308 lines
No EOL
8.9 KiB
JSON
308 lines
No EOL
8.9 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "2",
|
|
"date": "2018-05-24",
|
|
"extends_uuid": "",
|
|
"info": "Emotet - 5/17/2018",
|
|
"publish_timestamp": "1593434909",
|
|
"published": true,
|
|
"threat_level_id": "3",
|
|
"timestamp": "1631045306",
|
|
"uuid": "5b06a89d-64d4-4643-a41e-c25d0acd0835",
|
|
"Orgc": {
|
|
"name": "Synovus Financial",
|
|
"uuid": "5a68c02d-959c-4c8a-a571-0dcac0a8060a"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": false,
|
|
"name": "tlp:white",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#0088cc",
|
|
"local": false,
|
|
"name": "misp-galaxy:tool=\"Emotet\"",
|
|
"relationship_type": ""
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1535036009",
|
|
"to_ids": false,
|
|
"type": "url",
|
|
"uuid": "a3ee94ef-45dd-4021-9849-6e184f711f65",
|
|
"value": "https://protonmail.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163055",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "51cd1cd4-d58a-4286-b82f-c3d13dbabd18",
|
|
"value": "http://die-tauchbar.de/0sqozcr7t/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163061",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "6a6cf69a-cb94-4830-ac00-cb11c14eb9ae",
|
|
"value": "http://angelabphotography.com/odTXjg2LUj/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163068",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "eda81c14-c468-47d2-8c39-f13a128cf56e",
|
|
"value": "http://davehale.co.uk/PEi9fva6/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163074",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "f742f7a5-2694-4792-b32e-467b9470cb10",
|
|
"value": "https://computerspendehamburg.de/AZ0d3f2/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163080",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "997ce30f-b837-4c81-8a33-df3a07f618b5",
|
|
"value": "http://cedric-2000.de/2ZKr9GWOTYfA/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163086",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "b6167eec-15a9-454a-93ee-727eca6ce939",
|
|
"value": "http://amicidisantorfeto.com/xqib2HviBaMVX/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163092",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "d7cde6b5-84e6-42b1-9cf3-e90bf9872808",
|
|
"value": "http://jackhonky.com/jHCmUpcpWY/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163098",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "8a0152ea-c5bf-4ee5-ad92-8a9bc0458a88",
|
|
"value": "http://lewistonsports.com/Tc9KflZQff/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163104",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "04c0f1b6-e6ce-468c-b9db-bc6b3ed95d00",
|
|
"value": "http://brownaudio.com/HIKvfaK4i00N/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163110",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "1ff3037b-72d9-4b2f-91b8-41d293f97c9a",
|
|
"value": "http://iceraven.com/wiqK7wrood/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163116",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "b508a0b5-4343-4c8d-b19b-4c602e571aae",
|
|
"value": "http://eliaswessel.com/xwlNVbDXquiHb/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163122",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "c421a999-6f8d-4c1e-9f52-9eaacab64705",
|
|
"value": "http://eiskugel.org/0x62gdvG/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163128",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "6a8909b9-4fb4-4cc4-b7ef-77db1c439db0",
|
|
"value": "http://fam-koenig.de/WI08F7EB5xfSb/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163134",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "cabab3f8-7af3-4deb-a43f-56dab6fbdd7d",
|
|
"value": "http://bernardesdias.com.br/Tp3pGZcNeFgf/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163140",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "966d319d-fa42-4402-af74-ef24b772cff4",
|
|
"value": "http://prokeyboardist.com/0qLVjK7JgMX/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163147",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "83acd0a0-d86f-42ca-9783-3a94da9623b4",
|
|
"value": "http://jorgensenco.dk/DY4MWPI/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163153",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "b89709fc-08e8-498e-8eec-9476f5aedd05",
|
|
"value": "http://fischereiverein-dotternhausen.de/o6q0hhj9s/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163159",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "c9b49e56-1c70-41d0-a4d8-68096d77578b",
|
|
"value": "http://imagemarketingwest.com/Rv72B/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163165",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "dc4a577f-bab7-47a4-bbdc-dd3a4198ec61",
|
|
"value": "https://jaseminedenise.com/ycxPnqQ/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163171",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "fb4fada3-d010-4cd6-b0cf-fd0057611274",
|
|
"value": "http://leavemeinstitches.com/ZLYU/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163177",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "0889008a-886f-44f4-bac8-ac03a687ab50",
|
|
"value": "http://jsaphotoarts.com/0s4G/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163184",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "7a60ebc3-2d5e-4648-8336-30f08eac9963",
|
|
"value": "http://downinthecountry.com/pW3xNW/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163326",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "a5ea34a5-bd49-4127-bd0c-ffab558aaa61",
|
|
"value": "81.21.67.85"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1527163329",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "91eb3247-baee-4c7f-8972-c6ef46f68efc",
|
|
"value": "37.120.170.231"
|
|
}
|
|
]
|
|
}
|
|
} |