adulau/misp-circl-feed
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Packages Wiki Activity Actions
misp-circl-feed/feeds/circl/misp/5566bfdf-e550-4b40-8178-4b27950d210b.json

440 lines
No EOL
13 KiB
JSON
Raw Blame History

{
"Event": {
"analysis": "2",
"date": "2015-05-26",
"extends_uuid": "",
"info": "OSINT The Teenage Mutant Malvertiser Network by FireEye",
"publish_timestamp": "1432803961",
"published": true,
"threat_level_id": "3",
"timestamp": "1432797888",
"uuid": "5566bfdf-e550-4b40-8178-4b27950d210b",
"Orgc": {
"name": "CthulhuSPRL.be",
"uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f"
},
"Tag": [
{
"colour": "#ffffff",
"local": false,
"name": "tlp:white",
"relationship_type": ""
},
{
"colour": "#004646",
"local": false,
"name": "type:OSINT",
"relationship_type": ""
}
],
"Attribute": [
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797261",
"to_ids": false,
"type": "link",
"uuid": "5566c04d-3124-4d4b-819f-4a45950d210b",
"value": "https://www.fireeye.com/blog/threat-research/2015/05/the_teenage_mutantm.html"
},
{
"category": "Network activity",
"comment": "Magnitude EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797704",
"to_ids": true,
"type": "hostname",
"uuid": "5566c0a7-dd74-4597-b7be-419f950d210b",
"value": "click2.systemaffiliate.com"
},
{
"category": "Network activity",
"comment": "Magnitude EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797704",
"to_ids": true,
"type": "hostname",
"uuid": "5566c0a8-e8d8-4860-b57f-4b9d950d210b",
"value": "click2.danarimedia.com"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797369",
"to_ids": true,
"type": "ip-dst",
"uuid": "5566c0b9-a64c-4104-9847-4b7a950d210b",
"value": "199.212.255.136"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797369",
"to_ids": true,
"type": "ip-dst",
"uuid": "5566c0b9-734c-4fec-a46f-4ce5950d210b",
"value": "199.212.255.137"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797369",
"to_ids": true,
"type": "ip-dst",
"uuid": "5566c0b9-4554-41f6-9770-4207950d210b",
"value": "199.212.255.138"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797369",
"to_ids": true,
"type": "ip-dst",
"uuid": "5566c0b9-f258-4884-bd55-4e09950d210b",
"value": "199.212.255.139"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797369",
"to_ids": true,
"type": "ip-dst",
"uuid": "5566c0b9-1ee0-49c1-9979-4aa6950d210b",
"value": "199.212.255.140"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797542",
"to_ids": true,
"type": "hostname",
"uuid": "5566c166-bde4-4238-b7b1-4260950d210b",
"value": "ads.fsrinc.biz"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797542",
"to_ids": true,
"type": "hostname",
"uuid": "5566c166-ab60-4619-ad6f-4401950d210b",
"value": "hit.buy-targeted-traffic.com"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797542",
"to_ids": true,
"type": "hostname",
"uuid": "5566c166-f4e8-41f4-aa9a-438a950d210b",
"value": "bbwlesbians.xblog.in"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797556",
"to_ids": true,
"type": "domain",
"uuid": "5566c174-1430-4be3-add2-4591950d210b",
"value": "find-everything.info"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797556",
"to_ids": true,
"type": "domain",
"uuid": "5566c174-65a8-4bfc-ac4d-4333950d210b",
"value": "litle-finder.me"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797556",
"to_ids": true,
"type": "domain",
"uuid": "5566c174-2a2c-4478-8be5-4641950d210b",
"value": "megafinder24.info"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797556",
"to_ids": true,
"type": "domain",
"uuid": "5566c174-f9ac-4f97-933e-4ff2950d210b",
"value": "searchl.org"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797557",
"to_ids": true,
"type": "domain",
"uuid": "5566c175-d0d8-49af-95ed-4ec2950d210b",
"value": "searchwebfind.org"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797557",
"to_ids": true,
"type": "domain",
"uuid": "5566c175-0530-4f35-a56e-44dc950d210b",
"value": "truesearchresults.com"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797557",
"to_ids": true,
"type": "domain",
"uuid": "5566c175-5548-4fa2-b93f-4ced950d210b",
"value": "webwebfind.com"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797557",
"to_ids": true,
"type": "domain",
"uuid": "5566c175-2298-4b74-a69c-4e6f950d210b",
"value": "news4news015.com"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797557",
"to_ids": true,
"type": "domain",
"uuid": "5566c175-2a30-4dc3-99e7-464a950d210b",
"value": "news4news14.com"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797557",
"to_ids": true,
"type": "domain",
"uuid": "5566c175-3cfc-417d-ab4d-40c5950d210b",
"value": "news4news15.com"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797557",
"to_ids": true,
"type": "domain",
"uuid": "5566c175-0ce4-421c-9038-4248950d210b",
"value": "news4news2014.com"
},
{
"category": "Network activity",
"comment": "Angler EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797557",
"to_ids": true,
"type": "domain",
"uuid": "5566c175-8a3c-4c1c-baf3-4dcc950d210b",
"value": "news4news2015.com"
},
{
"category": "Network activity",
"comment": "Magnitude EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797704",
"to_ids": true,
"type": "hostname",
"uuid": "5566c1f0-6ef0-4379-9e71-4568950d210b",
"value": "click.upperseeker.com"
},
{
"category": "Network activity",
"comment": "Magnitude EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797722",
"to_ids": true,
"type": "domain",
"uuid": "5566c21a-702c-4c8e-aea1-4cfd950d210b",
"value": "death-tostock.com"
},
{
"category": "Network activity",
"comment": "Magnitude EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797722",
"to_ids": true,
"type": "domain",
"uuid": "5566c21a-b228-4219-ab71-45f5950d210b",
"value": "ado-global.com"
},
{
"category": "Network activity",
"comment": "Magnitude EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797722",
"to_ids": true,
"type": "domain",
"uuid": "5566c21a-09dc-4bd5-83fc-46bf950d210b",
"value": "find-all.biz"
},
{
"category": "Network activity",
"comment": "Magnitude EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797722",
"to_ids": true,
"type": "domain",
"uuid": "5566c21a-ee84-4d24-ac54-4074950d210b",
"value": "global-search24.biz"
},
{
"category": "Network activity",
"comment": "Magnitude EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797722",
"to_ids": true,
"type": "domain",
"uuid": "5566c21a-a46c-455c-a2d9-4f3e950d210b",
"value": "integrosearch.com"
},
{
"category": "Network activity",
"comment": "Magnitude EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797722",
"to_ids": true,
"type": "domain",
"uuid": "5566c21a-fc54-4265-bb4f-4ceb950d210b",
"value": "millsearch.net"
},
{
"category": "Network activity",
"comment": "Magnitude EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797723",
"to_ids": true,
"type": "domain",
"uuid": "5566c21b-8820-4bac-8255-461e950d210b",
"value": "superior-movies.com"
},
{
"category": "Network activity",
"comment": "Rig & other EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797806",
"to_ids": true,
"type": "domain",
"uuid": "5566c26e-6070-44c9-b4b5-4ed0950d210b",
"value": "buyadvertsort.com"
},
{
"category": "Network activity",
"comment": "Rig & other EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797806",
"to_ids": true,
"type": "domain",
"uuid": "5566c26e-794c-4071-bae1-4e1b950d210b",
"value": "buyadvertview.com"
},
{
"category": "Network activity",
"comment": "Rig & other EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797806",
"to_ids": true,
"type": "domain",
"uuid": "5566c26e-8904-48e6-a191-441a950d210b",
"value": "buyadvlist.com"
},
{
"category": "Network activity",
"comment": "Rig & other EK",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797806",
"to_ids": true,
"type": "domain",
"uuid": "5566c26e-33c0-4e20-984c-489e950d210b",
"value": "dealsadvdeals.com"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797866",
"to_ids": true,
"type": "ip-dst",
"uuid": "5566c2aa-82ac-465c-99f3-4512950d210b",
"value": "199.212.255.0/24"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432797888",
"to_ids": false,
"type": "link",
"uuid": "5566c2c0-fb04-4d80-9f0a-4aec950d210b",
"value": "http://research.zscaler.com/2015/05/magnitude-exploit-kit-leading-to.html"
}
]
}
}
Reference in a new issue View git blame Copy permalink