misp-circl-feed/feeds/circl/misp/59245845-a0f8-4198-af28-3ddc950d210f.json

{"Event": {"info": "Jaff 2017-05-23 : \"Invoice\" - \"12-3456.pdf\"", "Tag": [{"colour": "#ffffff", "exportable": true, "name": "tlp:white"}, {"colour": "#006c6c", "exportable": true, "name": "ecsirt:malicious-code=\"ransomware\""}, {"colour": "#0088cc", "exportable": true, "name": "misp-galaxy:ransomware=\"Jaff\""}], "publish_timestamp": "0", "timestamp": "1495554174", "analysis": "1", "Attribute": [{"comment": "", "category": "Network activity", "uuid": "5924587a-0b9c-48fb-b11e-3dd2950d210f", "timestamp": "1495554170", "to_ids": true, "value": "http://maximusstafastoriesticks.info/a5", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "5924587d-ef80-472a-af91-c159950d210f", "timestamp": "1495554172", "to_ids": true, "value": "maximusstafastoriesticks.info", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "maximusstafastoriesticks.info", "category": "Network activity", "uuid": "5924587e-5394-4d5d-b0ff-c155950d210f", "timestamp": "1495554174", "to_ids": true, "value": "185.109.147.122", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "59245877-05fc-4ca9-a2e2-c154950d210f", "timestamp": "1495554167", "to_ids": true, "value": "williams-fitness.com", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "williams-fitness.com", "category": "Network activity", "uuid": "59245879-ede0-4aff-976a-6bfa950d210f", "timestamp": "1495554169", "to_ids": true, "value": "143.95.44.115", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "59245876-1f10-415a-8b19-c150950d210f", "timestamp": "1495554166", "to_ids": true, "value": "http://williams-fitness.com/fgJds2U", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "uslugitransportowe-warszawa.pl", "category": "Network activity", "uuid": "59245875-8278-4a28-8a8b-180d950d210f", "timestamp": "1495554165", "to_ids": true, "value": "188.68.249.235", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "59245873-a7b8-4d3c-a6ca-c14e950d210f", "timestamp": "1495554163", "to_ids": true, "value": "uslugitransportowe-warszawa.pl", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "", "category": "Network activity", "uuid": "59245868-51c8-4999-b464-6b79950d210f", "timestamp": "1495554152", "to_ids": true, "value": "http://oliverkuo.com.au/fgJds2U", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "59245869-8088-41ef-8c1c-c159950d210f", "timestamp": "1495554153", "to_ids": true, "value": "oliverkuo.com.au", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "oliverkuo.com.au", "category": "Network activity", "uuid": "5924586c-0de0-4e2c-9a87-c155950d210f", "timestamp": "1495554156", "to_ids": true, "value": "27.54.86.49", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "5924586d-c514-44bf-94be-47aa950d210f", "timestamp": "1495554157", "to_ids": true, "value": "http://pcflame.com.au/fgJds2U", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "5924586e-ed8c-4299-a339-c156950d210f", "timestamp": "1495554158", "to_ids": true, "value": "pcflame.com.au", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "pcflame.com.au", "category": "Network activity", "uuid": "59245871-9f24-47d2-a997-6a00950d210f", "timestamp": "1495554161", "to_ids": true, "value": "103.9.170.249", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "59245872-0214-46ae-8ee2-3ddc950d210f", "timestamp": "1495554162", "to_ids": true, "value": "http://uslugitransportowe-warszawa.pl/fgJds2U", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "minnessotaswordfishh.com", "category": "Network activity", "uuid": "59245867-c5fc-4f7a-a4dd-4edc950d210f", "timestamp": "1495554151", "to_ids": true, "value": "54.165.236.47", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "59245865-8a24-4a71-9a49-6bfa950d210f", "timestamp": "1495554149", "to_ids": true, "value": "minnessotaswordfishh.com", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "", "category": "Network activity", "uuid": "59245864-18d0-4bcb-866a-c153950d210f", "timestamp": "1495554148", "to_ids": true, "value": "http://minnessotaswordfishh.com/af/fgJds2U", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "5924585f-e5a0-4d78-b3d8-9198950d210f", "timestamp": "1495554143", "to_ids": true, "value": "http://khaosoklake.com/fgJds2U", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "59245860-f040-4963-8767-c154950d210f", "timestamp": "1495554144", "to_ids": true, "value": "khaosoklake.com", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "khaosoklake.com", "category": "Network activity", "uuid": "59245862-0ec0-44c0-bee5-69b6950d210f", "timestamp": "1495554146", "to_ids": true, "value": "77.104.168.120", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "5924585b-f78c-4383-905d-c150950d210f", "timestamp": "1495554139", "to_ids": true, "value": "fjjslyw.com", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "fjjslyw.com", "category": "Network activity", "uuid": "5924585d-56a8-45ea-9207-c152950d210f", "timestamp": "1495554141", "to_ids": true, "value": "192.169.81.126", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "dota2wiki.ir", "category": "Network activity", "uuid": "59245854-c880-48d8-a7bf-6a00950d210f", "timestamp": "1495554132", "to_ids": true, "value": "136.243.14.60", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "59245856-a60c-4840-9ab1-4a90950d210f", "timestamp": "1495554134", "to_ids": true, "value": "http://elateplaza.com/fgJds2U", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "59245857-8200-4219-80b8-3ddc950d210f", "timestamp": "1495554135", "to_ids": true, "value": "elateplaza.com", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "elateplaza.com", "category": "Network activity", "uuid": "59245858-b4f0-4b6e-91a9-c14e950d210f", "timestamp": "1495554136", "to_ids": true, "value": "94.23.97.226", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "59245859-e634-4c50-b89f-180d950d210f", "timestamp": "1495554137", "to_ids": true, "value": "http://fjjslyw.com/fgJds2U", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "59245853-7f40-4f2f-ade7-4466950d210f", "timestamp": "1495554131", "to_ids": true, "value": "dota2wiki.ir", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "", "category": "Network activity", "uuid": "59245852-3f8c-42bb-b2bc-c155950d210f", "timestamp": "1495554130", "to_ids": true, "value": "http://dota2wiki.ir/fgJds2U", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "abcenglishclub.com", "category": "Network activity", "uuid": "5924584c-07c4-4cc2-b97d-4697950d210f", "timestamp": "1495554124", "to_ids": true, "value": "100.42.56.20", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "5924584e-5c40-44ee-b672-3dd2950d210f", "timestamp": "1495554126", "to_ids": true, "value": "http://david-faber.de/fgJds2U", "disable_correlation": false, "object_relation": null, "type": "url"}, {"comment": "", "category": "Network activity", "uuid": "5924584f-2660-49b1-9ac2-6b79950d210f", "timestamp": "1495554127", "to_ids": true, "value": "david-faber.de", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "david-faber.de", "category": "Network activity", "uuid": "59245850-3258-431d-9335-c159950d210f", "timestamp": "1495554128", "to_ids": true, "value": "81.169.145.78", "disable_correlation": false, "object_relation": null, "type": "ip-dst"}, {"comment": "", "category": "Network activity", "uuid": "5924584a-3650-479b-bdbd-6bfa950d210f", "timestamp": "1495554122", "to_ids": true, "value": "abcenglishclub.com", "disable_correlation": false, "object_relation": null, "type": "hostname"}, {"comment": "", "category": "Artifacts dropped", "uuid": "59245847-c804-4809-9661-4aab950d210f", "timestamp": "1495554119", "to_ids": true, "value": "a538307d7bc458726a344523aa947010", "disable_correlation": false, "object_relation": null, "type": "md5"}, {"comment": "", "category": "Artifacts dropped", "uuid": "59245848-5a10-4a4c-acbc-9198950d210f", "timestamp": "1495554120", "to_ids": true, "value": "56185d85038547ec352a0f39396a37a7", "disable_correlation": false, "object_relation": null, "type": "md5"}, {"comment": "", "category": "Network activity", "uuid": "59245849-020c-4b91-bda5-69b6950d210f", "timestamp": "1495554121", "to_ids": true, "value": "http://abcenglishclub.com/fgJds2U", "disable_correlation": false, "object_relation": null, "type": "url"}], "extends_uuid": "", "published": false, "date": "2017-05-23", "Orgc": {"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f", "name": "CIRCL"}, "threat_level_id": "3", "uuid": "59245845-a0f8-4198-af28-3ddc950d210f"}}