misp-circl-feed/feeds/circl/misp/591d569d-3c2c-42fa-a2fb-c518950d210f.json

{"Event": {"info": "Password-protected docs 2017-05-17 : Ursnif 2002 - \"someone@mycompany.com-ab1_c23def4lg56hi#78j.docx\"", "Tag": [{"colour": "#ffffff", "exportable": true, "name": "tlp:white"}], "publish_timestamp": "0", "timestamp": "1495107701", "analysis": "1", "Attribute": [{"comment": "", "category": "Artifacts dropped", "uuid": "591d569e-4c54-4ebd-9674-c525950d210f", "timestamp": "1495094942", "to_ids": true, "value": "bd69c7180be424f1c17129b6ffa0d8e2", "disable_correlation": false, "object_relation": null, "type": "md5"}, {"comment": "", "category": "Artifacts dropped", "uuid": "591d569f-0e30-4633-bc78-c51f950d210f", "timestamp": "1495094943", "to_ids": true, "value": "2b6827c73ebb9acae9d2483b8b23fd76", "disable_correlation": false, "object_relation": null, "type": "md5"}, {"comment": "", "category": "Network activity", "uuid": "591d56a0-884c-4f78-a3d1-a004950d210f", "timestamp": "1495094944", "to_ids": true, "value": "http://91.247.36.92/132957927.bmp", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "591d56a1-d888-4e6e-b873-c51a950d210f", "timestamp": "1495094945", "to_ids": true, "value": "91.247.36.92", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "", "category": "Network activity", "uuid": "591d56a2-fa00-473c-8c3b-9f05950d210f", "timestamp": "1495094946", "to_ids": true, "value": "http://www.librairiescdd.be/sp.png", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "591d56a3-e37c-4a8c-b5ef-c520950d210f", "timestamp": "1495094947", "to_ids": true, "value": "www.librairiescdd.be", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "www.librairiescdd.be", "category": "Network activity", "uuid": "591d56a4-8710-485e-8cb8-c525950d210f", "timestamp": "1495094948", "to_ids": true, "value": "46.105.101.143", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "DGA seed text", "category": "Network activity", "uuid": "591d56a5-2a4c-47c1-89d6-99a3950d210f", "timestamp": "1495107655", "to_ids": false, "value": "http://www.php.net/license/3_0.txt", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "591d56a7-a0ac-4137-be18-a005950d210f", "timestamp": "1495094951", "to_ids": true, "value": "inclvoluntaryallcondi.ru", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "591d56a8-4f84-46ba-a36e-c520950d210f", "timestamp": "1495094952", "to_ids": true, "value": "inclvoluntaryallcondi.ru", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "inclvoluntaryallcondi.ru", "category": "Network activity", "uuid": "591d56a8-f7e0-4703-90b5-99a3950d210f", "timestamp": "1495094952", "to_ids": true, "value": "87.106.18.141", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "591d56a9-a470-4b50-82d3-99a4950d210f", "timestamp": "1495094953", "to_ids": true, "value": "andninformationfrom.ru", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "591d56aa-faf0-4c29-8cde-c518950d210f", "timestamp": "1495094954", "to_ids": true, "value": "andninformationfrom.ru", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "andninformationfrom.ru", "category": "Network activity", "uuid": "591d56ab-8810-4a99-9bf8-a005950d210f", "timestamp": "1495094955", "to_ids": true, "value": "77.120.185.50", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "andninformationfrom.ru", "category": "Network activity", "uuid": "591d56ac-4a1c-4292-affc-99a9950d210f", "timestamp": "1495094956", "to_ids": true, "value": "188.230.57.174", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "andninformationfrom.ru", "category": "Network activity", "uuid": "591d56ad-10fc-42f4-863d-c525950d210f", "timestamp": "1495094957", "to_ids": true, "value": "176.102.207.142", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "andninformationfrom.ru", "category": "Network activity", "uuid": "591d56ae-a3fc-4c51-aeef-a001950d210f", "timestamp": "1495094958", "to_ids": true, "value": "46.151.45.198", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "andninformationfrom.ru", "category": "Network activity", "uuid": "591d56ae-048c-4c4e-bb63-a004950d210f", "timestamp": "1495094958", "to_ids": true, "value": "46.119.246.235", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "andninformationfrom.ru", "category": "Network activity", "uuid": "591d56af-648c-43bb-8676-9f05950d210f", "timestamp": "1495094959", "to_ids": true, "value": "109.86.110.190", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "andninformationfrom.ru", "category": "Network activity", "uuid": "591d56b0-1504-412d-90fa-99a3950d210f", "timestamp": "1495094960", "to_ids": true, "value": "92.244.96.182", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "andninformationfrom.ru", "category": "Network activity", "uuid": "591d56b1-6220-4f5f-9754-c51f950d210f", "timestamp": "1495094961", "to_ids": true, "value": "93.170.153.170", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "andninformationfrom.ru", "category": "Network activity", "uuid": "591d56b2-d6e8-4827-8a90-99a0950d210f", "timestamp": "1495094962", "to_ids": true, "value": "78.158.202.235", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "andninformationfrom.ru", "category": "Network activity", "uuid": "591d56b2-f324-4ef9-8e18-a004950d210f", "timestamp": "1495094962", "to_ids": true, "value": "37.235.222.17", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "591d56b3-16ec-413b-ab61-99a9950d210f", "timestamp": "1495094963", "to_ids": true, "value": "licenseprrights.ru", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "591d56b4-4c8c-4708-83ca-c520950d210f", "timestamp": "1495094964", "to_ids": true, "value": "licenseprrights.ru", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "licenseprrights.ru", "category": "Network activity", "uuid": "591d56b5-a2d4-42aa-b7d9-a001950d210f", "timestamp": "1495094965", "to_ids": true, "value": "176.31.62.78", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "licenseprrights.ru", "category": "Network activity", "uuid": "591d56b6-37f4-4881-8d8e-99a0950d210f", "timestamp": "1495094966", "to_ids": true, "value": "151.80.78.61", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "licenseprrights.ru", "category": "Network activity", "uuid": "591d56b7-b900-4fee-9104-c524950d210f", "timestamp": "1495094967", "to_ids": true, "value": "87.98.254.64", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "licenseprrights.ru", "category": "Network activity", "uuid": "591d56b8-2070-4e78-ab25-99a9950d210f", "timestamp": "1495094968", "to_ids": true, "value": "176.31.62.77", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "591d56b8-c4b8-4887-9169-c51c950d210f", "timestamp": "1495094968", "to_ids": true, "value": "ppublcontricopyright.ru", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "591d56b9-a1e8-4141-a2c0-c525950d210f", "timestamp": "1495094969", "to_ids": true, "value": "ppublcontricopyright.ru", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "", "category": "Network activity", "uuid": "591d56bb-a684-4a7a-9e65-a001950d210f", "timestamp": "1495094971", "to_ids": true, "value": "aboveincludesretainco.ru", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "591d56bc-5af4-45a8-aff3-a007950d210f", "timestamp": "1495094972", "to_ids": true, "value": "aboveincludesretainco.ru", "disable_correlation": false, "object_relation": null, "type": "hostname"}], "extends_uuid": "", "published": false, "date": "2017-05-18", "Orgc": {"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f", "name": "CIRCL"}, "threat_level_id": "3", "uuid": "591d569d-3c2c-42fa-a2fb-c518950d210f"}}