{ "type": "bundle", "id": "bundle--57cfbf0c-c790-4257-8b1e-06cc950d210f", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:37.000Z", "modified": "2016-09-07T07:19:37.000Z", "name": "CIRCL", "identity_class": "organization" }, { "type": "report", "spec_version": "2.1", "id": "report--57cfbf0c-c790-4257-8b1e-06cc950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:37.000Z", "modified": "2016-09-07T07:19:37.000Z", "name": "Malspam 2016-09-06 (.wsf in .zip) - campaign: 'Message from \"CUKPR[x]\"'", "published": "2016-09-07T09:10:28Z", "object_refs": [ "indicator--57cfbf76-19b8-4a38-a2ad-06cb950d210f", "indicator--57cfbf76-0124-4171-8037-06cb950d210f", "indicator--57cfbf76-8e4c-42b2-9ea2-06cb950d210f", "indicator--57cfbf76-7aa8-4733-adaf-06cb950d210f", "indicator--57cfbf77-e46c-48b6-ab7b-06cb950d210f", "indicator--57cfbf77-a894-4ae0-86ce-06cb950d210f", "indicator--57cfbf77-ad18-4692-92c2-06cb950d210f", "indicator--57cfbf77-5f88-48c0-a15e-06cb950d210f", "indicator--57cfbf77-4ac4-4cb4-8de9-06cb950d210f", "indicator--57cfbf78-00f0-438b-af3c-06cb950d210f", "indicator--57cfbf78-3810-4cb0-b0b9-06cb950d210f", "indicator--57cfbf78-b118-41d1-be69-06cb950d210f", "indicator--57cfbf78-5a18-4031-be69-06cb950d210f", "indicator--57cfbf78-d170-4d08-a41a-06cb950d210f", "indicator--57cfbf79-2dc8-4195-bbb7-06cb950d210f", "indicator--57cfbf79-be84-462c-b417-06cb950d210f", "indicator--57cfbf79-8edc-4a7c-a2cf-06cb950d210f", "indicator--57cfbf79-c614-46d2-9efe-06cb950d210f", "indicator--57cfbf7a-4410-4016-a831-06cb950d210f", "indicator--57cfbf7a-a850-4f3b-b36c-06cb950d210f", "indicator--57cfbf7a-d558-4927-84e6-06cb950d210f", "indicator--57cfbf7a-f6a4-430a-b2c1-06cb950d210f", "indicator--57cfbf7a-f234-468e-a32a-06cb950d210f", "indicator--57cfbf7b-fe2c-4dda-b7a5-06cb950d210f", "indicator--57cfbf7b-c528-498a-8a07-06cb950d210f", "indicator--57cfbf7b-2ba0-42ef-be2f-06cb950d210f", "indicator--57cfbf7b-edec-4e6e-9f63-06cb950d210f", "indicator--57cfbf7c-853c-422a-aef9-06cb950d210f", "indicator--57cfbf7c-afac-4ca6-b500-06cb950d210f", "indicator--57cfbf7c-3ddc-439a-ab98-06cb950d210f", "indicator--57cfbf7c-2d3c-477e-9b60-06cb950d210f", "indicator--57cfbf7d-fa58-4175-9258-06cb950d210f", "indicator--57cfbf7d-3890-4435-8b3a-06cb950d210f", "indicator--57cfbf7d-f2c0-42c1-ac64-06cb950d210f", "indicator--57cfbf7d-3350-4eeb-9a32-06cb950d210f", "indicator--57cfbf7d-ed5c-4930-833b-06cb950d210f", "indicator--57cfbf7e-304c-4875-9f5c-06cb950d210f", "indicator--57cfbf7e-cf90-4b3e-a1ed-06cb950d210f", "indicator--57cfbf7e-aa18-45cb-8120-06cb950d210f", "indicator--57cfbf7e-29dc-45d7-acf0-06cb950d210f", "indicator--57cfbf7f-208c-4aee-9b95-06cb950d210f", "indicator--57cfbf7f-2e30-4769-a110-06cb950d210f", "indicator--57cfbf7f-c5b8-484e-a33a-06cb950d210f", "indicator--57cfbf7f-c4a8-447e-9b44-06cb950d210f", "indicator--57cfbf80-d988-489f-a7f9-06cb950d210f", "indicator--57cfbf80-4704-494f-8c4c-06cb950d210f", "indicator--57cfbf80-9bb8-4b81-81ba-06cb950d210f", "indicator--57cfbf80-a448-4359-80f8-06cb950d210f", "indicator--57cfbf80-156c-403f-a169-06cb950d210f", "indicator--57cfbf81-233c-4e98-b536-06cb950d210f", "indicator--57cfbf81-5c4c-47a1-9ddd-06cb950d210f", "indicator--57cfbf81-6158-47e8-8330-06cb950d210f", "indicator--57cfbf81-ee94-4a2f-ba41-06cb950d210f", "indicator--57cfbf82-5954-4447-b897-06cb950d210f", "indicator--57cfbf82-2458-4151-99fd-06cb950d210f", "indicator--57cfbf82-7950-4bc7-80dd-06cb950d210f", "indicator--57cfbf82-d998-47f5-bb83-06cb950d210f", "indicator--57cfbf82-13dc-485b-97a6-06cb950d210f", "indicator--57cfbf83-5df4-4d06-9b3e-06cb950d210f", "indicator--57cfbf83-8c20-4048-8a10-06cb950d210f", "indicator--57cfbf83-6fa8-4248-bc57-06cb950d210f", "indicator--57cfbf83-6430-46e0-a216-06cb950d210f", "indicator--57cfbf83-2bf4-4a78-939c-06cb950d210f", "indicator--57cfbf84-236c-4272-a945-06cb950d210f", "indicator--57cfbf84-d6a4-49f4-b8fc-06cb950d210f", "indicator--57cfbf84-d930-4d92-9160-06cb950d210f", "indicator--57cfbf84-87a4-4ef0-9575-06cb950d210f", "indicator--57cfbf85-8b48-405b-bc02-06cb950d210f", "indicator--57cfbf85-0908-493d-ab8c-06cb950d210f", "indicator--57cfbf85-c830-4019-81c6-06cb950d210f", "indicator--57cfbf85-1db0-4f6f-8d86-06cb950d210f", "indicator--57cfbf85-3434-4268-9680-06cb950d210f", "indicator--57cfbf86-0708-428e-a717-06cb950d210f", "indicator--57cfbf86-30c8-4a89-b585-06cb950d210f", "indicator--57cfbf86-41d4-46c6-8d56-06cb950d210f", "indicator--57cfbf86-4800-4d51-9b08-06cb950d210f", "indicator--57cfbf86-8e28-468c-914f-06cb950d210f", "indicator--57cfbf87-9f84-4414-ae9f-06cb950d210f", "indicator--57cfbf87-9300-4682-974d-06cb950d210f", "indicator--57cfbf87-4420-48f8-a07a-06cb950d210f", "indicator--57cfbf87-45ec-427a-8c24-06cb950d210f", "indicator--57cfbf88-79f0-4de5-8bc0-06cb950d210f", "indicator--57cfbf88-2cb8-4296-8032-06cb950d210f", "indicator--57cfbf88-05b0-4267-9431-06cb950d210f", "indicator--57cfbf88-673c-4398-bec0-06cb950d210f", "indicator--57cfbf88-2040-46cc-8e59-06cb950d210f" ], "labels": [ "Threat-Report", "misp:tool=\"MISP-STIX-Converter\"", "circl:incident-classification=\"malware\"" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf76-19b8-4a38-a2ad-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:18.000Z", "modified": "2016-09-07T07:19:18.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '186.202.126.199']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf76-0124-4171-8037-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:18.000Z", "modified": "2016-09-07T07:19:18.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.120.235.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf76-8e4c-42b2-9ea2-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:18.000Z", "modified": "2016-09-07T07:19:18.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '208.71.106.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf76-7aa8-4733-adaf-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:18.000Z", "modified": "2016-09-07T07:19:18.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '208.71.106.45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:18Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf77-e46c-48b6-ab7b-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:19.000Z", "modified": "2016-09-07T07:19:19.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '208.71.106.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf77-a894-4ae0-86ce-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:19.000Z", "modified": "2016-09-07T07:19:19.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '209.41.183.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf77-ad18-4692-92c2-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:19.000Z", "modified": "2016-09-07T07:19:19.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '211.134.181.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf77-5f88-48c0-a15e-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:19.000Z", "modified": "2016-09-07T07:19:19.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.180.150.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf77-4ac4-4cb4-8de9-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:19.000Z", "modified": "2016-09-07T07:19:19.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.185.87.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:19Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf78-00f0-438b-af3c-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:20.000Z", "modified": "2016-09-07T07:19:20.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.205.40.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf78-3810-4cb0-b0b9-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:20.000Z", "modified": "2016-09-07T07:19:20.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '62.24.202.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf78-b118-41d1-be69-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:20.000Z", "modified": "2016-09-07T07:19:20.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '80.150.6.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf78-5a18-4031-be69-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:20.000Z", "modified": "2016-09-07T07:19:20.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '80.150.6.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf78-d170-4d08-a41a-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:20.000Z", "modified": "2016-09-07T07:19:20.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '81.169.145.157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:20Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf79-2dc8-4195-bbb7-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:21.000Z", "modified": "2016-09-07T07:19:21.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '81.169.145.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf79-be84-462c-b417-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:21.000Z", "modified": "2016-09-07T07:19:21.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '81.196.20.134']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf79-8edc-4a7c-a2cf-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:21.000Z", "modified": "2016-09-07T07:19:21.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '81.24.34.9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf79-c614-46d2-9efe-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:21.000Z", "modified": "2016-09-07T07:19:21.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '85.248.42.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:21Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7a-4410-4016-a831-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:22.000Z", "modified": "2016-09-07T07:19:22.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '87.242.73.75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7a-a850-4f3b-b36c-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:22.000Z", "modified": "2016-09-07T07:19:22.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.156.222.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7a-d558-4927-84e6-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:22.000Z", "modified": "2016-09-07T07:19:22.000Z", "description": "download location", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.211.144.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7a-f6a4-430a-b2c1-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:22.000Z", "modified": "2016-09-07T07:19:22.000Z", "description": "download location", "pattern": "[domain-name:value = 'andreas414.republika.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7a-f234-468e-a32a-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:22.000Z", "modified": "2016-09-07T07:19:22.000Z", "description": "download location", "pattern": "[domain-name:value = 'around4percent.web.fc2.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:22Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7b-fe2c-4dda-b7a5-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:23.000Z", "modified": "2016-09-07T07:19:23.000Z", "description": "download location", "pattern": "[domain-name:value = 'bushman-rest.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7b-c528-498a-8a07-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:23.000Z", "modified": "2016-09-07T07:19:23.000Z", "description": "download location", "pattern": "[domain-name:value = 'hotelimperium.go.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7b-2ba0-42ef-be2f-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:23.000Z", "modified": "2016-09-07T07:19:23.000Z", "description": "download location", "pattern": "[url:value = 'http://209.41.183.242/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7b-edec-4e6e-9f63-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:23.000Z", "modified": "2016-09-07T07:19:23.000Z", "description": "download location", "pattern": "[url:value = 'http://andreas414.republika.pl/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:23Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7c-853c-422a-aef9-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:24.000Z", "modified": "2016-09-07T07:19:24.000Z", "description": "download location", "pattern": "[url:value = 'http://around4percent.web.fc2.com/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7c-afac-4ca6-b500-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:24.000Z", "modified": "2016-09-07T07:19:24.000Z", "description": "download location", "pattern": "[url:value = 'http://bushman-rest.com/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7c-3ddc-439a-ab98-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:24.000Z", "modified": "2016-09-07T07:19:24.000Z", "description": "download location", "pattern": "[url:value = 'http://hotelimperium.go.ro/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7c-2d3c-477e-9b60-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:24.000Z", "modified": "2016-09-07T07:19:24.000Z", "description": "download location", "pattern": "[url:value = 'http://lalarabbit.web.fc2.com/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:24Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7d-fa58-4175-9258-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:25.000Z", "modified": "2016-09-07T07:19:25.000Z", "description": "download location", "pattern": "[url:value = 'http://marcotormento.de/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7d-3890-4435-8b3a-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:25.000Z", "modified": "2016-09-07T07:19:25.000Z", "description": "download location", "pattern": "[url:value = 'http://michik.web.fc2.com/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7d-f2c0-42c1-ac64-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:25.000Z", "modified": "2016-09-07T07:19:25.000Z", "description": "download location", "pattern": "[url:value = 'http://mixup0813.web.fc2.com/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7d-3350-4eeb-9a32-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:25.000Z", "modified": "2016-09-07T07:19:25.000Z", "description": "download location", "pattern": "[url:value = 'http://pea5.cba.pl/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7d-ed5c-4930-833b-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:25.000Z", "modified": "2016-09-07T07:19:25.000Z", "description": "download location", "pattern": "[url:value = 'http://portadeenrolar.ind.br/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:25Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7e-304c-4875-9f5c-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:26.000Z", "modified": "2016-09-07T07:19:26.000Z", "description": "download location", "pattern": "[url:value = 'http://rosivani.go.ro/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7e-cf90-4b3e-a1ed-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:26.000Z", "modified": "2016-09-07T07:19:26.000Z", "description": "download location", "pattern": "[url:value = 'http://sp-moto.ru/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7e-aa18-45cb-8120-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:26.000Z", "modified": "2016-09-07T07:19:26.000Z", "description": "download location", "pattern": "[url:value = 'http://tst-technik.de/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7e-29dc-45d7-acf0-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:26.000Z", "modified": "2016-09-07T07:19:26.000Z", "description": "download location", "pattern": "[url:value = 'http://unimet.tmhandel.com/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:26Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7f-208c-4aee-9b95-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:27.000Z", "modified": "2016-09-07T07:19:27.000Z", "description": "download location", "pattern": "[url:value = 'http://w8kvpd5ib.homepage.t-online.de/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7f-2e30-4769-a110-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:27.000Z", "modified": "2016-09-07T07:19:27.000Z", "description": "download location", "pattern": "[url:value = 'http://www.aldesco.it/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7f-c5b8-484e-a33a-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:27.000Z", "modified": "2016-09-07T07:19:27.000Z", "description": "download location", "pattern": "[url:value = 'http://www.alpstaxi.co.jp/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf7f-c4a8-447e-9b44-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:27.000Z", "modified": "2016-09-07T07:19:27.000Z", "description": "download location", "pattern": "[url:value = 'http://www.beniculturali.org/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:27Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf80-d988-489f-a7f9-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:28.000Z", "modified": "2016-09-07T07:19:28.000Z", "description": "download location", "pattern": "[url:value = 'http://www.bytove.jadro.szm.com/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf80-4704-494f-8c4c-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:28.000Z", "modified": "2016-09-07T07:19:28.000Z", "description": "download location", "pattern": "[url:value = 'http://www.facturi.go.ro/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf80-9bb8-4b81-81ba-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:28.000Z", "modified": "2016-09-07T07:19:28.000Z", "description": "download location", "pattern": "[url:value = 'http://www.folkjuannepiu.it/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf80-a448-4359-80f8-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:28.000Z", "modified": "2016-09-07T07:19:28.000Z", "description": "download location", "pattern": "[url:value = 'http://www.laribalta.org/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf80-156c-403f-a169-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:28.000Z", "modified": "2016-09-07T07:19:28.000Z", "description": "download location", "pattern": "[url:value = 'http://www.lnowak.tkdami.net/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:28Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf81-233c-4e98-b536-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:29.000Z", "modified": "2016-09-07T07:19:29.000Z", "description": "download location", "pattern": "[url:value = 'http://www.parrucchieriagiacomo.com/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf81-5c4c-47a1-9ddd-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:29.000Z", "modified": "2016-09-07T07:19:29.000Z", "description": "download location", "pattern": "[url:value = 'http://www.peritiassicurativi.org/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf81-6158-47e8-8330-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:29.000Z", "modified": "2016-09-07T07:19:29.000Z", "description": "download location", "pattern": "[url:value = 'http://www.planet-auto.go.ro/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf81-ee94-4a2f-ba41-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:29.000Z", "modified": "2016-09-07T07:19:29.000Z", "description": "download location", "pattern": "[url:value = 'http://www.plumbntile.talktalk.net/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:29Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf82-5954-4447-b897-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:30.000Z", "modified": "2016-09-07T07:19:30.000Z", "description": "download location", "pattern": "[url:value = 'http://www.radicegioielli.com/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf82-2458-4151-99fd-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:30.000Z", "modified": "2016-09-07T07:19:30.000Z", "description": "download location", "pattern": "[url:value = 'http://www.vilastefania.go.ro/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf82-7950-4bc7-80dd-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:30.000Z", "modified": "2016-09-07T07:19:30.000Z", "description": "download location", "pattern": "[url:value = 'http://www.wellworx.de/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf82-d998-47f5-bb83-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:30.000Z", "modified": "2016-09-07T07:19:30.000Z", "description": "download location", "pattern": "[url:value = 'http://www.xolod-teplo.ru/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf82-13dc-485b-97a6-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:30.000Z", "modified": "2016-09-07T07:19:30.000Z", "description": "download location", "pattern": "[url:value = 'http://zui9reica.web.fc2.com/j8fn3rg3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:30Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf83-5df4-4d06-9b3e-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:31.000Z", "modified": "2016-09-07T07:19:31.000Z", "description": "download location", "pattern": "[domain-name:value = 'lalarabbit.web.fc2.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf83-8c20-4048-8a10-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:31.000Z", "modified": "2016-09-07T07:19:31.000Z", "description": "download location", "pattern": "[domain-name:value = 'marcotormento.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf83-6fa8-4248-bc57-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:31.000Z", "modified": "2016-09-07T07:19:31.000Z", "description": "download location", "pattern": "[domain-name:value = 'michik.web.fc2.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf83-6430-46e0-a216-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:31.000Z", "modified": "2016-09-07T07:19:31.000Z", "description": "download location", "pattern": "[domain-name:value = 'mixup0813.web.fc2.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf83-2bf4-4a78-939c-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:31.000Z", "modified": "2016-09-07T07:19:31.000Z", "description": "download location", "pattern": "[domain-name:value = 'pea5.cba.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:31Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf84-236c-4272-a945-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:32.000Z", "modified": "2016-09-07T07:19:32.000Z", "description": "download location", "pattern": "[domain-name:value = 'portadeenrolar.ind.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf84-d6a4-49f4-b8fc-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:32.000Z", "modified": "2016-09-07T07:19:32.000Z", "description": "download location", "pattern": "[domain-name:value = 'rosivani.go.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf84-d930-4d92-9160-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:32.000Z", "modified": "2016-09-07T07:19:32.000Z", "description": "download location", "pattern": "[domain-name:value = 'sp-moto.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf84-87a4-4ef0-9575-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:32.000Z", "modified": "2016-09-07T07:19:32.000Z", "description": "download location", "pattern": "[domain-name:value = 'tst-technik.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:32Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf85-8b48-405b-bc02-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:33.000Z", "modified": "2016-09-07T07:19:33.000Z", "description": "download location", "pattern": "[domain-name:value = 'unimet.tmhandel.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf85-0908-493d-ab8c-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:33.000Z", "modified": "2016-09-07T07:19:33.000Z", "description": "download location", "pattern": "[domain-name:value = 'w8kvpd5ib.homepage.t-online.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf85-c830-4019-81c6-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:33.000Z", "modified": "2016-09-07T07:19:33.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.aldesco.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf85-1db0-4f6f-8d86-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:33.000Z", "modified": "2016-09-07T07:19:33.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.alpstaxi.co.jp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf85-3434-4268-9680-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:33.000Z", "modified": "2016-09-07T07:19:33.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.beniculturali.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf86-0708-428e-a717-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:33.000Z", "modified": "2016-09-07T07:19:33.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.bytove.jadro.szm.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:33Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf86-30c8-4a89-b585-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:34.000Z", "modified": "2016-09-07T07:19:34.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.facturi.go.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf86-41d4-46c6-8d56-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:34.000Z", "modified": "2016-09-07T07:19:34.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.folkjuannepiu.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf86-4800-4d51-9b08-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:34.000Z", "modified": "2016-09-07T07:19:34.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.laribalta.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf86-8e28-468c-914f-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:34.000Z", "modified": "2016-09-07T07:19:34.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.lnowak.tkdami.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:34Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf87-9f84-4414-ae9f-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:35.000Z", "modified": "2016-09-07T07:19:35.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.parrucchieriagiacomo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf87-9300-4682-974d-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:35.000Z", "modified": "2016-09-07T07:19:35.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.peritiassicurativi.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf87-4420-48f8-a07a-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:35.000Z", "modified": "2016-09-07T07:19:35.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.planet-auto.go.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf87-45ec-427a-8c24-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:35.000Z", "modified": "2016-09-07T07:19:35.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.plumbntile.talktalk.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:35Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf88-79f0-4de5-8bc0-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:36.000Z", "modified": "2016-09-07T07:19:36.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.radicegioielli.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf88-2cb8-4296-8032-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:36.000Z", "modified": "2016-09-07T07:19:36.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.vilastefania.go.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf88-05b0-4267-9431-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:36.000Z", "modified": "2016-09-07T07:19:36.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.wellworx.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf88-673c-4398-bec0-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:36.000Z", "modified": "2016-09-07T07:19:36.000Z", "description": "download location", "pattern": "[domain-name:value = 'www.xolod-teplo.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbf88-2040-46cc-8e59-06cb950d210f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2016-09-07T07:19:36.000Z", "modified": "2016-09-07T07:19:36.000Z", "description": "download location", "pattern": "[domain-name:value = 'zui9reica.web.fc2.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2016-09-07T07:19:36Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } } ] }