187 lines
No EOL
5.4 KiB
JSON
187 lines
No EOL
5.4 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "0",
|
|
"date": "2016-09-14",
|
|
"extends_uuid": "",
|
|
"info": "Malspam 2016-09-14 (.wsf in .zip) - campaign: \"Account report\"",
|
|
"publish_timestamp": "1473846165",
|
|
"published": true,
|
|
"threat_level_id": "3",
|
|
"timestamp": "1473846038",
|
|
"uuid": "57d91b04-fabc-46fe-8d05-441d950d210f",
|
|
"Orgc": {
|
|
"name": "CIRCL",
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": false,
|
|
"name": "tlp:white",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#3a7300",
|
|
"local": false,
|
|
"name": "circl:incident-classification=\"malware\"",
|
|
"relationship_type": ""
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846035",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57d91b13-8914-4042-a99e-426b950d210f",
|
|
"value": "178.212.131.10"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846035",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57d91b13-ab3c-4f17-adef-4f9b950d210f",
|
|
"value": "37.200.70.6"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846035",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57d91b13-e514-45d5-80ee-4da1950d210f",
|
|
"value": "adzebury.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846036",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57d91b14-49ac-4940-8259-4eaa950d210f",
|
|
"value": "citmowra.in"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846036",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57d91b14-9468-4932-aa3e-464f950d210f",
|
|
"value": "ecadxyst.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846036",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57d91b14-bb90-4668-a078-4684950d210f",
|
|
"value": "http://adzebury.com/hl4jon6s"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846036",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57d91b14-eebc-44b9-8314-4310950d210f",
|
|
"value": "http://citmowra.in/103k7o"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846037",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57d91b15-9244-4bbd-af3d-4dec950d210f",
|
|
"value": "http://ecadxyst.net/c47vp"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846037",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57d91b15-2b40-42fa-9b09-48f8950d210f",
|
|
"value": "http://maydayen.net/l835ztl"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846037",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57d91b15-dbb0-44d5-aef7-4638950d210f",
|
|
"value": "http://sparmsov.org/62737"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846037",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57d91b15-0830-4847-a93b-487a950d210f",
|
|
"value": "http://sternhala.com/c6wszjm"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846037",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57d91b15-b124-4224-9aa3-44ec950d210f",
|
|
"value": "maydayen.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846038",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57d91b16-55f8-4b0e-8ba1-4495950d210f",
|
|
"value": "sparmsov.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473846038",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57d91b16-30c0-4057-99ec-43e0950d210f",
|
|
"value": "sternhala.com"
|
|
}
|
|
]
|
|
}
|
|
} |