2a-badc-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:25.000Z", "modified": "2016-06-22T07:28:25.000Z", "description": "download location", "pattern": "[url:value = 'http://ft.dol.za.pl/ymsikgp7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e19-0c4c-49ca-8cbb-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:25.000Z", "modified": "2016-06-22T07:28:25.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.203.99.112']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1a-eb54-48b7-82fd-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:26.000Z", "modified": "2016-06-22T07:28:26.000Z", "description": "download location", "pattern": "[url:value = 'http://komplettraeder-24.de/w61qx92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1a-2f90-4ebb-8384-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:26.000Z", "modified": "2016-06-22T07:28:26.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '217.160.177.243']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1a-8bfc-4742-881b-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:26.000Z", "modified": "2016-06-22T07:28:26.000Z", "description": "download location", "pattern": "[url:value = 'http://pub-voiture.com/dcsjrjm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1b-4698-473c-9088-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:27.000Z", "modified": "2016-06-22T07:28:27.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '195.14.0.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1b-a39c-49db-9e65-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:27.000Z", "modified": "2016-06-22T07:28:27.000Z", "description": "download location", "pattern": "[url:value = 'http://ding-a-ling-tel.com/bazk3kao']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1c-0740-4f98-90d7-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:28.000Z", "modified": "2016-06-22T07:28:28.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '216.55.149.9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1c-2f84-4dcb-9cfc-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:28.000Z", "modified": "2016-06-22T07:28:28.000Z", "description": "download location", "pattern": "[url:value = 'http://infocuscreative.net/didt48j']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1c-40a4-480a-b5e1-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:28.000Z", "modified": "2016-06-22T07:28:28.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.186.200.134']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1d-56d8-4819-8d0e-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:29.000Z", "modified": "2016-06-22T07:28:29.000Z", "description": "download location", "pattern": "[url:value = 'http://stckwt.net/p4jlk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1d-d298-445b-a4d5-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:29.000Z", "modified": "2016-06-22T07:28:29.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.124.16.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1d-3050-47ac-860b-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:29.000Z", "modified": "2016-06-22T07:28:29.000Z", "description": "download location", "pattern": "[url:value = 'http://heavenboundministry.com/i7a59qj']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1e-9030-4783-8544-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:30.000Z", "modified": "2016-06-22T07:28:30.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.87.144.196']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1e-9c58-40da-89b5-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:30.000Z", "modified": "2016-06-22T07:28:30.000Z", "description": "download location", "pattern": "[url:value = 'http://wbksis.com/5mxl28il']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1e-9520-45e1-adc8-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:30.000Z", "modified": "2016-06-22T07:28:30.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.69.219.91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1f-a974-4852-abd1-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:31.000Z", "modified": "2016-06-22T07:28:31.000Z", "description": "download location", "pattern": "[url:value = 'http://percorsipsicoarte.com/6gz707c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e1f-8244-4a62-b337-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:31.000Z", "modified": "2016-06-22T07:28:31.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.205.38.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e20-95a4-4078-9cc1-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:32.000Z", "modified": "2016-06-22T07:28:32.000Z", "description": "download location", "pattern": "[url:value = 'http://futuretech-iq.net/koqpy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e20-18a0-4524-9377-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:32.000Z", "modified": "2016-06-22T07:28:32.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '160.153.73.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e20-18c8-4431-9969-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:32.000Z", "modified": "2016-06-22T07:28:32.000Z", "description": "download location", "pattern": "[url:value = 'http://hyip-all.com/9qwmc65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a3e21-73a4-4ca8-ba65-3470950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:28:33.000Z", "modified": "2016-06-22T07:28:33.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '91.239.232.79']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:28:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4056-9590-406d-9d0e-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:37:58.000Z", "modified": "2016-06-22T07:37:58.000Z", "description": "download location", "pattern": "[domain-name:value = 'depaardestal.nl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:37:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4057-2d80-4c5d-bdfe-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:37:59.000Z", "modified": "2016-06-22T07:37:59.000Z", "description": "download location", "pattern": "[domain-name:value = 'jasoncoroy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:37:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4057-172c-4c1f-bbd7-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:37:59.000Z", "modified": "2016-06-22T07:37:59.000Z", "description": "download location", "pattern": "[domain-name:value = 'stbb.pt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:37:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4057-b564-4854-ad0a-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:37:59.000Z", "modified": "2016-06-22T07:37:59.000Z", "description": "download location", "pattern": "[domain-name:value = 'handicraftmag.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:37:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4058-1590-418e-af5f-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:00.000Z", "modified": "2016-06-22T07:38:00.000Z", "description": "download location", "pattern": "[domain-name:value = 'scpremiumbikes.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4058-d770-46cb-8818-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:00.000Z", "modified": "2016-06-22T07:38:00.000Z", "description": "download location", "pattern": "[domain-name:value = 'arabian-star.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4059-bc30-4692-8364-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:01.000Z", "modified": "2016-06-22T07:38:01.000Z", "description": "download location", "pattern": "[domain-name:value = 'innatesynergy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4059-407c-4552-a1ba-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:01.000Z", "modified": "2016-06-22T07:38:01.000Z", "description": "download location", "pattern": "[domain-name:value = 'easysupport.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a405a-326c-4c41-b2c4-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:02.000Z", "modified": "2016-06-22T07:38:02.000Z", "description": "download location", "pattern": "[domain-name:value = 'modelestrazackie.za.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a405a-2d80-46b4-b88a-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:02.000Z", "modified": "2016-06-22T07:38:02.000Z", "description": "download location", "pattern": "[domain-name:value = 'searchforamy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a405b-e684-4a47-bb65-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:03.000Z", "modified": "2016-06-22T07:38:03.000Z", "description": "download location", "pattern": "[domain-name:value = 'wasearch.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a405b-0608-42b0-8724-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:03.000Z", "modified": "2016-06-22T07:38:03.000Z", "description": "download location", "pattern": "[domain-name:value = 'yourworshipspace.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a405b-0474-4568-8bfd-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:03.000Z", "modified": "2016-06-22T07:38:03.000Z", "description": "download location", "pattern": "[domain-name:value = 'ugmp.nazwa.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a405c-1ed8-4ab6-b6be-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:04.000Z", "modified": "2016-06-22T07:38:04.000Z", "description": "download location", "pattern": "[domain-name:value = 'otolocphat.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a405c-dfd4-4477-b649-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:04.000Z", "modified": "2016-06-22T07:38:04.000Z", "description": "download location", "pattern": "[domain-name:value = 'reginamargherita96.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a405d-79fc-4305-936e-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:05.000Z", "modified": "2016-06-22T07:38:05.000Z", "description": "download location", "pattern": "[domain-name:value = 'testfacility.awsome.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a405d-f8d8-490a-b26d-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:05.000Z", "modified": "2016-06-22T07:38:05.000Z", "description": "download location", "pattern": "[domain-name:value = 'clerici.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a405e-ad7c-4e7d-a0f7-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:06.000Z", "modified": "2016-06-22T07:38:06.000Z", "description": "download location", "pattern": "[domain-name:value = 'marxforschung.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a405e-9084-421d-8ef4-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:06.000Z", "modified": "2016-06-22T07:38:06.000Z", "description": "download location", "pattern": "[domain-name:value = 'kitchenconceptagra.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a405f-4e08-496d-a502-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:07.000Z", "modified": "2016-06-22T07:38:07.000Z", "description": "download location", "pattern": "[domain-name:value = 'vantagenetsvc.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a405f-2fc0-4013-9cc7-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:07.000Z", "modified": "2016-06-22T07:38:07.000Z", "description": "download location", "pattern": "[domain-name:value = 'rzezba-bierowiec.za.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4060-d638-412a-8ccd-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:08.000Z", "modified": "2016-06-22T07:38:08.000Z", "description": "download location", "pattern": "[domain-name:value = 'akdenizozalit.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4060-e690-47b5-8a35-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:08.000Z", "modified": "2016-06-22T07:38:08.000Z", "description": "download location", "pattern": "[domain-name:value = 'unitedprogamers.za.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4060-7074-4ff8-93ed-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:08.000Z", "modified": "2016-06-22T07:38:08.000Z", "description": "download location", "pattern": "[domain-name:value = 'samrhamburg.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4061-97fc-431a-b0dd-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:09.000Z", "modified": "2016-06-22T07:38:09.000Z", "description": "download location", "pattern": "[domain-name:value = 'beluxfurniture.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4061-68a0-4f7b-b6a1-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:09.000Z", "modified": "2016-06-22T07:38:09.000Z", "description": "download location", "pattern": "[domain-name:value = 'racedayworld.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4062-5580-4679-9729-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:10.000Z", "modified": "2016-06-22T07:38:10.000Z", "description": "download location", "pattern": "[domain-name:value = 'totalsportnetwork.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4062-80f0-4ac7-aa28-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:10.000Z", "modified": "2016-06-22T07:38:10.000Z", "description": "download location", "pattern": "[domain-name:value = 'fuji-mig.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4063-f5e4-43ab-b2e3-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:11.000Z", "modified": "2016-06-22T07:38:11.000Z", "description": "download location", "pattern": "[domain-name:value = 'pawelbuczynski.za.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4063-2458-43ba-a5db-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:11.000Z", "modified": "2016-06-22T07:38:11.000Z", "description": "download location", "pattern": "[domain-name:value = 'ekonova.nazwa.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4064-875c-476f-9535-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:12.000Z", "modified": "2016-06-22T07:38:12.000Z", "description": "download location", "pattern": "[domain-name:value = 'cbactive.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4064-02d8-4758-b017-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:12.000Z", "modified": "2016-06-22T07:38:12.000Z", "description": "download location", "pattern": "[domain-name:value = 'passagegoldtravel.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4064-b5e0-483c-9948-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:12.000Z", "modified": "2016-06-22T07:38:12.000Z", "description": "download location", "pattern": "[domain-name:value = 'iminlife.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4065-937c-4259-9eb2-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:13.000Z", "modified": "2016-06-22T07:38:13.000Z", "description": "download location", "pattern": "[domain-name:value = 'hrlpk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4065-2edc-4b52-8669-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:13.000Z", "modified": "2016-06-22T07:38:13.000Z", "description": "download location", "pattern": "[domain-name:value = 'allchannel.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4066-8fc0-4bb2-8282-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:14.000Z", "modified": "2016-06-22T07:38:14.000Z", "description": "download location", "pattern": "[domain-name:value = 'ft.dol.za.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4066-10e0-4f53-aaa8-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:14.000Z", "modified": "2016-06-22T07:38:14.000Z", "description": "download location", "pattern": "[domain-name:value = 'komplettraeder-24.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4067-4ff4-437e-91ac-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:15.000Z", "modified": "2016-06-22T07:38:15.000Z", "description": "download location", "pattern": "[domain-name:value = 'pub-voiture.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4067-fca0-412f-a423-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:15.000Z", "modified": "2016-06-22T07:38:15.000Z", "description": "download location", "pattern": "[domain-name:value = 'ding-a-ling-tel.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4068-9988-45ef-8960-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:16.000Z", "modified": "2016-06-22T07:38:16.000Z", "description": "download location", "pattern": "[domain-name:value = 'infocuscreative.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4068-b26c-4a28-80c5-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:16.000Z", "modified": "2016-06-22T07:38:16.000Z", "description": "download location", "pattern": "[domain-name:value = 'stckwt.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4069-c124-4ac5-a706-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:17.000Z", "modified": "2016-06-22T07:38:17.000Z", "description": "download location", "pattern": "[domain-name:value = 'heavenboundministry.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4069-9a44-44c6-bfa6-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:17.000Z", "modified": "2016-06-22T07:38:17.000Z", "description": "download location", "pattern": "[domain-name:value = 'wbksis.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a4069-5f08-4eec-863c-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:17.000Z", "modified": "2016-06-22T07:38:17.000Z", "description": "download location", "pattern": "[domain-name:value = 'percorsipsicoarte.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a406a-a548-42a5-b6b0-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:18.000Z", "modified": "2016-06-22T07:38:18.000Z", "description": "download location", "pattern": "[domain-name:value = 'futuretech-iq.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a406a-5bd0-4716-8cbd-3cc0950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:38:18.000Z", "modified": "2016-06-22T07:38:18.000Z", "description": "download location", "pattern": "[domain-name:value = 'hyip-all.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:38:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a40d5-6ac8-411b-9e38-3f73950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T07:40:05.000Z", "modified": "2016-06-22T07:40:05.000Z", "pattern": "[network-traffic:extensions.'http-request-ext'.request_header.'User-Agent' = 'User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T07:40:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"user-agent\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a59b6-d7b0-4947-acb7-3471950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T09:26:14.000Z", "modified": "2016-06-22T09:26:14.000Z", "description": "download location", "pattern": "[url:value = 'http://vinabuhmwoo.com/69udv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T09:26:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a59b6-16e0-40bc-86e6-3471950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T09:26:14.000Z", "modified": "2016-06-22T09:26:14.000Z", "description": "download location", "pattern": "[domain-name:value = 'vinabuhmwoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T09:26:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a59b6-f600-4c62-9bbf-3471950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T09:26:14.000Z", "modified": "2016-06-22T09:26:14.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '112.78.2.153']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T09:26:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a59b6-73ac-4613-b5f7-3471950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T09:26:14.000Z", "modified": "2016-06-22T09:26:14.000Z", "description": "download location", "pattern": "[url:value = 'http://aloprint.com/bk0f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T09:26:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a59b6-0178-49e3-b1f1-3471950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T09:26:14.000Z", "modified": "2016-06-22T09:26:14.000Z", "description": "download location", "pattern": "[domain-name:value = 'aloprint.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T09:26:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576a59b6-cfb0-48c9-a837-3471950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-06-22T09:26:14.000Z", "modified": "2016-06-22T09:26:14.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '123.242.226.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-06-22T09:26:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } } ] }