misp-circl-feed/feeds/circl/misp/5773639a-f104-49a0-b26c-4228950d210f.json

726 lines
No EOL
22 KiB
JSON

{
"Event": {
"analysis": "0",
"date": "2016-06-29",
"extends_uuid": "",
"info": "Malspam 2016-06-29 (campaign subject: 'new invoice')",
"publish_timestamp": "1467186064",
"published": true,
"threat_level_id": "3",
"timestamp": "1467180129",
"uuid": "5773639a-f104-49a0-b26c-4228950d210f",
"Orgc": {
"name": "CIRCL",
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
},
"Tag": [
{
"colour": "#ffffff",
"local": false,
"name": "tlp:white",
"relationship_type": ""
},
{
"colour": "#3a7300",
"local": false,
"name": "circl:incident-classification=\"malware\"",
"relationship_type": ""
}
],
"Attribute": [
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180075",
"to_ids": true,
"type": "ip-dst",
"uuid": "5773642b-68b8-4e24-9fe1-4a57950d210f",
"value": "107.180.25.1"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180076",
"to_ids": true,
"type": "ip-dst",
"uuid": "5773642c-e87c-49cb-8498-465f950d210f",
"value": "109.234.160.30"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180076",
"to_ids": true,
"type": "ip-dst",
"uuid": "5773642c-36a8-431e-abdc-40b7950d210f",
"value": "112.140.42.29"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180077",
"to_ids": true,
"type": "ip-dst",
"uuid": "5773642d-8538-49b3-a605-4bf5950d210f",
"value": "160.153.73.196"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180077",
"to_ids": true,
"type": "ip-dst",
"uuid": "5773642d-c344-46b8-aa85-45b5950d210f",
"value": "166.63.125.135"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180077",
"to_ids": true,
"type": "ip-dst",
"uuid": "5773642d-c854-421c-8575-453a950d210f",
"value": "178.254.62.52"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180078",
"to_ids": true,
"type": "ip-dst",
"uuid": "5773642e-c2a8-426f-9f81-4926950d210f",
"value": "188.165.49.173"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180078",
"to_ids": true,
"type": "ip-dst",
"uuid": "5773642e-9e20-43be-95df-4c08950d210f",
"value": "188.40.77.144"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180079",
"to_ids": true,
"type": "ip-dst",
"uuid": "5773642f-35b0-4fa4-b2fc-407d950d210f",
"value": "192.185.225.43"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180079",
"to_ids": true,
"type": "ip-dst",
"uuid": "5773642f-d344-486d-958d-49cf950d210f",
"value": "192.185.36.128"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180079",
"to_ids": true,
"type": "ip-dst",
"uuid": "5773642f-4f54-41d8-b6b3-4267950d210f",
"value": "192.186.251.225"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180080",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736430-88a4-4262-b58a-429f950d210f",
"value": "193.203.99.113"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180080",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736430-a4e8-4708-81ce-4834950d210f",
"value": "195.3.96.72"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180081",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736431-cb90-4541-b40b-4b88950d210f",
"value": "198.1.71.135"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180081",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736431-05bc-4219-9c94-42ee950d210f",
"value": "199.204.248.105"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180081",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736431-6afc-4abe-af1c-4d94950d210f",
"value": "208.71.106.219"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180082",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736432-c310-4af6-a258-4ef7950d210f",
"value": "208.71.106.49"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180082",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736432-eb40-4dc2-8cf6-48d3950d210f",
"value": "213.205.40.169"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180083",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736433-a13c-4101-bcf2-4110950d210f",
"value": "217.76.156.98"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180083",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736433-0308-4a7a-89c7-4109950d210f",
"value": "223.130.27.201"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180084",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736434-ce98-48a7-9b3b-4104950d210f",
"value": "23.229.131.128"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180084",
"to_ids": true,
"type": "hostname",
"uuid": "57736434-e3e0-448d-a690-44c9950d210f",
"value": "51939812.de.strato-hosting.eu"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180084",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736434-3928-4960-850f-4dd4950d210f",
"value": "62.14.3.195"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180085",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736435-e300-4e61-90a9-4fc0950d210f",
"value": "62.37.237.59"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180085",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736435-8470-423d-821a-49f6950d210f",
"value": "64.50.161.218"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180086",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736436-63b4-4393-8b74-4ecb950d210f",
"value": "66.147.244.210"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180086",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736436-2d3c-4d80-b49b-4663950d210f",
"value": "69.27.174.10"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180086",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736436-7664-48c1-b0f8-4fe8950d210f",
"value": "78.24.186.235"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180087",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736437-f524-4c45-b820-45bd950d210f",
"value": "79.174.64.15"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180087",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736437-6ee0-4977-a319-422a950d210f",
"value": "79.174.64.211"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180088",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736438-a7f4-444a-a24e-47c4950d210f",
"value": "80.150.6.143"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180088",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736438-be48-463a-8d23-4924950d210f",
"value": "80.74.144.35"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180088",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736438-aee0-42bb-9c94-4444950d210f",
"value": "81.169.145.153"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180088",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736438-2a3c-4fcc-adf9-4fc2950d210f",
"value": "81.169.145.77"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180089",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736439-6cf0-418c-b739-4405950d210f",
"value": "81.196.20.133"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180089",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736439-5ab8-4a94-be8b-4dfd950d210f",
"value": "81.24.1.16"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180089",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736439-3fe8-432c-88e3-4b6c950d210f",
"value": "83.235.64.44"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180089",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736439-e100-4906-a870-4ca3950d210f",
"value": "85.17.4.180"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180089",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736439-87c0-42ba-81ae-4223950d210f",
"value": "85.193.69.29"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180089",
"to_ids": true,
"type": "ip-dst",
"uuid": "57736439-3370-42e1-a628-44a6950d210f",
"value": "89.42.39.160"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180090",
"to_ids": true,
"type": "ip-dst",
"uuid": "5773643a-1ed8-4b9d-a223-477f950d210f",
"value": "91.223.216.66"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180090",
"to_ids": true,
"type": "ip-dst",
"uuid": "5773643a-7118-45d0-ade9-4fa8950d210f",
"value": "97.79.237.82"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180090",
"to_ids": true,
"type": "domain",
"uuid": "5773643a-34c4-4ec3-8f48-4b8f950d210f",
"value": "restteamusa.com"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180090",
"to_ids": true,
"type": "domain",
"uuid": "5773643a-84d0-4ac0-8b8a-41cc950d210f",
"value": "verifythevote.com"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180090",
"to_ids": true,
"type": "domain",
"uuid": "5773643a-3304-4b55-a11e-4fdb950d210f",
"value": "abligl.com"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180090",
"to_ids": true,
"type": "hostname",
"uuid": "5773643a-c40c-47af-a0fd-406e950d210f",
"value": "alaptare.home.ro"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180091",
"to_ids": true,
"type": "domain",
"uuid": "5773643b-e75c-4af5-8096-4733950d210f",
"value": "bolloevcenter.ru"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180091",
"to_ids": true,
"type": "domain",
"uuid": "5773643b-c108-4857-85f3-451b950d210f",
"value": "btc4kids.ru"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180091",
"to_ids": true,
"type": "hostname",
"uuid": "5773643b-5d44-4c46-ab30-4df8950d210f",
"value": "btcgroup.lgg.ru"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180091",
"to_ids": true,
"type": "hostname",
"uuid": "5773643b-6e00-46d9-a71e-4998950d210f",
"value": "btkdev.lgg.ru"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180091",
"to_ids": true,
"type": "domain",
"uuid": "5773643b-0bc0-4aba-8bbf-44a0950d210f",
"value": "century21keim.com"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180091",
"to_ids": true,
"type": "domain",
"uuid": "5773643b-f0e0-4d40-930a-4488950d210f",
"value": "certifiedbanker.org"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180092",
"to_ids": true,
"type": "hostname",
"uuid": "5773643c-d954-4702-be64-42b9950d210f",
"value": "clients.seospell.co.in"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180092",
"to_ids": true,
"type": "hostname",
"uuid": "5773643c-14e4-4878-9ec3-4afe950d210f",
"value": "denzil.com.au"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180092",
"to_ids": true,
"type": "domain",
"uuid": "5773643c-2e08-4e53-ad30-41fa950d210f",
"value": "empiredeckandfence.com"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180092",
"to_ids": true,
"type": "hostname",
"uuid": "5773643c-3dbc-4a43-9774-4cc5950d210f",
"value": "giftskeys.ts9.ru"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180092",
"to_ids": true,
"type": "hostname",
"uuid": "5773643c-6724-4096-ac0d-4541950d210f",
"value": "girlsfashion.home.ro"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180093",
"to_ids": true,
"type": "domain",
"uuid": "5773643d-ecac-401a-a3c5-455f950d210f",
"value": "grantica.ru"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180093",
"to_ids": true,
"type": "url",
"uuid": "5773643d-2804-4fee-b739-4095950d210f",
"value": "http://188.165.49.173/~user/300lqhp"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180093",
"to_ids": true,
"type": "url",
"uuid": "5773643d-a614-43b0-a6be-44bb950d210f",
"value": "http://51939812.de.strato-hosting.eu/ww0pj"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180093",
"to_ids": true,
"type": "url",
"uuid": "5773643d-5840-4024-bbcc-45de950d210f",
"value": "http://66.147.244.210/~rainbilc/51at7"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180093",
"to_ids": true,
"type": "url",
"uuid": "5773643d-dec4-42e8-9b12-45e9950d210f",
"value": "http://83.235.64.44/~typecent/jp0crlu"
},
{
"category": "Network activity",
"comment": "download location",
"deleted": false,
"disable_correlation": false,
"timestamp": "1467180093",
"to_ids": true,
"type": "url",
"uuid": "5773643d-03fc-44c5-a13c-4168950d210f",
"value": "http://RESTTEAMUSA.COM/db8m9d"
}
]
}
}