{ "type": "bundle", "id": "bundle--58a8e2b1-1010-47bc-ad21-b98e0288426a", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:41:58.000Z", "modified": "2020-10-31T19:41:58.000Z", "name": "CIRCL", "identity_class": "organization" }, { "type": "report", "spec_version": "2.1", "id": "report--58a8e2b1-1010-47bc-ad21-b98e0288426a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:41:58.000Z", "modified": "2020-10-31T19:41:58.000Z", "name": "SEKOA IOC - CSV GitHub - Ryuk", "published": "2020-10-31T19:42:21Z", "object_refs": [ "indicator--198dc73f-c566-4f1b-bcf5-d7f018024814", "indicator--6847f56c-e4db-415a-822f-c3f07580fd68", "indicator--33e6daf4-8918-4c8a-8c1e-4c696e0b3ea1", "indicator--4018554d-09fb-4a24-84af-ed8e8e3ef0d8", "indicator--b9471390-fa3a-4516-99b2-5862ce06509b", "indicator--cef3d87c-69e2-458e-9b2a-dc9918eae72a", "indicator--6384b7ab-e8f9-4714-ab95-80bb23c1fc92", "indicator--e8e374bc-bc9f-4e26-a286-f22c3a22e2d6", "indicator--9bd41d80-d1eb-47d2-a3a2-e39ce6c18b13", "indicator--1e1644b2-f11c-4b31-8229-a680ed583deb", "indicator--0b093583-d4ff-4a84-8f30-337b34d4d495", "indicator--df16e056-4a38-449f-bbc6-7cc680839b07", "indicator--bff4fb20-03e6-4403-8ddb-9b233c625d09", "indicator--a89f31c1-7ab3-4424-b3b5-526a55d7ce6c", "indicator--82eab40f-7a26-4316-b5a2-e32550880321", "indicator--20193a85-d7f5-4d11-9fcd-eda634ed963c", "indicator--25fb448c-034a-48b2-8acf-ffa5cfbe5999", "indicator--42fdd7aa-e756-4fa8-aa22-5e8865b2e40c", "indicator--ff2e5ba9-e3df-49ea-a548-785fdc5b0a7a", "indicator--9b130915-85ae-43ed-90e8-443a49037b7c", "indicator--ac584c28-b3eb-461f-ab61-46880247d03b", "indicator--3e5d4124-a70f-4f10-a5c1-62833f5f4da9", "indicator--c8f0084d-bdbc-4152-b08b-7b1d1df6fbb4", "indicator--da18670d-2a40-4cf4-934f-52c335168bd8", "indicator--21069eaf-cb53-4f7b-8e15-cc1ce292e696", "indicator--b18a0fc8-386f-4655-8091-efde6df84781", "indicator--f44e3f64-0cbb-4832-b30d-d21de1cb481a", "indicator--eaf3f7d5-1497-41cf-869e-641ed0f8f994", "indicator--de461de3-ed1f-444d-bc4a-32eda3f5935d", "indicator--32bfed01-7f6d-4744-a4ae-ecce38786ef1", "indicator--00e40d02-5701-4320-9d34-42b47df8e618", "indicator--1f8a4dc0-235e-4f4f-ac7f-aa800e5ddb9a", "indicator--f82b0da9-46b5-4ad3-ae85-42c0a2977a78", "indicator--59b7c4fd-9cce-4da2-a797-f6416d78abfb", "indicator--a37cce33-1321-4466-a9a4-886e84b89766", "indicator--4665e9fd-5429-409a-8c2c-b1883e33d6ad", "indicator--53a86475-cbd9-43ad-b7d3-a734846a8145", "indicator--a37fec31-6b32-49c7-9f7f-9a8d405bc83e", "indicator--8adf1fcc-c6cf-49bd-8079-5183617a1df6", "indicator--e43eabb2-d533-430d-8366-d1947eccfe7e", "indicator--700f6e37-6f1c-4263-8f9a-d9c03b0a33bf", "indicator--d1cc1198-eda7-4ce7-bf93-7234cd58cd06", "indicator--f22e5124-8f1f-441f-874a-02e301c2570b", "indicator--a160c97d-8e39-4a58-9328-d21f3098a04e", "indicator--8ebbef1d-0f4d-454c-bb95-cdd24124894c", "indicator--75b9857f-9776-4a28-8a7f-104d1b851097", "indicator--37b67853-8a15-445a-a7af-8b40e4bce516", "indicator--8e133280-730b-4e5f-b23c-b6701a5f3a95", "indicator--b3f30ab4-9622-4bda-9515-9cd8a9c65070", "indicator--682eb550-db58-4fd1-a597-195c34a1be2b", "indicator--45360cd7-233c-47f7-9d0b-819c48a123ca", "indicator--7ae37b0f-742f-46fe-8bed-90fc10b55fec", "indicator--7bff4459-5b42-4160-8d2e-f38d5497f623", "indicator--65d43181-9603-4207-983d-66726534159b", "indicator--72bc2e07-b82e-4ca7-b01f-89527118808a", "indicator--192f26af-3037-47aa-ba91-7f22ad6d0f18", "indicator--46691bab-0603-46c9-a562-b0b5a9696a60", "indicator--525d36ae-06ec-4ba7-b920-00eedf93f0e6", "indicator--0980583d-46c6-4014-bb67-080c64b21f4d", "indicator--e6e1714a-3692-4392-8382-6a078faef8bd", "indicator--fda86f3a-63ec-4290-876a-6eb4884dbb3f", "indicator--1e01db87-ea29-4fc5-9ad2-7b78e5cac742", "indicator--e9022699-b10f-431d-893b-c582da6524c2", "indicator--740ccd61-f4be-40e0-96f4-664e9002b6d3", "indicator--a40de570-8136-4390-ac8d-a967fb1b7b15", "indicator--89c6e9cb-9107-4785-9cb7-2cf60c444de0", "indicator--f4b95fbc-d47a-4c11-a364-3bcaf738ac4a", "indicator--1a8412f0-06ae-46f6-aa03-7b3c2b677fd9", "indicator--a70807a0-aa81-42d1-ac81-a4154dbf556a", "indicator--c440a61b-7efc-476f-8a31-af0481feba31", "indicator--1c23afe9-e1b4-492b-9301-ab451ff05c7d", "indicator--52f00c7e-bad7-4039-b38b-032ac54edbc8", "indicator--18e66712-868a-40b9-994e-8e71cd23037a", "indicator--ebe19cf0-1767-4512-9cb5-979d309dbd55", "indicator--3d565ab4-2d03-42f0-8026-fec9989d8c6a", "indicator--a0e1d508-3451-4116-8cdb-60f7d6f11a66", "indicator--8ce6e94f-1371-45b9-9bb3-1d7500961b38", "indicator--221971a8-bf20-4a14-80b3-17d60b298da8", "indicator--9df2b4c5-518b-4b6b-b5a3-7231d8f97b6a", "indicator--c513137f-3927-4c06-ae14-c53091c1d07c", "indicator--8d902920-b509-4eec-a7e9-264271569ff7", "indicator--2e55613f-5696-49aa-bc68-0bf7b537e035", "indicator--8f74ca52-f2af-4c4f-a6e2-b812baf56fa9", "indicator--7f162988-eeef-42dc-bfe9-2907112166ce", "indicator--b8092df5-d25f-4796-8e13-8048913df0c1", "indicator--979317a1-db49-43fc-895b-3da94f09fa92", "indicator--905bf899-c0d7-4f7a-9ced-d74ded7eec47", "indicator--1afcfa42-0b47-4993-9151-6b54d62630f6", "indicator--86b45409-66af-4f57-a22b-0091da568edf", "indicator--162d7099-4a0f-4bd7-a1c9-6d9aede6e422", "indicator--b10d726a-d112-4a0c-b7a7-5e4b63053d5b", "indicator--f6e3dbb5-72d8-401a-93da-6a139ef891fa", "indicator--ae70448c-ba1a-4ce4-8e12-5c3bc6d236b1", "indicator--07d8cfc3-b9c0-47bd-828f-6639f40b4397", "indicator--51cfb843-6632-49ba-9fc2-79d5c9c775fc", "indicator--706987da-ae82-4624-acfc-0d69b60b24df", "indicator--8fdab0ba-1b12-4ba2-b054-e63698aaaf2f", "indicator--cc100484-c5a4-4384-99c9-e6f533b2eade", "indicator--83e59c7d-040c-4082-ab38-2deb8ee57ae1", "indicator--24a01f85-3996-4a9a-bae8-6a9071191e66", "indicator--2ed2c3bc-87f4-471f-b425-f6484b02df13", "indicator--653ed5bc-e31b-4698-83de-98c2469e864e", "indicator--6965ad2f-6597-4a1a-b795-69c510054aec", "indicator--659a87bf-0f6f-4122-9c3a-787788230373", "indicator--b9881aef-d260-4d0a-a728-21288bd6ec9a", "indicator--d2fcf6d7-ca3c-4139-b4a0-06cc38993be4", "indicator--f26874f2-aa1d-4aeb-bf45-11e1d5aadca6", "indicator--07ef07e5-f368-44ad-9e78-61ccbe9a70a3", "indicator--0a8253a2-f767-4a54-998e-9e578436126b", "indicator--16fb014b-08c7-4cdc-b84a-91e3bb2dc51e", "indicator--c2f03965-9111-4484-a08f-babfb87f447e", "indicator--14a3973a-5662-4c41-9bc7-864e8ba9a60a", "indicator--e077677d-a448-47f2-9709-39daad1de91a", "indicator--f741c2ac-c3f3-46f4-acff-4b444ed6f7c1", "indicator--037caa03-6cc1-4765-af4a-4bfd444ee299", "indicator--4d8c958f-753e-4f35-89f6-8dbab1770492", "indicator--1d33aa3e-6487-470e-8a2a-f7ec16f01574", "indicator--4afc8c8d-1d65-4207-9f81-4baaf14278d5", "indicator--491907cd-2e4e-4646-bc6b-e993fc71999a", "indicator--98ba0fae-f5f1-4ae5-b5d7-58045fd70eda", "indicator--c1226c25-3d14-4e7d-9715-d39fb895c6d7", "indicator--dbe6d86a-649b-41ee-802c-8d6cc4879271", "indicator--9eff2ea4-c9d7-4949-99e9-6fd006f8502c", "indicator--5a32a470-5d2d-4cb9-9e38-a262510d40b5", "indicator--7c8c4a4a-7977-4260-a315-9d7289482a84", "indicator--78982a30-a200-461d-9d40-b419b3b22766", "indicator--8d8f70cb-555a-40b8-a4fd-f7e4119e6a14", "indicator--7e443bea-3c1f-48c5-b6e1-64881dbdcf09", "indicator--5a129e69-a61e-4159-9d2a-a10c0b1795a6", "indicator--b216c7a1-e97d-431d-b313-f92707446476", "indicator--a3b6df35-da67-4102-9d97-d5534304cfdc", "indicator--995c1011-2b55-447b-b5a0-af6e6f0f3b1b", "indicator--b92a7e97-700f-4f81-ab44-42a9819827a5", "indicator--5a3a2944-d206-4451-8f68-0ae0a71cae6a", "indicator--1776837f-af47-4367-8fa0-bc21fc0dad85", "indicator--1d278681-2788-4caf-a87c-ed6718f5ce8a", "indicator--e069ca3f-e389-4f2e-8069-4991344285f3", "indicator--a1f398b6-a2ab-40af-bae8-9e0aea86b465", "indicator--30ba40bf-fb8d-4ef3-b841-72c6e2120045", "indicator--d70e5bc8-a78b-4c21-9e70-8b92804d1b75", "indicator--01181947-30e3-4e02-a03a-b049ff37b079", "indicator--8c146bc7-a472-4da8-8e1a-de7715181401", "indicator--cf653121-9161-4a72-8c0a-1d81ca578c5c", "indicator--a9edee6e-cf99-4c2b-ac67-cfdaa75e4c29", "indicator--2db6922c-6892-46ac-83e5-8dcaba77cb64", "indicator--86756914-2669-4403-8dd0-4716074875ea", "indicator--7bb44c6b-f591-46ca-8ca0-8d6b7adca7b6", "indicator--ad172c14-9669-4afe-9f47-850a4dd4c262", "indicator--1915789b-db6c-4f65-bf52-069d263fc50a", "indicator--393e2459-d720-4b42-8657-9a178f597ece", "indicator--2ad348e3-e93e-4d48-ab5a-aaf4099dda00", "indicator--37e217b9-4bf1-46b1-875b-a8e837786222", "indicator--0caf7205-fc98-4c1d-a2bf-9fb653759abe", "indicator--ad2824ea-d725-4185-9595-09aad27d5842", "indicator--eea030ce-f937-4f04-a1c3-890496bb4e0d", "indicator--7c82b149-5805-4cdb-b5b3-9781e52ee8a8", "indicator--82975f84-ec21-4738-857f-84cef6c5a203", "indicator--6690dc0f-3562-4a82-99ee-25f3aefd323e", "indicator--9c550faf-29d1-416b-8155-83d864f14a9b", "indicator--904ccd86-aa2e-4383-8c8b-82d3c938ecb0", "indicator--98a18413-fc4f-4f49-8736-93e30ed94201", "indicator--ef8d525f-0074-4b2f-86b5-33b7ab74ff84", "indicator--501438b6-cb93-41a5-92f7-6049255c5229", "indicator--05313b3f-80a4-4070-9f13-f3f988e60a51", "indicator--bc4d5adb-bb4f-4003-b0d8-0d2d3047a9c6", "indicator--3e4358d2-b333-4de4-854c-ff385a150a5e", "indicator--c69bfdab-caad-41ca-89ee-8944f4d4f30d", "indicator--b4491e65-e909-43a9-99bd-0b7a4017dc43", "indicator--ff4432fa-5e53-4577-a171-74a0f135f4b8", "indicator--674d9d89-b6db-4483-8f64-568dd3b1d085", "indicator--814390a4-af18-46a8-aa02-b4a59e4c0929", "indicator--0fe3f6b6-58b9-4810-b3b1-add4bceac4d8", "indicator--23b97c30-a9f2-4fa7-978b-8c75f4184791", "indicator--304df5e9-4f65-401b-8c88-4092bf008a5c", "indicator--1b47dc89-ee4b-478c-a0db-f234b37baf92", "indicator--235ecc9c-4dc3-423f-9407-fc2073ff3dfa", "indicator--40c5b0f0-0e7c-4bfb-a155-edf87f6c8af2", "indicator--72aa6c14-308d-4f28-a131-2c0020dbd2d9", "indicator--be880691-3625-4c3f-a2ba-78d8f56c9886", "indicator--489c1899-6433-48af-870b-e240d00ab6e7", "indicator--eaaa79ab-eada-47eb-a8e5-447e493587e0", "indicator--8a2b0c42-8989-4d20-92f5-6b732f2b0508", "indicator--01fb10cb-e778-49fe-b729-c9aa070a4c30", "indicator--02547b92-07e5-45a2-a0c6-1c1f52a98f39", "indicator--4762c523-cedb-4b2e-98b9-0995cd685d25", "indicator--d49a7dbc-8b6d-4d53-8517-52c7a59ac6fa", "indicator--7dc526a5-9612-46f5-9726-71c4d275acd1", "indicator--ddd325af-b45d-4b05-bb09-09a5c1713521", "indicator--d1f2ac5a-0489-4464-8ec9-960afa6edb5d", "indicator--e9bc1841-d947-4f14-8688-f26298bf3de4", "indicator--88fe6e57-9624-48b3-8932-d7779c9f06dd", "indicator--c56ff49d-bb83-40fb-9782-f75953ce4105", "indicator--3c910f39-5637-4586-b761-a177ce3c3e71", "indicator--cd761e07-6a63-45b7-a0a2-ac08a272d1df", "indicator--33e30e84-09b4-4eec-95ea-1b85d0694411", "indicator--0efb0e59-aec6-4fd3-add3-426779082cbb", "indicator--03421dd6-83c9-40de-af61-ec7d16301207", "indicator--ca8b83f2-60b3-44fe-9d40-cbcf61ccde3f", "indicator--a663363a-bb4d-48b8-b79d-2b07d3523688", "indicator--acc4fe79-27c6-4090-8e09-950c5ec767d9", "indicator--71d64503-e028-41bf-8b5e-6d55ffaac180", "indicator--0b3c86d3-c897-49c8-8aa3-9816e4626dcc", "indicator--8ec94493-c8c8-445f-99e0-6f3bd3c2a18e", "indicator--257bd986-d805-4e89-9750-189bb63c5177", "indicator--5b5e2ddb-91fc-44f9-a8fc-706972d528ba", "indicator--afdaca7f-872f-4567-b0a8-e0c7310c5c8b", "indicator--e5893654-f7d3-4b25-aa0f-98ae56d075fb", "indicator--b41d63ee-635a-41b1-9315-765191f58b09", "indicator--f1ce40da-faa5-4cb4-a955-43e5a0d9859d", "indicator--b7b9cca7-b7d5-486f-a0b9-22c1a9c17ff4", "indicator--0751541d-e7d5-4aba-b3ab-290afd2e05e8", "indicator--a581ca0b-8bb8-4f91-b192-b2458a4cc9d5", "indicator--85b51878-4ce8-45ad-ab27-157c386575e8", "indicator--812a9909-aa79-4810-b961-4aad8a4531ab", "indicator--2648a258-e710-4ef2-a04b-b73c3ae98762", "indicator--eef5c5db-d090-4078-872b-d5ea2d1dd17e", "indicator--138623d9-bea7-4cec-862a-3dcaa7ceccb2", "indicator--16e55381-5a8d-4451-852a-bc66472176a6", "indicator--8e1716b6-c48c-437f-93cc-3bdfa48af870", "indicator--be783989-65e8-46eb-be4f-db53f173e5d9", "indicator--ebe0d4cc-6143-4313-bb48-b8f06f471532", "indicator--846d266c-96bf-42da-849c-ac30ec196a70", "indicator--7fdb3930-3bc8-4266-a6db-56176b2038be", "indicator--d97c0b9d-27d3-4083-bd99-dcd06df6f4fd", "indicator--1046d5f5-4dc6-45ec-8ccc-377767822552", "indicator--47b6e288-acad-4851-bc7d-4ad200aaa843", "indicator--ea3445f0-4f7b-400f-9341-03a4a3b0b0b0", "indicator--31023e2a-53a1-4934-86bc-a03b4fa8ac8a", "indicator--bf6bc360-4645-4db6-8d7c-64f7a75b0496", "indicator--4c1898e1-c767-46aa-a602-db9afcc7490a", "observed-data--5c7352d1-cbf8-40bf-8b93-d1918185361e", "url--5c7352d1-cbf8-40bf-8b93-d1918185361e" ], "labels": [ "Threat-Report", "misp:tool=\"MISP-STIX-Converter\"", "type:OSINT", "osint:lifetime=\"perpetual\"", "osint:certainty=\"50\"", "misp-galaxy:ransomware=\"Ryuk ransomware\"" ], "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--198dc73f-c566-4f1b-bcf5-d7f018024814", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.64.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6847f56c-e4db-415a-822f-c3f07580fd68", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '109.70.236.134']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--33e6daf4-8918-4c8a-8c1e-4c696e0b3ea1", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.79.12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4018554d-09fb-4a24-84af-ed8e8e3ef0d8", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.64.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b9471390-fa3a-4516-99b2-5862ce06509b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.171.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cef3d87c-69e2-458e-9b2a-dc9918eae72a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '107.173.58.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6384b7ab-e8f9-4714-ab95-80bb23c1fc92", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.64.174']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e8e374bc-bc9f-4e26-a286-f22c3a22e2d6", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.252.244.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9bd41d80-d1eb-47d2-a3a2-e39ce6c18b13", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.175.153']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1e1644b2-f11c-4b31-8229-a680ed583deb", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.64.167']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0b093583-d4ff-4a84-8f30-337b34d4d495", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.64.149']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--df16e056-4a38-449f-bbc6-7cc680839b07", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.171.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bff4fb20-03e6-4403-8ddb-9b233c625d09", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.252.245.71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a89f31c1-7ab3-4424-b3b5-526a55d7ce6c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.64.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--82eab40f-7a26-4316-b5a2-e32550880321", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.64.182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--20193a85-d7f5-4d11-9fcd-eda634ed963c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.64.172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--25fb448c-034a-48b2-8acf-ffa5cfbe5999", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.171.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--42fdd7aa-e756-4fa8-aa22-5e8865b2e40c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.252.244.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ff2e5ba9-e3df-49ea-a548-785fdc5b0a7a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.147.230.87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9b130915-85ae-43ed-90e8-443a49037b7c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.147.229.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ac584c28-b3eb-461f-ab61-46880247d03b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.147.229.92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3e5d4124-a70f-4f10-a5c1-62833f5f4da9", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.147.230.132']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c8f0084d-bdbc-4152-b08b-7b1d1df6fbb4", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.147.230.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--da18670d-2a40-4cf4-934f-52c335168bd8", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.171.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--21069eaf-cb53-4f7b-8e15-cc1ce292e696", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.174.139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b18a0fc8-386f-4655-8091-efde6df84781", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.147.230.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f44e3f64-0cbb-4832-b30d-d21de1cb481a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.147.229.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--eaf3f7d5-1497-41cf-869e-641ed0f8f994", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.171.78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--de461de3-ed1f-444d-bc4a-32eda3f5935d", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '69.61.38.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--32bfed01-7f6d-4744-a4ae-ecce38786ef1", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.72.202']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--00e40d02-5701-4320-9d34-42b47df8e618", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.252.244.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1f8a4dc0-235e-4f4f-ac7f-aa800e5ddb9a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.171.96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f82b0da9-46b5-4ad3-ae85-42c0a2977a78", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.64.113']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--59b7c4fd-9cce-4da2-a797-f6416d78abfb", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.171.75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a37cce33-1321-4466-a9a4-886e84b89766", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.171.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4665e9fd-5429-409a-8c2c-b1883e33d6ad", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.72.200']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--53a86475-cbd9-43ad-b7d3-a734846a8145", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.174.127']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a37fec31-6b32-49c7-9f7f-9a8d405bc83e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.2.79.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8adf1fcc-c6cf-49bd-8079-5183617a1df6", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '69.61.38.156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e43eabb2-d533-430d-8366-d1947eccfe7e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:42.000Z", "modified": "2020-10-31T19:40:42.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.252.246.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:42Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--700f6e37-6f1c-4263-8f9a-d9c03b0a33bf", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.147.228.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d1cc1198-eda7-4ce7-bf93-7234cd58cd06", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.174.118']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f22e5124-8f1f-441f-874a-02e301c2570b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.174.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a160c97d-8e39-4a58-9328-d21f3098a04e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '96.9.209.217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8ebbef1d-0f4d-454c-bb95-cdd24124894c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '96.9.225.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--75b9857f-9776-4a28-8a7f-104d1b851097", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.252.244.62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--37b67853-8a15-445a-a7af-8b40e4bce516", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.34.6.226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8e133280-730b-4e5f-b23c-b6701a5f3a95", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.171.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b3f30ab4-9622-4bda-9515-9cd8a9c65070", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.171.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--682eb550-db58-4fd1-a597-195c34a1be2b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.174.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--45360cd7-233c-47f7-9d0b-819c48a123ca", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.174.125']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7ae37b0f-742f-46fe-8bed-90fc10b55fec", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.174.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7bff4459-5b42-4160-8d2e-f38d5497f623", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.174.128']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--65d43181-9603-4207-983d-66726534159b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.171.69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--72bc2e07-b82e-4ca7-b01f-89527118808a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '107.173.58.184']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--192f26af-3037-47aa-ba91-7f22ad6d0f18", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '96.9.225.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--46691bab-0603-46c9-a562-b0b5a9696a60", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.171.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--525d36ae-06ec-4ba7-b920-00eedf93f0e6", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.138.172.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0980583d-46c6-4014-bb67-080c64b21f4d", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.174.119']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e6e1714a-3692-4392-8382-6a078faef8bd", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '107.173.58.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fda86f3a-63ec-4290-876a-6eb4884dbb3f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.147.230.159']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1e01db87-ea29-4fc5-9ad2-7b78e5cac742", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.147.229.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e9022699-b10f-431d-893b-c582da6524c2", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '108.62.12.119']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--740ccd61-f4be-40e0-96f4-664e9002b6d3", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '108.62.12.105']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a40de570-8136-4390-ac8d-a967fb1b7b15", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '96.9.209.215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--89c6e9cb-9107-4785-9cb7-2cf60c444de0", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.174.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f4b95fbc-d47a-4c11-a364-3bcaf738ac4a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.34.6.225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1a8412f0-06ae-46f6-aa03-7b3c2b677fd9", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '96.9.209.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a70807a0-aa81-42d1-ac81-a4154dbf556a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '107.173.58.185']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c440a61b-7efc-476f-8a31-af0481feba31", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '107.173.58.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1c23afe9-e1b4-492b-9301-ab451ff05c7d", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.174.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--52f00c7e-bad7-4039-b38b-032ac54edbc8", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.147.230.131']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--18e66712-868a-40b9-994e-8e71cd23037a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.153.241.153']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ebe19cf0-1767-4512-9cb5-979d309dbd55", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.153.241.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3d565ab4-2d03-42f0-8026-fec9989d8c6a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.147.231.222']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a0e1d508-3451-4116-8cdb-60f7d6f11a66", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '74.118.138.115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8ce6e94f-1371-45b9-9bb3-1d7500961b38", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '74.118.138.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--221971a8-bf20-4a14-80b3-17d60b298da8", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '190.211.254.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9df2b4c5-518b-4b6b-b5a3-7231d8f97b6a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '108.62.12.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c513137f-3927-4c06-ae14-c53091c1d07c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '108.62.12.12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8d902920-b509-4eec-a7e9-264271569ff7", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.153.240.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2e55613f-5696-49aa-bc68-0bf7b537e035", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.153.241.158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8f74ca52-f2af-4c4f-a6e2-b812baf56fa9", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '172.241.27.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7f162988-eeef-42dc-bfe9-2907112166ce", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.153.240.220']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b8092df5-d25f-4796-8e13-8048913df0c1", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.153.241.1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--979317a1-db49-43fc-895b-3da94f09fa92", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.153.240.136']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--905bf899-c0d7-4f7a-9ced-d74ded7eec47", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '74.118.138.139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1afcfa42-0b47-4993-9151-6b54d62630f6", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '172.241.27.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--86b45409-66af-4f57-a22b-0091da568edf", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.147.230.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--162d7099-4a0f-4bd7-a1c9-6d9aede6e422", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.153.240.222']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b10d726a-d112-4a0c-b7a7-5e4b63053d5b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.153.240.194']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f6e3dbb5-72d8-401a-93da-6a139ef891fa", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '74.118.138.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ae70448c-ba1a-4ce4-8e12-5c3bc6d236b1", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '108.62.12.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--07d8cfc3-b9c0-47bd-828f-6639f40b4397", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '108.62.12.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--51cfb843-6632-49ba-9fc2-79d5c9c775fc", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.153.240.178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--706987da-ae82-4624-acfc-0d69b60b24df", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.153.240.240']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8fdab0ba-1b12-4ba2-b054-e63698aaaf2f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:43.000Z", "modified": "2020-10-31T19:40:43.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.153.240.157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:43Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cc100484-c5a4-4384-99c9-e6f533b2eade", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '108.177.235.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--83e59c7d-040c-4082-ab38-2deb8ee57ae1", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '172.241.27.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--24a01f85-3996-4a9a-bae8-6a9071191e66", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'hakunaman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2ed2c3bc-87f4-471f-b425-f6484b02df13", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'service-boosterr.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--653ed5bc-e31b-4698-83de-98c2469e864e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'harddagger.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6965ad2f-6597-4a1a-b795-69c510054aec", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'tarhungangster.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--659a87bf-0f6f-4122-9c3a-787788230373", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'gameleaderr.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b9881aef-d260-4d0a-a728-21288bd6ec9a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'backup-leader.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d2fcf6d7-ca3c-4139-b4a0-06cc38993be4", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'getinformationss.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f26874f2-aa1d-4aeb-bf45-11e1d5aadca6", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'best-nas.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--07ef07e5-f368-44ad-9e78-61ccbe9a70a3", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'raaidboss.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0a8253a2-f767-4a54-998e-9e578436126b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'service-leader.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--16fb014b-08c7-4cdc-b84a-91e3bb2dc51e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'sobcase.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c2f03965-9111-4484-a08f-babfb87f447e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'topbackup-helper.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--14a3973a-5662-4c41-9bc7-864e8ba9a60a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'best-backup.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e077677d-a448-47f2-9709-39daad1de91a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'loockfinderrs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f741c2ac-c3f3-46f4-acff-4b444ed6f7c1", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'dotmaingame.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--037caa03-6cc1-4765-af4a-4bfd444ee299", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'reginds.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4d8c958f-753e-4f35-89f6-8dbab1770492", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'servicemount.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1d33aa3e-6487-470e-8a2a-f7ec16f01574", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'gtrsqer.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4afc8c8d-1d65-4207-9f81-4baaf14278d5", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'topbackupintheworld.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--491907cd-2e4e-4646-bc6b-e993fc71999a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'vnuret.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--98ba0fae-f5f1-4ae5-b5d7-58045fd70eda", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'zetrexx.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c1226c25-3d14-4e7d-9715-d39fb895c6d7", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'gungameon.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dbe6d86a-649b-41ee-802c-8d6cc4879271", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'chalengges.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9eff2ea4-c9d7-4949-99e9-6fd006f8502c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'cheapshhot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5a32a470-5d2d-4cb9-9e38-a262510d40b5", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'luckyhunterrs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7c8c4a4a-7977-4260-a315-9d7289482a84", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'saynoforbubble.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--78982a30-a200-461d-9d40-b419b3b22766", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'hybriqdjs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8d8f70cb-555a-40b8-a4fd-f7e4119e6a14", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'hungrrybaby.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7e443bea-3c1f-48c5-b6e1-64881dbdcf09", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'havemosts.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5a129e69-a61e-4159-9d2a-a10c0b1795a6", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'bithunterr.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b216c7a1-e97d-431d-b313-f92707446476", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'servicesupdater.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a3b6df35-da67-4102-9d97-d5534304cfdc", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'sibalsakie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--995c1011-2b55-447b-b5a0-af6e6f0f3b1b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'gunsdrag.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b92a7e97-700f-4f81-ab44-42a9819827a5", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'secondlivve.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5a3a2944-d206-4451-8f68-0ae0a71cae6a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'rapirasa.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1776837f-af47-4367-8fa0-bc21fc0dad85", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'top-backuphelper.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1d278681-2788-4caf-a87c-ed6718f5ce8a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'bakcup-monster.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e069ca3f-e389-4f2e-8069-4991344285f3", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'regbed.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a1f398b6-a2ab-40af-bae8-9e0aea86b465", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'backup-simple.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--30ba40bf-fb8d-4ef3-b841-72c6e2120045", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'bakcup-checker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d70e5bc8-a78b-4c21-9e70-8b92804d1b75", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'jonsonsbabyy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--01181947-30e3-4e02-a03a-b049ff37b079", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'qascker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8c146bc7-a472-4da8-8e1a-de7715181401", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'serviceupdatter.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cf653121-9161-4a72-8c0a-1d81ca578c5c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'remotessa.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a9edee6e-cf99-4c2b-ac67-cfdaa75e4c29", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'maybebaybe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2db6922c-6892-46ac-83e5-8dcaba77cb64", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'errvghu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--86756914-2669-4403-8dd0-4716074875ea", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'realgamess.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7bb44c6b-f591-46ca-8ca0-8d6b7adca7b6", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'imagodd.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ad172c14-9669-4afe-9f47-850a4dd4c262", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'wondergodst.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1915789b-db6c-4f65-bf52-069d263fc50a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'wodemayaa.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--393e2459-d720-4b42-8657-9a178f597ece", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'bugsbunnyy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2ad348e3-e93e-4d48-ab5a-aaf4099dda00", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'elephantdrrive.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--37e217b9-4bf1-46b1-875b-a8e837786222", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'voiddas.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0caf7205-fc98-4c1d-a2bf-9fb653759abe", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'puckhunterrr.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ad2824ea-d725-4185-9595-09aad27d5842", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'cantliee.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--eea030ce-f937-4f04-a1c3-890496bb4e0d", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'ayiyas.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7c82b149-5805-4cdb-b5b3-9781e52ee8a8", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'lindasak.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--82975f84-ec21-4738-857f-84cef6c5a203", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'pudgeee.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6690dc0f-3562-4a82-99ee-25f3aefd323e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:44.000Z", "modified": "2020-10-31T19:40:44.000Z", "pattern": "[domain-name:value = 'sunofgodd.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:44Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9c550faf-29d1-416b-8155-83d864f14a9b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'quwasd.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--904ccd86-aa2e-4383-8c8b-82d3c938ecb0", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'razorses.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--98a18413-fc4f-4f49-8736-93e30ed94201", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'chekingking.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ef8d525f-0074-4b2f-86b5-33b7ab74ff84", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'serviceboosterr.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--501438b6-cb93-41a5-92f7-6049255c5229", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'mixunderax.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--05313b3f-80a4-4070-9f13-f3f988e60a51", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'martahzz.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bc4d5adb-bb4f-4003-b0d8-0d2d3047a9c6", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'nasmastrservice.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3e4358d2-b333-4de4-854c-ff385a150a5e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'loxliver.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c69bfdab-caad-41ca-89ee-8944f4d4f30d", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'sweetmonsterr.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b4491e65-e909-43a9-99bd-0b7a4017dc43", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'service-checker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ff4432fa-5e53-4577-a171-74a0f135f4b8", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'zhameharden.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--674d9d89-b6db-4483-8f64-568dd3b1d085", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'nas-leader.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--814390a4-af18-46a8-aa02-b4a59e4c0929", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'unlockwsa.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0fe3f6b6-58b9-4810-b3b1-add4bceac4d8", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'nomadfunclub.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--23b97c30-a9f2-4fa7-978b-8c75f4184791", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'tiancaii.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--304df5e9-4f65-401b-8c88-4092bf008a5c", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'service-hellper.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1b47dc89-ee4b-478c-a0db-f234b37baf92", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'bouths.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--235ecc9c-4dc3-423f-9407-fc2073ff3dfa", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'mountasd.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--40c5b0f0-0e7c-4bfb-a155-edf87f6c8af2", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'boost-servicess.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--72aa6c14-308d-4f28-a131-2c0020dbd2d9", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'servicegungster.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--be880691-3625-4c3f-a2ba-78d8f56c9886", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'raidbossa.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--489c1899-6433-48af-870b-e240d00ab6e7", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'topservicebooster.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--eaaa79ab-eada-47eb-a8e5-447e493587e0", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'simple-backupbooster.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8a2b0c42-8989-4d20-92f5-6b732f2b0508", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'checktodrivers.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--01fb10cb-e778-49fe-b729-c9aa070a4c30", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'driver1downloads.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--02547b92-07e5-45a2-a0c6-1c1f52a98f39", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'backup1master.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4762c523-cedb-4b2e-98b9-0995cd685d25", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'top-backupservice.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d49a7dbc-8b6d-4d53-8517-52c7a59ac6fa", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'top3-services.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7dc526a5-9612-46f5-9726-71c4d275acd1", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'backup1services.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ddd325af-b45d-4b05-bb09-09a5c1713521", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'top3servicebooster.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d1f2ac5a-0489-4464-8ec9-960afa6edb5d", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'servicereader.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e9bc1841-d947-4f14-8688-f26298bf3de4", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'backup1helper.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--88fe6e57-9624-48b3-8932-d7779c9f06dd", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'backupmasterservice.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c56ff49d-bb83-40fb-9782-f75953ce4105", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'viewdrivers.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3c910f39-5637-4586-b761-a177ce3c3e71", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'topservice-masters.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cd761e07-6a63-45b7-a0a2-ac08a272d1df", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'service1updater.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--33e30e84-09b4-4eec-95ea-1b85d0694411", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'nas-simple-helper.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0efb0e59-aec6-4fd3-add3-426779082cbb", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'driver1master.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--03421dd6-83c9-40de-af61-ec7d16301207", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'bestservicehelper.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ca8b83f2-60b3-44fe-9d40-cbcf61ccde3f", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'backupmaster-service.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a663363a-bb4d-48b8-b79d-2b07d3523688", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'driver1updater.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--acc4fe79-27c6-4090-8e09-950c5ec767d9", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'boost-yourservice.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--71d64503-e028-41bf-8b5e-6d55ffaac180", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'driverdwl.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0b3c86d3-c897-49c8-8aa3-9816e4626dcc", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'bigjamg.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8ec94493-c8c8-445f-99e0-6f3bd3c2a18e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[url:value = 'https://bigjamg.xyz/f57f86c4bfa3702d46ba9d6ca684937b/2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--257bd986-d805-4e89-9750-189bb63c5177", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[url:value = 'https://bigjamg.xyz/f57f86c4bfa3702d46ba9d6ca684937b/4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5b5e2ddb-91fc-44f9-a8fc-706972d528ba", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'cntrhum.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--afdaca7f-872f-4567-b0a8-e0c7310c5c8b", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '45.153.240.246']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e5893654-f7d3-4b25-aa0f-98ae56d075fb", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'fastbloodhunter.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b41d63ee-635a-41b1-9315-765191f58b09", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'caonimas.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f1ce40da-faa5-4cb4-a955-43e5a0d9859d", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'bukaguka.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b7b9cca7-b7d5-486f-a0b9-22c1a9c17ff4", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'backupmastter.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0751541d-e7d5-4aba-b3ab-290afd2e05e8", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = '12402-22344.bacloud.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"hostname\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a581ca0b-8bb8-4f91-b192-b2458a4cc9d5", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.119.174.117']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--85b51878-4ce8-45ad-ab27-157c386575e8", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[url:value = 'https://titlecs.com/issues/282']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--812a9909-aa79-4810-b961-4aad8a4531ab", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[url:value = 'https://titlecs.com/issues/284']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2648a258-e710-4ef2-a04b-b73c3ae98762", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[url:value = 'https://labelcs.com/f57f86c4bfa3702d46ba9d6ca684937b/2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--eef5c5db-d090-4078-872b-d5ea2d1dd17e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[url:value = 'https://labelcs.com/f57f86c4bfa3702d46ba9d6ca684937b/4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--138623d9-bea7-4cec-862a-3dcaa7ceccb2", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'labelcs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--16e55381-5a8d-4451-852a-bc66472176a6", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'titlecs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8e1716b6-c48c-437f-93cc-3bdfa48af870", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'nicknamec.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--be783989-65e8-46eb-be4f-db53f173e5d9", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'mixcinc.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ebe0d4cc-6143-4313-bb48-b8f06f471532", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:45.000Z", "modified": "2020-10-31T19:40:45.000Z", "pattern": "[domain-name:value = 'freedubcs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:45Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--846d266c-96bf-42da-849c-ac30ec196a70", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:46.000Z", "modified": "2020-10-31T19:40:46.000Z", "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.182.210.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"ip-dst\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7fdb3930-3bc8-4266-a6db-56176b2038be", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:46.000Z", "modified": "2020-10-31T19:40:46.000Z", "pattern": "[url:value = 'https://cstr4.com/phpbb/article']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d97c0b9d-27d3-4083-bd99-dcd06df6f4fd", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:46.000Z", "modified": "2020-10-31T19:40:46.000Z", "pattern": "[domain-name:value = 'cstr1.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1046d5f5-4dc6-45ec-8ccc-377767822552", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:46.000Z", "modified": "2020-10-31T19:40:46.000Z", "pattern": "[domain-name:value = 'cstr5.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--47b6e288-acad-4851-bc7d-4ad200aaa843", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:46.000Z", "modified": "2020-10-31T19:40:46.000Z", "pattern": "[domain-name:value = 'cstr4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ea3445f0-4f7b-400f-9341-03a4a3b0b0b0", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:46.000Z", "modified": "2020-10-31T19:40:46.000Z", "pattern": "[url:value = 'https://cstr3.com/phpbb/article']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--31023e2a-53a1-4934-86bc-a03b4fa8ac8a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:46.000Z", "modified": "2020-10-31T19:40:46.000Z", "pattern": "[domain-name:value = 'cstr2.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bf6bc360-4645-4db6-8d7c-64f7a75b0496", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:46.000Z", "modified": "2020-10-31T19:40:46.000Z", "pattern": "[domain-name:value = 'cstr3.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"domain\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4c1898e1-c767-46aa-a602-db9afcc7490a", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:40:46.000Z", "modified": "2020-10-31T19:40:46.000Z", "pattern": "[url:value = 'https://cstr5.com/phpbb/article']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2020-10-31T19:40:46Z", "kill_chain_phases": [ { "kill_chain_name": "misp-category", "phase_name": "Network activity" } ], "labels": [ "misp:type=\"url\"", "misp:category=\"Network activity\"", "misp:to_ids=\"True\"" ] }, { "type": "observed-data", "spec_version": "2.1", "id": "observed-data--5c7352d1-cbf8-40bf-8b93-d1918185361e", "created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f", "created": "2020-10-31T19:41:11.000Z", "modified": "2020-10-31T19:41:11.000Z", "first_observed": "2020-10-31T19:41:11Z", "last_observed": "2020-10-31T19:41:11Z", "number_observed": 1, "object_refs": [ "url--5c7352d1-cbf8-40bf-8b93-d1918185361e" ], "labels": [ "misp:type=\"link\"", "misp:category=\"External analysis\"" ] }, { "type": "url", "spec_version": "2.1", "id": "url--5c7352d1-cbf8-40bf-8b93-d1918185361e", "value": "https://raw.githubusercontent.com/SEKOIA-IO/Community/main/IOCs/2020-10-29%20C2%20Ryuk.csv" }, { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } } ] }