misp-circl-feed/feeds/circl/misp/57cd8beb-79e4-4497-931f-4249950d210f.json

715 lines
No EOL
22 KiB
JSON

{
"Event": {
"analysis": "0",
"date": "2016-09-05",
"extends_uuid": "",
"info": "Malspam 2016-09-05 (.wsf in .zip)",
"publish_timestamp": "1473091148",
"published": true,
"threat_level_id": "3",
"timestamp": "1473091137",
"uuid": "57cd8beb-79e4-4497-931f-4249950d210f",
"Orgc": {
"name": "CIRCL",
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
},
"Tag": [
{
"colour": "#ffffff",
"local": false,
"name": "tlp:white",
"relationship_type": ""
},
{
"colour": "#3a7300",
"local": false,
"name": "circl:incident-classification=\"malware\"",
"relationship_type": ""
}
],
"Attribute": [
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088704",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd8cc0-4fa8-4be1-97c3-3307950d210f",
"value": "158.69.147.89"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088705",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd8cc1-8260-41bc-a757-3307950d210f",
"value": "185.33.52.18"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088705",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd8cc1-db9c-477d-957d-3307950d210f",
"value": "195.208.0.121"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088705",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd8cc1-5598-4c85-a2d9-3307950d210f",
"value": "195.238.0.64"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088705",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd8cc1-d4f0-4693-a7e5-3307950d210f",
"value": "195.248.63.109"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088705",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd8cc1-3640-4e27-bc8b-3307950d210f",
"value": "200.83.4.62"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088706",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd8cc2-6398-471d-ad4e-3307950d210f",
"value": "208.71.106.37"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088706",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd8cc2-6798-4bc5-8ba0-3307950d210f",
"value": "213.180.150.17"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088706",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd8cc2-3430-4466-8645-3307950d210f",
"value": "213.205.40.169"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088706",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd8cc2-e330-42ad-b14e-3307950d210f",
"value": "78.110.50.113"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088706",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd8cc2-2814-49c3-9262-3307950d210f",
"value": "80.150.6.138"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088707",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd8cc3-cfa4-440d-9fba-3307950d210f",
"value": "81.196.20.134"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088707",
"to_ids": true,
"type": "hostname",
"uuid": "57cd8cc3-aeb4-4d74-8ecc-3307950d210f",
"value": "frumuseanudaniela.go.ro"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088707",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc3-1700-4a49-bfc9-3307950d210f",
"value": "http://frumuseanudaniela.go.ro/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088707",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc3-9d3c-43cb-b079-3307950d210f",
"value": "http://jvelizg.vtrbandaancha.net/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088708",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc4-6218-4d8a-9217-3307950d210f",
"value": "http://lcc.vtrbandaancha.net/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088708",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc4-5aec-4aeb-8c91-3307950d210f",
"value": "http://maxshoppppsr.biz/js/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088708",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc4-b24c-4f97-9fbc-3307950d210f",
"value": "http://monkeeey.web.fc2.com/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088708",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc4-113c-4299-b72a-3307950d210f",
"value": "http://roadstercrew-nw.homepage.t-online.de/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088708",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc4-7de4-45c4-9c92-3307950d210f",
"value": "http://www.bals.nichost.ru/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088709",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc5-88f0-4fac-be57-3307950d210f",
"value": "http://www.equipe4.net/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088709",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc5-7060-47f7-b3b4-3307950d210f",
"value": "http://www.officinaomc.com/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088709",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc5-a990-4f1e-a1a4-3307950d210f",
"value": "http://www.poli-mec.it/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088709",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc5-786c-4a5b-9f56-3307950d210f",
"value": "http://www.rossorelli.ru/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088709",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc5-bca8-4557-a805-3307950d210f",
"value": "http://www.trzynastkajg.republika.pl/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088710",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc6-d574-4136-89a5-3307950d210f",
"value": "http://www.yacht-market.eu/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088710",
"to_ids": true,
"type": "url",
"uuid": "57cd8cc6-4ff0-42e1-bdbf-3307950d210f",
"value": "http://yggithuq.utawebhost.at/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088710",
"to_ids": true,
"type": "hostname",
"uuid": "57cd8cc6-6b7c-4b5a-b7d1-3307950d210f",
"value": "jvelizg.vtrbandaancha.net"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088710",
"to_ids": true,
"type": "hostname",
"uuid": "57cd8cc6-cb88-4b36-9fd8-3307950d210f",
"value": "lcc.vtrbandaancha.net"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088710",
"to_ids": true,
"type": "domain",
"uuid": "57cd8cc6-6818-4cc3-bfac-3307950d210f",
"value": "maxshoppppsr.biz"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088711",
"to_ids": true,
"type": "hostname",
"uuid": "57cd8cc7-def8-4723-a98d-3307950d210f",
"value": "monkeeey.web.fc2.com"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088711",
"to_ids": true,
"type": "hostname",
"uuid": "57cd8cc7-2780-4620-8465-3307950d210f",
"value": "roadstercrew-nw.homepage.t-online.de"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088711",
"to_ids": true,
"type": "hostname",
"uuid": "57cd8cc7-c2c0-4f6f-8c06-3307950d210f",
"value": "www.bals.nichost.ru"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088711",
"to_ids": true,
"type": "hostname",
"uuid": "57cd8cc7-6790-4c18-ad13-3307950d210f",
"value": "www.equipe4.net"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088711",
"to_ids": true,
"type": "hostname",
"uuid": "57cd8cc7-ef68-4d5d-8b40-3307950d210f",
"value": "www.officinaomc.com"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088712",
"to_ids": true,
"type": "hostname",
"uuid": "57cd8cc8-4334-47b2-a8cc-3307950d210f",
"value": "www.poli-mec.it"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088712",
"to_ids": true,
"type": "hostname",
"uuid": "57cd8cc8-5478-430a-a2b6-3307950d210f",
"value": "www.rossorelli.ru"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088712",
"to_ids": true,
"type": "hostname",
"uuid": "57cd8cc8-d2a4-4d73-a1ba-3307950d210f",
"value": "www.trzynastkajg.republika.pl"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088712",
"to_ids": true,
"type": "hostname",
"uuid": "57cd8cc8-e664-45b1-ad8a-3307950d210f",
"value": "www.yacht-market.eu"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473088713",
"to_ids": true,
"type": "hostname",
"uuid": "57cd8cc9-3688-4686-a908-3307950d210f",
"value": "yggithuq.utawebhost.at"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091132",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd963c-a890-4339-9597-4152950d210f",
"value": "112.140.42.29"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091132",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd963c-4904-4473-8858-47d4950d210f",
"value": "208.71.106.62"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091132",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd963c-cd08-438e-b0b9-4d89950d210f",
"value": "212.46.196.141"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091133",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd963d-7938-4060-b1d1-47f5950d210f",
"value": "23.95.106.213"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091133",
"to_ids": true,
"type": "hostname",
"uuid": "57cd963d-a74c-4fa1-b58a-46f3950d210f",
"value": "52433865.fn.freenet-hosting.de"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091133",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd963d-2314-413c-8bdf-4bed950d210f",
"value": "68.65.121.203"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091133",
"to_ids": true,
"type": "ip-dst",
"uuid": "57cd963d-6a88-4f01-8e04-4544950d210f",
"value": "81.169.145.153"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091134",
"to_ids": true,
"type": "hostname",
"uuid": "57cd963e-9914-4211-ab0a-43da950d210f",
"value": "deemc.homepage.t-online.de"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091134",
"to_ids": true,
"type": "hostname",
"uuid": "57cd963e-5b48-4e93-853f-43c8950d210f",
"value": "gregor-weiss.business.t-online.de"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091134",
"to_ids": true,
"type": "url",
"uuid": "57cd963e-5cc4-4b4c-b7c6-4c93950d210f",
"value": "http://52433865.fn.freenet-hosting.de/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091134",
"to_ids": true,
"type": "url",
"uuid": "57cd963e-8580-4ee8-960f-4b5a950d210f",
"value": "http://deemc.homepage.t-online.de/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091134",
"to_ids": true,
"type": "url",
"uuid": "57cd963e-1a1c-430e-8b69-44d3950d210f",
"value": "http://gregor-weiss.business.t-online.de/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091135",
"to_ids": true,
"type": "url",
"uuid": "57cd963f-edf8-4db6-b458-4912950d210f",
"value": "http://miyufortuneteller.web.fc2.com/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091135",
"to_ids": true,
"type": "url",
"uuid": "57cd963f-9abc-4c2e-aedb-414b950d210f",
"value": "http://mojejeze.republika.pl/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091135",
"to_ids": true,
"type": "url",
"uuid": "57cd963f-c1c4-40a1-8c49-4de7950d210f",
"value": "http://quietvain.nobody.jp/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091135",
"to_ids": true,
"type": "url",
"uuid": "57cd963f-4d1c-440e-af03-4bf1950d210f",
"value": "http://tensai.wallst.ru/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091136",
"to_ids": true,
"type": "url",
"uuid": "57cd9640-9c20-430d-90c8-4100950d210f",
"value": "http://treasure-force.com/87b3ff3rc"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091136",
"to_ids": true,
"type": "hostname",
"uuid": "57cd9640-f4bc-4279-99e7-4e1b950d210f",
"value": "miyufortuneteller.web.fc2.com"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091136",
"to_ids": true,
"type": "hostname",
"uuid": "57cd9640-6970-41ca-b5a3-4506950d210f",
"value": "mojejeze.republika.pl"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091136",
"to_ids": true,
"type": "hostname",
"uuid": "57cd9640-f380-4f25-b7ae-48e8950d210f",
"value": "quietvain.nobody.jp"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091137",
"to_ids": true,
"type": "hostname",
"uuid": "57cd9641-6fa4-467d-9aec-4626950d210f",
"value": "tensai.wallst.ru"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1473091137",
"to_ids": true,
"type": "domain",
"uuid": "57cd9641-0068-48d3-9580-43bf950d210f",
"value": "treasure-force.com"
}
]
}
}