{ "type": "bundle", "id": "bundle--57c4240d-f048-4702-9aed-800e950d210f", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:05:17.000Z", "modified": "2016-08-29T12:05:17.000Z", "name": "CIRCL", "identity_class": "organization" }, { "type": "report", "spec_version": "2.1", "id": "report--57c4240d-f048-4702-9aed-800e950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:05:17.000Z", "modified": "2016-08-29T12:05:17.000Z", "name": "Malspam 2016-08-29 (.js in .zip) - campaign: \"Commission\"", "published": "2016-08-29T12:05:34Z", "object_refs": [ "indicator--57c42464-a7c0-4386-92b9-7a52950d210f", "indicator--57c42465-07fc-48d2-84ce-7a52950d210f", "indicator--57c42465-b728-4caa-b954-7a52950d210f", "indicator--57c42465-4680-4f1a-96cc-7a52950d210f", "indicator--57c42465-4ab0-4805-b2ab-7a52950d210f", "indicator--57c42465-a2c0-437a-bcd4-7a52950d210f", "indicator--57c42466-a234-4ecf-900b-7a52950d210f", "indicator--57c42466-ad78-43df-9e81-7a52950d210f", "indicator--57c42466-d5e4-4bf8-9f66-7a52950d210f", "indicator--57c42466-e710-46de-957e-7a52950d210f", "indicator--57c42466-a05c-443c-8499-7a52950d210f", "indicator--57c42466-9c20-45e3-a431-7a52950d210f", "indicator--57c42467-247c-40d5-b715-7a52950d210f", "indicator--57c42467-a194-48c3-915c-7a52950d210f", "indicator--57c42467-f414-4922-93e2-7a52950d210f", "indicator--57c42467-b140-4e73-9984-7a52950d210f", "indicator--57c42467-3a0c-445f-9d99-7a52950d210f", "indicator--57c42468-8578-4c09-82ce-7a52950d210f", "indicator--57c42468-98a8-4987-80be-7a52950d210f", "indicator--57c42468-0674-4ac8-8b8a-7a52950d210f", "indicator--57c42468-6450-45fe-ad42-7a52950d210f", "indicator--57c42468-39e4-4f88-b576-7a52950d210f", "indicator--57c42469-b15c-4109-9d86-7a52950d210f", "indicator--57c42469-e998-4f47-b970-7a52950d210f", "indicator--57c42469-b354-481a-9641-7a52950d210f", "indicator--57c42469-446c-406f-b7c6-7a52950d210f", "indicator--57c42469-c7a0-41fd-9001-7a52950d210f", "indicator--57c42469-41dc-4176-82a8-7a52950d210f", "indicator--57c4246a-6104-4ffe-b5ef-7a52950d210f", "indicator--57c4246a-ca0c-40c4-82f1-7a52950d210f", "indicator--57c4246a-fcd4-4dab-b83c-7a52950d210f", "indicator--57c4246a-13f8-4079-b7af-7a52950d210f", "indicator--57c4246b-924c-421a-b26f-7a52950d210f", "indicator--57c4246b-e1f4-4b0b-90f2-7a52950d210f", "indicator--57c4246b-01f4-44be-8053-7a52950d210f", "indicator--57c4246c-31b0-4a74-ba53-7a52950d210f", "indicator--57c4246c-07c0-40a5-ba0f-7a52950d210f", "indicator--57c4246d-3f94-437c-abe4-7a52950d210f", "indicator--57c4246d-0270-488c-8616-7a52950d210f", "indicator--57c4246e-0790-4c7d-b4c4-7a52950d210f", "indicator--57c4246e-fda8-489b-b0f3-7a52950d210f", "indicator--57c4246e-7d34-4cea-bdcb-7a52950d210f", "indicator--57c4246f-1a68-4194-9592-7a52950d210f", "indicator--57c4246f-c280-41a5-8123-7a52950d210f", "indicator--57c42470-f7f0-4729-997a-7a52950d210f", "indicator--57c42470-9734-4bb8-9ff5-7a52950d210f", "indicator--57c42470-a154-45b5-8d67-7a52950d210f", "indicator--57c42471-f224-4986-a5c5-7a52950d210f", "indicator--57c42471-2f74-4bc2-8a73-7a52950d210f", "indicator--57c42472-3eac-4c2a-b645-7a52950d210f", "indicator--57c42472-510c-4584-abf2-7a52950d210f", "indicator--57c42473-5aa4-4509-8ef4-7a52950d210f", "indicator--57c42473-e740-47fd-af5d-7a52950d210f", "indicator--57c42473-8b54-4d85-9ce7-7a52950d210f", "indicator--57c42474-cb54-4037-a767-7a52950d210f", "indicator--57c42474-f088-492f-97b2-7a52950d210f", "indicator--57c42475-0c1c-46a6-84d5-7a52950d210f", "indicator--57c42475-50a0-4cd8-9816-7a52950d210f", "indicator--57c42475-9eb8-4307-aee1-7a52950d210f", "indicator--57c42476-acbc-485c-8c94-7a52950d210f", "indicator--57c42476-5650-4b18-9287-7a52950d210f", "indicator--57c42477-c898-4dc5-8764-7a52950d210f", "indicator--57c42477-ff0c-498c-8690-7a52950d210f", "indicator--57c42478-f9ec-4f04-b2b8-7a52950d210f", "indicator--57c42478-338c-455d-a5f3-7a52950d210f", "indicator--57c42478-0dd0-4b69-bafd-7a52950d210f", "indicator--57c42479-2dd0-4324-b55a-7a52950d210f", "indicator--57c42479-d1a4-4e50-b4ac-7a52950d210f", "indicator--57c4247a-0590-4a24-b023-7a52950d210f", "indicator--57c4247a-cd38-4147-af43-7a52950d210f", "indicator--57c4247b-c064-4f80-a84e-7a52950d210f", "indicator--57c4247b-f27c-4370-9f3f-7a52950d210f", "indicator--57c4247b-9dfc-411d-942c-7a52950d210f", "indicator--57c4247c-1d58-4e28-8e96-7a52950d210f", "indicator--57c4247c-c590-495e-a73a-7a52950d210f", "indicator--57c4247d-d278-4f17-b1bb-7a52950d210f", "indicator--57c4247d-1ebc-452d-8a41-7a52950d210f", "indicator--57c4247e-1594-4e61-9a3e-7a52950d210f", "indicator--57c4247e-1f9c-449d-905b-7a52950d210f", "indicator--57c4247e-1e48-48ab-a6c2-7a52950d210f", "indicator--57c4247f-3770-44d7-b624-7a52950d210f", "indicator--57c4247f-aefc-46ac-924c-7a52950d210f", "indicator--57c42480-49c4-496a-ac91-7a52950d210f", "indicator--57c42480-4fcc-48c6-bee8-7a52950d210f", "indicator--57c42480-d06c-4204-9977-7a52950d210f", "indicator--57c42481-3d80-4885-92e2-7a52950d210f", "indicator--57c42481-b52c-43f8-9628-7a52950d210f", "indicator--57c42482-48f4-44a4-afba-7a52950d210f", "indicator--57c42482-4408-4d60-ae40-7a52950d210f", "indicator--57c42483-6a70-42bc-9cc5-7a52950d210f", "indicator--57c42483-6cfc-4485-9928-7a52950d210f", "indicator--57c42483-406c-4bc6-ab0f-7a52950d210f", "indicator--57c42484-7bb4-40a6-971f-7a52950d210f", "indicator--57c42484-930c-40e7-97b4-7a52950d210f", "indicator--57c42485-a860-4139-967f-7a52950d210f", "indicator--57c42485-80c0-4545-91e4-7a52950d210f", "indicator--57c42486-f3a8-4859-b02e-7a52950d210f", "indicator--57c42486-f718-404b-af1a-7a52950d210f", "indicator--57c42486-3f50-4060-b9de-7a52950d210f", "indicator--57c42487-a620-4ad0-a79c-7a52950d210f", "indicator--57c42487-a09c-42be-838f-7a52950d210f", "indicator--57c42488-feac-4851-82d3-7a52950d210f", "indicator--57c42488-646c-479c-85b3-7a52950d210f", "indicator--57c42489-5fe4-4242-b203-7a52950d210f", "indicator--57c42489-f4f4-460c-8d36-7a52950d210f", "indicator--57c42489-2e3c-41d3-9834-7a52950d210f", "indicator--57c4248a-23e8-4299-967e-7a52950d210f", "indicator--57c4248a-3808-444c-8235-7a52950d210f", "indicator--57c4248b-1494-4261-bd7d-7a52950d210f", "indicator--57c4248b-cf58-4915-8b11-7a52950d210f", "indicator--57c4248c-aafc-4b75-9994-7a52950d210f", "indicator--57c4248c-2030-4d7c-a525-7a52950d210f", "indicator--57c4248c-eb08-4ed2-ac2a-7a52950d210f", "indicator--57c4248c-6e40-469d-9d6c-7a52950d210f", "indicator--57c4248c-66f4-486f-be0a-7a52950d210f", "indicator--57c4248c-5a98-4864-8e56-7a52950d210f", "indicator--57c4248d-9550-4c18-b886-7a52950d210f", "indicator--57c4248d-4e90-4b8c-9cc2-7a52950d210f", "indicator--57c4248d-9be0-4078-bb49-7a52950d210f", "indicator--57c4248d-6fb4-4fd0-af21-7a52950d210f", "indicator--57c4248d-7674-4f0e-bd1d-7a52950d210f", "indicator--57c4248e-fe58-46fb-ade2-7a52950d210f", "indicator--57c4248e-f1e4-4b7d-b95d-7a52950d210f", "observed-data--57c424fd-8364-4f4b-b502-7a55950d210f", "email-message--57c424fd-8364-4f4b-b502-7a55950d210f" ], "labels": [ "Threat-Report", "misp:tool=\"MISP-STIX-Converter\"", "circl:incident-classification=\"malware\"" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42464-a7c0-4386-92b9-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:44.000Z", "modified": "2016-08-29T12:02:44.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.232.35.136']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42465-07fc-48d2-84ce-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:45.000Z", "modified": "2016-08-29T12:02:45.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '109.237.132.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42465-b728-4caa-b954-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:45.000Z", "modified": "2016-08-29T12:02:45.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '112.140.42.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42465-4680-4f1a-96cc-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:45.000Z", "modified": "2016-08-29T12:02:45.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '151.1.159.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42465-4ab0-4805-b2ab-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:45.000Z", "modified": "2016-08-29T12:02:45.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '167.114.43.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42465-a2c0-437a-bcd4-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:45.000Z", "modified": "2016-08-29T12:02:45.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.33.52.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42466-a234-4ecf-900b-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:46.000Z", "modified": "2016-08-29T12:02:46.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.151.153.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42466-ad78-43df-9e81-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:46.000Z", "modified": "2016-08-29T12:02:46.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.144.125.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42466-d5e4-4bf8-9f66-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:46.000Z", "modified": "2016-08-29T12:02:46.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '195.130.132.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42466-e710-46de-957e-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:46.000Z", "modified": "2016-08-29T12:02:46.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '195.238.0.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42466-a05c-443c-8499-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:46.000Z", "modified": "2016-08-29T12:02:46.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '195.78.215.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42466-9c20-45e3-a431-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:46.000Z", "modified": "2016-08-29T12:02:46.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '200.83.4.62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42467-247c-40d5-b715-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:47.000Z", "modified": "2016-08-29T12:02:47.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '209.237.142.197']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42467-a194-48c3-915c-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:47.000Z", "modified": "2016-08-29T12:02:47.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '212.40.179.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42467-f414-4922-93e2-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:47.000Z", "modified": "2016-08-29T12:02:47.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.180.150.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42467-b140-4e73-9984-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:47.000Z", "modified": "2016-08-29T12:02:47.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.186.33.24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42467-3a0c-445f-9d99-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:47.000Z", "modified": "2016-08-29T12:02:47.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.205.40.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:47Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42468-8578-4c09-82ce-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:48.000Z", "modified": "2016-08-29T12:02:48.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.229.74.92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42468-98a8-4987-80be-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:48.000Z", "modified": "2016-08-29T12:02:48.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '216.251.43.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42468-0674-4ac8-8b8a-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:48.000Z", "modified": "2016-08-29T12:02:48.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '216.87.186.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42468-6450-45fe-ad42-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:48.000Z", "modified": "2016-08-29T12:02:48.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.39.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42468-39e4-4f88-b576-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:48.000Z", "modified": "2016-08-29T12:02:48.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '62.129.139.129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:48Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42469-b15c-4109-9d86-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:49.000Z", "modified": "2016-08-29T12:02:49.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '69.61.11.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42469-e998-4f47-b970-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:49.000Z", "modified": "2016-08-29T12:02:49.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '74.55.126.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42469-b354-481a-9641-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:49.000Z", "modified": "2016-08-29T12:02:49.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '80.150.6.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42469-446c-406f-b7c6-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:49.000Z", "modified": "2016-08-29T12:02:49.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '82.197.131.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42469-c7a0-41fd-9001-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:49.000Z", "modified": "2016-08-29T12:02:49.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '82.98.151.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42469-41dc-4176-82a8-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:49.000Z", "modified": "2016-08-29T12:02:49.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '83.223.104.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:49Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246a-6104-4ffe-b5ef-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:50.000Z", "modified": "2016-08-29T12:02:50.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '86.65.123.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246a-ca0c-40c4-82f1-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:50.000Z", "modified": "2016-08-29T12:02:50.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '91.216.107.228']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246a-fcd4-4dab-b83c-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:50.000Z", "modified": "2016-08-29T12:02:50.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.211.144.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246a-13f8-4079-b7af-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:50.000Z", "modified": "2016-08-29T12:02:50.000Z", "description": "download location", "pattern": "[domain-name:value = 'abcbureautique.abc.perso.neuf.fr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:50Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246b-924c-421a-b26f-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:51.000Z", "modified": "2016-08-29T12:02:51.000Z", "description": "download location", "pattern": "[domain-name:value = 'ach-dziennik.cba.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246b-e1f4-4b0b-90f2-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:51.000Z", "modified": "2016-08-29T12:02:51.000Z", "description": "download location", "pattern": "[domain-name:value = 'brothermalw.ws']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246b-01f4-44be-8053-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:51.000Z", "modified": "2016-08-29T12:02:51.000Z", "description": "download location", "pattern": "[domain-name:value = 'bypetra.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:51Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246c-31b0-4a74-ba53-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:52.000Z", "modified": "2016-08-29T12:02:52.000Z", "description": "download location", "pattern": "[domain-name:value = 'club.konjiki.jp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246c-07c0-40a5-ba0f-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:52.000Z", "modified": "2016-08-29T12:02:52.000Z", "description": "download location", "pattern": "[domain-name:value = 'clubofmalw.ws']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:52Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246d-3f94-437c-abe4-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:53.000Z", "modified": "2016-08-29T12:02:53.000Z", "description": "download location", "pattern": "[domain-name:value = 'conserpa.vtrbandaancha.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246d-0270-488c-8616-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:53.000Z", "modified": "2016-08-29T12:02:53.000Z", "description": "download location", "pattern": "[domain-name:value = 'csegurosural.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:53Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246e-0790-4c7d-b4c4-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:54.000Z", "modified": "2016-08-29T12:02:54.000Z", "description": "download location", "pattern": "[domain-name:value = 'df2lh.privat.t-online.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246e-fda8-489b-b0f3-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:54.000Z", "modified": "2016-08-29T12:02:54.000Z", "description": "download location", "pattern": "[domain-name:value = 'dussartconsulting.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246e-7d34-4cea-bdcb-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:54.000Z", "modified": "2016-08-29T12:02:54.000Z", "description": "download location", "pattern": "[domain-name:value = 'greentechdesign.ca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:54Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246f-1a68-4194-9592-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:55.000Z", "modified": "2016-08-29T12:02:55.000Z", "description": "download location", "pattern": "[domain-name:value = 'home-hartmann.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4246f-c280-41a5-8123-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:55.000Z", "modified": "2016-08-29T12:02:55.000Z", "description": "download location", "pattern": "[url:value = 'http://209.237.142.197/~p27j55uk/von90s']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:55Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42470-f7f0-4729-997a-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:56.000Z", "modified": "2016-08-29T12:02:56.000Z", "description": "download location", "pattern": "[url:value = 'http://69.61.11.216/fdmzmq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42470-9734-4bb8-9ff5-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:56.000Z", "modified": "2016-08-29T12:02:56.000Z", "description": "download location", "pattern": "[url:value = 'http://abcbureautique.abc.perso.neuf.fr/8j3y0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42470-a154-45b5-8d67-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:56.000Z", "modified": "2016-08-29T12:02:56.000Z", "description": "download location", "pattern": "[url:value = 'http://ach-dziennik.cba.pl/kag7pe6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:56Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42471-f224-4986-a5c5-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:57.000Z", "modified": "2016-08-29T12:02:57.000Z", "description": "download location", "pattern": "[url:value = 'http://brothermalw.ws/02qu80s4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42471-2f74-4bc2-8a73-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:57.000Z", "modified": "2016-08-29T12:02:57.000Z", "description": "download location", "pattern": "[url:value = 'http://bypetra.de/g7n6z5e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:57Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42472-3eac-4c2a-b645-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:58.000Z", "modified": "2016-08-29T12:02:58.000Z", "description": "download location", "pattern": "[url:value = 'http://club.konjiki.jp/n7mm85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42472-510c-4584-abf2-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:58.000Z", "modified": "2016-08-29T12:02:58.000Z", "description": "download location", "pattern": "[url:value = 'http://clubofmalw.ws/1gxqj']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:58Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42473-5aa4-4509-8ef4-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:59.000Z", "modified": "2016-08-29T12:02:59.000Z", "description": "download location", "pattern": "[url:value = 'http://conserpa.vtrbandaancha.net/xn8icbk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42473-e740-47fd-af5d-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:59.000Z", "modified": "2016-08-29T12:02:59.000Z", "description": "download location", "pattern": "[url:value = 'http://csegurosural.com/k57z6d70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42473-8b54-4d85-9ce7-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:02:59.000Z", "modified": "2016-08-29T12:02:59.000Z", "description": "download location", "pattern": "[url:value = 'http://df2lh.privat.t-online.de/lyu7el']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:02:59Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42474-cb54-4037-a767-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:00.000Z", "modified": "2016-08-29T12:03:00.000Z", "description": "download location", "pattern": "[url:value = 'http://dussartconsulting.com/ubo0v39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42474-f088-492f-97b2-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:00.000Z", "modified": "2016-08-29T12:03:00.000Z", "description": "download location", "pattern": "[url:value = 'http://greentechdesign.ca/frozkskt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:00Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42475-0c1c-46a6-84d5-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:01.000Z", "modified": "2016-08-29T12:03:01.000Z", "description": "download location", "pattern": "[url:value = 'http://home-hartmann.de/~bbc/r4h7crw1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42475-50a0-4cd8-9816-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:01.000Z", "modified": "2016-08-29T12:03:01.000Z", "description": "download location", "pattern": "[url:value = 'http://iesjaumei.edu.gva.es/oqbiac4e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42475-9eb8-4307-aee1-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:01.000Z", "modified": "2016-08-29T12:03:01.000Z", "description": "download location", "pattern": "[url:value = 'http://iistftp1.com/~associated/iiylg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:01Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42476-acbc-485c-8c94-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:02.000Z", "modified": "2016-08-29T12:03:02.000Z", "description": "download location", "pattern": "[url:value = 'http://jamesm.co.uk/yiow3jsm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42476-5650-4b18-9287-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:02.000Z", "modified": "2016-08-29T12:03:02.000Z", "description": "download location", "pattern": "[url:value = 'http://job.atspace.org/zshg9nj']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:02Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42477-c898-4dc5-8764-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:03.000Z", "modified": "2016-08-29T12:03:03.000Z", "description": "download location", "pattern": "[url:value = 'http://lokum1985.republika.pl/n4s5gv3l']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42477-ff0c-498c-8690-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:03.000Z", "modified": "2016-08-29T12:03:03.000Z", "description": "download location", "pattern": "[url:value = 'http://onlybest76.xyz/1r42t']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:03Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42478-f9ec-4f04-b2b8-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:04.000Z", "modified": "2016-08-29T12:03:04.000Z", "description": "download location", "pattern": "[url:value = 'http://rejoincomp2.in/1xo03ss']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42478-338c-455d-a5f3-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:04.000Z", "modified": "2016-08-29T12:03:04.000Z", "description": "download location", "pattern": "[url:value = 'http://rodewelshcobs.com/z2iitr6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42478-0dd0-4b69-bafd-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:04.000Z", "modified": "2016-08-29T12:03:04.000Z", "description": "download location", "pattern": "[url:value = 'http://sopranolady7.wang/5ofr5p2m']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:04Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42479-2dd0-4324-b55a-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:05.000Z", "modified": "2016-08-29T12:03:05.000Z", "description": "download location", "pattern": "[url:value = 'http://spic.bakufu.org/81rme51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42479-d1a4-4e50-b4ac-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:05.000Z", "modified": "2016-08-29T12:03:05.000Z", "description": "download location", "pattern": "[url:value = 'http://tpllaw.com/ly186ri']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:05Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247a-0590-4a24-b023-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:06.000Z", "modified": "2016-08-29T12:03:06.000Z", "description": "download location", "pattern": "[url:value = 'http://vanleeuwenvuurwerk.nl/nuajzmt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247a-cd38-4147-af43-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:06.000Z", "modified": "2016-08-29T12:03:06.000Z", "description": "download location", "pattern": "[url:value = 'http://vicariassicurazioni.it/unh8b7q']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:06Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247b-c064-4f80-a84e-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:07.000Z", "modified": "2016-08-29T12:03:07.000Z", "description": "download location", "pattern": "[url:value = 'http://wangmewang.name/5tr5xeey']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247b-f27c-4370-9f3f-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:07.000Z", "modified": "2016-08-29T12:03:07.000Z", "description": "download location", "pattern": "[url:value = 'http://www.agenziadini.it/gerewv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247b-9dfc-411d-942c-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:07.000Z", "modified": "2016-08-29T12:03:07.000Z", "description": "download location", "pattern": "[url:value = 'http://www.agriturismoigirasoli.it/5tr5xeey']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:07Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247c-1d58-4e28-8e96-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:08.000Z", "modified": "2016-08-29T12:03:08.000Z", "description": "download location", "pattern": "[url:value = 'http://www.bluedizioni.com/legvkru1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247c-c590-495e-a73a-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:08.000Z", "modified": "2016-08-29T12:03:08.000Z", "description": "download location", "pattern": "[url:value = 'http://www.caffematto.it/gt1thmq5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:08Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247d-d278-4f17-b1bb-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:09.000Z", "modified": "2016-08-29T12:03:09.000Z", "description": "download location", "pattern": "[url:value = 'http://www.caminettilcd.it/66tthne']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247d-1ebc-452d-8a41-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:09.000Z", "modified": "2016-08-29T12:03:09.000Z", "description": "download location", "pattern": "[url:value = 'http://www.carloabati.com/omt672']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:09Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247e-1594-4e61-9a3e-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:10.000Z", "modified": "2016-08-29T12:03:10.000Z", "description": "download location", "pattern": "[url:value = 'http://www.coozpn.cba.pl/9f0w1t3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247e-1f9c-449d-905b-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:10.000Z", "modified": "2016-08-29T12:03:10.000Z", "description": "download location", "pattern": "[url:value = 'http://www.csm94.org/v450ujsb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247e-1e48-48ab-a6c2-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:10.000Z", "modified": "2016-08-29T12:03:10.000Z", "description": "download location", "pattern": "[url:value = 'http://www.culturalheritagemanagement.org/tpnstb3j']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:10Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247f-3770-44d7-b624-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:11.000Z", "modified": "2016-08-29T12:03:11.000Z", "description": "download location", "pattern": "[url:value = 'http://www.dialektika.extra.hu/9lfdvl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4247f-aefc-46ac-924c-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:11.000Z", "modified": "2016-08-29T12:03:11.000Z", "description": "download location", "pattern": "[url:value = 'http://www.dondana.com/x6wgj']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:11Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42480-49c4-496a-ac91-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:12.000Z", "modified": "2016-08-29T12:03:12.000Z", "description": "download location", "pattern": "[url:value = 'http://www.fenit.net/jk2r7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42480-4fcc-48c6-bee8-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:12.000Z", "modified": "2016-08-29T12:03:12.000Z", "description": "download location", "pattern": "[url:value = 'http://www.lagottoromagnolo.be/wmy7t']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42480-d06c-4204-9977-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:12.000Z", "modified": "2016-08-29T12:03:12.000Z", "description": "download location", "pattern": "[url:value = 'http://www.mussystems.net/d6slacy9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:12Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42481-3d80-4885-92e2-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:13.000Z", "modified": "2016-08-29T12:03:13.000Z", "description": "download location", "pattern": "[url:value = 'http://www.planet-intv.com/rksd00']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42481-b52c-43f8-9628-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:13.000Z", "modified": "2016-08-29T12:03:13.000Z", "description": "download location", "pattern": "[url:value = 'http://www.ussanlorenzo.it/sbap9f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:13Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42482-48f4-44a4-afba-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:14.000Z", "modified": "2016-08-29T12:03:14.000Z", "description": "download location", "pattern": "[url:value = 'http://www.vanhoenacker.net/qcounnz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42482-4408-4d60-ae40-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:14.000Z", "modified": "2016-08-29T12:03:14.000Z", "description": "download location", "pattern": "[url:value = 'http://www.webcam-bild.de/65yoq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:14Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42483-6a70-42bc-9cc5-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:15.000Z", "modified": "2016-08-29T12:03:15.000Z", "description": "download location", "pattern": "[url:value = 'http://xelagon.50webs.org/8rxv3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42483-6cfc-4485-9928-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:15.000Z", "modified": "2016-08-29T12:03:15.000Z", "description": "download location", "pattern": "[domain-name:value = 'iesjaumei.edu.gva.es']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42483-406c-4bc6-ab0f-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:15.000Z", "modified": "2016-08-29T12:03:15.000Z", "description": "download location", "pattern": "[domain-name:value = 'iistftp1.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:15Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42484-7bb4-40a6-971f-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:16.000Z", "modified": "2016-08-29T12:03:16.000Z", "description": "download location", "pattern": "[domain-name:value = 'jamesm.co.uk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42484-930c-40e7-97b4-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:16.000Z", "modified": "2016-08-29T12:03:16.000Z", "description": "download location", "pattern": "[domain-name:value = 'job.atspace.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:16Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42485-a860-4139-967f-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:17.000Z", "modified": "2016-08-29T12:03:17.000Z", "description": "download location", "pattern": "[domain-name:value = 'lokum1985.republika.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42485-80c0-4545-91e4-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:17.000Z", "modified": "2016-08-29T12:03:17.000Z", "description": "download location", "pattern": "[file:name = 'onlybest76.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:17Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42486-f3a8-4859-b02e-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:18.000Z", "modified": "2016-08-29T12:03:18.000Z", "description": "download location", "pattern": "[domain-name:value = 'rejoincomp2.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42486-f718-404b-af1a-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:18.000Z", "modified": "2016-08-29T12:03:18.000Z", "description": "download location", "pattern": "[domain-name:value = 'rodewelshcobs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42486-3f50-4060-b9de-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:18.000Z", "modified": "2016-08-29T12:03:18.000Z", "description": "download location", "pattern": "[file:name = 'sopranolady7.wang']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Payload delivery" } ], "labels": [ "misp:type=\"filename\"", "misp:category=\"Payload delivery\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42487-a620-4ad0-a79c-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:19.000Z", "modified": "2016-08-29T12:03:19.000Z", "description": "download location", "pattern": "[domain-name:value = 'spic.bakufu.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42487-a09c-42be-838f-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:19.000Z", "modified": "2016-08-29T12:03:19.000Z", "description": "download location", "pattern": "[domain-name:value = 'tpllaw.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42488-feac-4851-82d3-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:20.000Z", "modified": "2016-08-29T12:03:20.000Z", "description": "download location", "pattern": "[domain-name:value = 'vanleeuwenvuurwerk.nl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42488-646c-479c-85b3-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:20.000Z", "modified": "2016-08-29T12:03:20.000Z", "description": "download location", "pattern": "[domain-name:value = 'vicariassicurazioni.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42489-5fe4-4242-b203-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:21.000Z", "modified": "2016-08-29T12:03:21.000Z", "description": "download location", "pattern": "[domain-name:value = 'wangmewang.name']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42489-f4f4-460c-8d36-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:21.000Z", "modified": "2016-08-29T12:03:21.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.agenziadini.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c42489-2e3c-41d3-9834-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:21.000Z", "modified": "2016-08-29T12:03:21.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.agriturismoigirasoli.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248a-23e8-4299-967e-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:22.000Z", "modified": "2016-08-29T12:03:22.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.bluedizioni.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248a-3808-444c-8235-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:22.000Z", "modified": "2016-08-29T12:03:22.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.caffematto.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248b-1494-4261-bd7d-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:23.000Z", "modified": "2016-08-29T12:03:23.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.caminettilcd.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248b-cf58-4915-8b11-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:23.000Z", "modified": "2016-08-29T12:03:23.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.carloabati.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248c-aafc-4b75-9994-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:24.000Z", "modified": "2016-08-29T12:03:24.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.coozpn.cba.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248c-2030-4d7c-a525-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:24.000Z", "modified": "2016-08-29T12:03:24.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.csm94.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248c-eb08-4ed2-ac2a-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:24.000Z", "modified": "2016-08-29T12:03:24.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.culturalheritagemanagement.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248c-6e40-469d-9d6c-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:24.000Z", "modified": "2016-08-29T12:03:24.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.dialektika.extra.hu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248c-66f4-486f-be0a-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:24.000Z", "modified": "2016-08-29T12:03:24.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.dondana.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248c-5a98-4864-8e56-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:24.000Z", "modified": "2016-08-29T12:03:24.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.fenit.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248d-9550-4c18-b886-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:25.000Z", "modified": "2016-08-29T12:03:25.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.lagottoromagnolo.be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248d-4e90-4b8c-9cc2-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:25.000Z", "modified": "2016-08-29T12:03:25.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.mussystems.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248d-9be0-4078-bb49-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:25.000Z", "modified": "2016-08-29T12:03:25.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.planet-intv.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248d-6fb4-4fd0-af21-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:25.000Z", "modified": "2016-08-29T12:03:25.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.ussanlorenzo.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248d-7674-4f0e-bd1d-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:25.000Z", "modified": "2016-08-29T12:03:25.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.vanhoenacker.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248e-fe58-46fb-ade2-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:26.000Z", "modified": "2016-08-29T12:03:26.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.webcam-bild.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57c4248e-f1e4-4b7d-b95d-7a52950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:03:26.000Z", "modified": "2016-08-29T12:03:26.000Z", "description": "download location", "pattern": "[domain-name:value = 'xelagon.50webs.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-08-29T12:03:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "observed-data", "spec_version": "2.1", "id": "observed-data--57c424fd-8364-4f4b-b502-7a55950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-08-29T12:05:17.000Z", "modified": "2016-08-29T12:05:17.000Z", "first_observed": "2016-08-29T12:05:17Z", "last_observed": "2016-08-29T12:05:17Z", "number_observed": 1, "object_refs": [ "email-message--57c424fd-8364-4f4b-b502-7a55950d210f" ], "labels": [ "misp:type=\"email-subject\"", "misp:category=\"Payload delivery\"" ] }, { "type": "email-message", "spec_version": "2.1", "id": "email-message--57c424fd-8364-4f4b-b502-7a55950d210f", "is_multipart": false, "subject": "Commission" }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } } ] }