1255 lines
No EOL
39 KiB
JSON
1255 lines
No EOL
39 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "2",
|
|
"date": "2016-07-11",
|
|
"extends_uuid": "",
|
|
"info": "What's in a server name (on APT28/Sofacy) by ThreatConnect",
|
|
"publish_timestamp": "1498162392",
|
|
"published": true,
|
|
"threat_level_id": "2",
|
|
"timestamp": "1498162327",
|
|
"uuid": "578399b0-5b4c-4ddd-b1ad-4a2d950d210f",
|
|
"Orgc": {
|
|
"name": "CthulhuSPRL.be",
|
|
"uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": false,
|
|
"name": "OSINT",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#f1ee1d",
|
|
"local": false,
|
|
"name": "Threat:Sofacy/APT28",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": false,
|
|
"name": "tlp:white",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#12e000",
|
|
"local": false,
|
|
"name": "misp-galaxy:threat-actor=\"Sofacy\"",
|
|
"relationship_type": ""
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242375",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "578399c7-83f4-44a6-a800-aeca950d210f",
|
|
"value": "misdepatrment.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242624",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839ac0-9fbc-4f20-82c5-8b14950d210f",
|
|
"value": "militaryobserver.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242624",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839ac0-e15c-49fa-97f0-8b14950d210f",
|
|
"value": "sysprofsvc.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242625",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839ac1-319c-43c7-9b3c-8b14950d210f",
|
|
"value": "winsyscheck.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242625",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57839ac1-36f0-4d31-b72b-8b14950d210f",
|
|
"value": "69.90.132.194"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242626",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839ac2-0194-4f9f-ba67-8b14950d210f",
|
|
"value": "euronews24.info"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242626",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839ac2-d554-43fe-98d8-8b14950d210f",
|
|
"value": "naoasch.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242626",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57839ac2-b5dc-43ec-a7f6-8b14950d210f",
|
|
"value": "2045efb4da99b3af154814888be43390"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242966",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c16-876c-403b-b4d5-aec9950d210f",
|
|
"value": "adobeflashdownload.de"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242967",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c17-33d0-45d9-8405-aec9950d210f",
|
|
"value": "adobeflashplayer.me"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242967",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c17-34b0-43dc-8dc2-aec9950d210f",
|
|
"value": "adobeupdater.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242968",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c18-b078-4fce-8baf-aec9950d210f",
|
|
"value": "adobeupdatetechnology.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242969",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c19-90d8-422b-a076-aec9950d210f",
|
|
"value": "adoble.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242970",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c1a-7c40-4b49-af38-aec9950d210f",
|
|
"value": "pdf-online-viewer.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242971",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c1b-cb68-402a-90c3-aec9950d210f",
|
|
"value": "akamaitechnologysupport.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242972",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c1c-988c-4a9e-8555-aec9950d210f",
|
|
"value": "akamaitechupdate.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242972",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c1d-bf20-4866-a7f1-aec9950d210f",
|
|
"value": "helper-akamai.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242973",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c1d-8dec-46de-9486-aec9950d210f",
|
|
"value": "cdncloudflare.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242974",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c1e-b0b8-4ddb-8046-aec9950d210f",
|
|
"value": "cloudfiare.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242975",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c1f-a6ec-4ac8-b577-aec9950d210f",
|
|
"value": "egypressoffice.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242976",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c20-8bb8-4db2-8055-aec9950d210f",
|
|
"value": "access-google.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242977",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c21-eb58-404d-b1fc-aec9950d210f",
|
|
"value": "cdn-google.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242978",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c22-4a3c-43af-9f7c-aec9950d210f",
|
|
"value": "marshmallow-google.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242979",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c23-fee4-49a3-a594-aec9950d210f",
|
|
"value": "terms-google.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242980",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c24-a648-4da5-88ee-aec9950d210f",
|
|
"value": "honeyvvell.co"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242981",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c25-ac48-4180-b00a-aec9950d210f",
|
|
"value": "thehufflngtonpost.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242982",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c26-5f30-4868-9eb5-aec9950d210f",
|
|
"value": "intelintelligence.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242983",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c27-7aac-48f4-99cb-aec9950d210f",
|
|
"value": "intelsupportcenter.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242984",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c28-9430-40a6-914f-aec9950d210f",
|
|
"value": "intelsupportcenter.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242985",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c29-21d8-400b-8fba-aec9950d210f",
|
|
"value": "micoft.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242985",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c29-1f9c-4dc3-9414-aec9950d210f",
|
|
"value": "microsoft-updates.me"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242987",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c2b-e758-48a6-872e-aec9950d210f",
|
|
"value": "ms-drivadptrwin.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242987",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c2b-d3c4-4052-a3d0-aec9950d210f",
|
|
"value": "ms-sus6.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242988",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c2c-2d14-4b93-b4b7-aec9950d210f",
|
|
"value": "ms-updates.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242989",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c2d-c658-4d32-8a8b-aec9950d210f",
|
|
"value": "securesystemwin.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242990",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c2e-bb44-4f3f-a4a9-aec9950d210f",
|
|
"value": "win-wnigarden.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242991",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c2f-1784-47a7-b994-aec9950d210f",
|
|
"value": "wincodec.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242991",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c2f-84c0-4737-a4f0-aec9950d210f",
|
|
"value": "windowsnewupdated.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242993",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c31-b0dc-44ea-93cc-aec9950d210f",
|
|
"value": "winninggroup-sg.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242994",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c32-0abc-4ada-8ef4-aec9950d210f",
|
|
"value": "wm-z.biz"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242995",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c33-93f4-44e5-9527-aec9950d210f",
|
|
"value": "wmepadtech.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242996",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c34-9ce8-49d6-a2fa-aec9950d210f",
|
|
"value": "nato-org.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242997",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c35-8b84-416a-b6be-aec9950d210f",
|
|
"value": "natoadviser.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242998",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c36-bba8-4ee4-91b1-aec9950d210f",
|
|
"value": "sec-verified.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468242999",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c37-11b4-43b0-8645-aec9950d210f",
|
|
"value": "theguardiannews.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243000",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c38-af4c-4294-a191-aec9950d210f",
|
|
"value": "theguardianpress.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243694",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c39-bec8-43af-bac0-aec9950d210f",
|
|
"value": "services-gov.co.uk"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243002",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c3a-2030-4043-be56-aec9950d210f",
|
|
"value": "goaarmy.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243003",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c3b-1df8-4dc5-92db-aec9950d210f",
|
|
"value": "govsh.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243004",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839c3c-ce18-430e-b868-aec9950d210f",
|
|
"value": "wsjworld.com"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243158",
|
|
"to_ids": false,
|
|
"type": "link",
|
|
"uuid": "57839cd6-2fe8-4f04-9c8a-b186950d210f",
|
|
"value": "https://threatconnect.com/whats-in-a-name-server/"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243683",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee3-a364-4550-9604-8b14950d210f",
|
|
"value": "j.wang@uymail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243684",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee4-63c8-43ae-9db9-8b14950d210f",
|
|
"value": "play@xtcmail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243684",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee4-ab40-4f1d-a5c1-8b14950d210f",
|
|
"value": "vrickson@mail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243685",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee5-5e1c-41ca-9b2e-8b14950d210f",
|
|
"value": "best.cameron@mail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243685",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee5-a9e8-412c-9512-8b14950d210f",
|
|
"value": "surleoborden@gmail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243685",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee5-2d88-4d92-ac16-8b14950d210f",
|
|
"value": "weronika76@hotmail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243686",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee6-b114-4db1-84d4-8b14950d210f",
|
|
"value": "josiekilbyav@aol.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243686",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee6-c990-41fc-ae50-8b14950d210f",
|
|
"value": "bergers3008@usa.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243687",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee7-e438-4a35-984f-8b14950d210f",
|
|
"value": "guiromolly@mail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243687",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee7-0ea4-43b9-a65f-8b14950d210f",
|
|
"value": "loots@tuta.io"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243687",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee7-c6c0-441a-b1e3-8b14950d210f",
|
|
"value": "mia.konzet99@ok.de"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243688",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee8-0278-4fee-81da-8b14950d210f",
|
|
"value": "dana.raphaela@chewiemail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243688",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee8-8c08-4f0a-ab3e-8b14950d210f",
|
|
"value": "abuse@opticaljungle.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243689",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee9-f7e8-42c8-9184-8b14950d210f",
|
|
"value": "issacgolden@hmamail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243689",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ee9-4ad4-43a2-a76a-8b14950d210f",
|
|
"value": "gregorio.oconnor@hmamail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243690",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eea-e328-4f77-a090-8b14950d210f",
|
|
"value": "artur.klimenkov@gmail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243690",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eea-1834-4eb4-9a8a-8b14950d210f",
|
|
"value": "pinfiangtw@gmail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243691",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eeb-99d4-4918-be6e-8b14950d210f",
|
|
"value": "mattew.barnes@aol.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243691",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eeb-340c-4003-8a48-8b14950d210f",
|
|
"value": "petkrist@myself.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243692",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eec-bb24-40c3-ace6-8b14950d210f",
|
|
"value": "fisterboks@email.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243692",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eec-08c4-453f-91ca-8b14950d210f",
|
|
"value": "syst.soul@mail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243693",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eed-bf74-4b73-9f07-8b14950d210f",
|
|
"value": "m8r-abrn11@mailinator.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243693",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eed-4bc0-4e40-826b-8b14950d210f",
|
|
"value": "mr.michoverton@mail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243694",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eee-2480-4137-9e07-8b14950d210f",
|
|
"value": "ken.tanaka@mail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243694",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eee-426c-4f54-89bd-8b14950d210f",
|
|
"value": "sandra.rafaela@chewiemail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243695",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eef-0c64-4cfd-881d-8b14950d210f",
|
|
"value": "bkopfer7101@mail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243695",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eef-e768-4bd2-8722-8b14950d210f",
|
|
"value": "elfreda.pollie@chewiemail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243695",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eef-e688-44c2-8ce6-8b14950d210f",
|
|
"value": "ruzeedomeon@gmail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243695",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eef-28ac-4259-804f-8b14950d210f",
|
|
"value": "agnasirahmedd@gmail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243695",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839eef-0ec4-4728-b446-8b14950d210f",
|
|
"value": "s.penn.254@gmail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243696",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ef0-e4f0-46e0-94d9-8b14950d210f",
|
|
"value": "j.holmberg@dr.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243696",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ef0-c0e0-4c95-afee-8b14950d210f",
|
|
"value": "shawanda.kirlin37@mail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243696",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ef0-7c88-4c81-b84f-8b14950d210f",
|
|
"value": "barry.smith2004@yandex.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243696",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ef0-58bc-424c-abca-8b14950d210f",
|
|
"value": "leo.link@email.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243696",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ef0-6b18-4afe-a302-8b14950d210f",
|
|
"value": "cjgr8hm@gmail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243697",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ef1-bf14-4468-ab8c-8b14950d210f",
|
|
"value": "idolbreaker@mail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243697",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ef1-4e14-46ac-931f-8b14950d210f",
|
|
"value": "paulbecker@cock.li"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243697",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ef1-4bbc-46f8-a200-8b14950d210f",
|
|
"value": "saira.samosa@gmail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243697",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ef1-07dc-4c81-b1f2-8b14950d210f",
|
|
"value": "owen@kehoe.org"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243697",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ef1-cce0-46e8-9a8b-8b14950d210f",
|
|
"value": "noshare1024@gmail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "SOA email",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243698",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839ef2-b0cc-49f5-bf83-8b14950d210f",
|
|
"value": "mishel_corp@mail.com"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243739",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839f1b-a1d8-41fb-a191-421d950d210f",
|
|
"value": "8yhi4xqycpzm@mail.ru"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243739",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839f1b-63fc-4c5b-ad71-4436950d210f",
|
|
"value": "v9sa2cml@instancemail.net"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243740",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839f1c-031c-4582-aa4c-4009950d210f",
|
|
"value": "contacts@up57893.in"
|
|
},
|
|
{
|
|
"category": "Attribution",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243740",
|
|
"to_ids": false,
|
|
"type": "whois-registrant-email",
|
|
"uuid": "57839f1c-342c-436b-be17-42b2950d210f",
|
|
"value": "admin@wm-z.biz"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243856",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57839f90-f914-4427-9b0b-c1f5950d210f",
|
|
"value": "5.135.183.154"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243856",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57839f90-7ad0-4667-99fc-c1f5950d210f",
|
|
"value": "45.32.129.185"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243917",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839fcd-55c4-4920-9a6a-c1f3950d210f",
|
|
"value": "vice-news.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Nameserver",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243917",
|
|
"to_ids": false,
|
|
"type": "domain",
|
|
"uuid": "57839fcd-083c-4bc9-85a2-c1f3950d210f",
|
|
"value": "xtraorbit.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Nameserver",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243918",
|
|
"to_ids": false,
|
|
"type": "hostname",
|
|
"uuid": "57839fce-c338-440f-9ec6-c1f3950d210f",
|
|
"value": "xo.earth.orderbox-dns.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243918",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839fce-4568-4c45-a556-c1f3950d210f",
|
|
"value": "eurosatory2014.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243919",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839fcf-e7d8-4f36-934a-c1f3950d210f",
|
|
"value": "webmail-saic.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243919",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839fcf-8704-44a1-8383-c1f3950d210f",
|
|
"value": "natoexhibitionff14.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243920",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839fd0-9d34-4d45-8d3b-c1f3950d210f",
|
|
"value": "tolonevvs.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Nameserver",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243920",
|
|
"to_ids": false,
|
|
"type": "domain",
|
|
"uuid": "57839fd0-65c8-4304-a029-c1f3950d210f",
|
|
"value": "carbon2u.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243920",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "57839fd0-85ec-4a92-8c4b-c1f3950d210f",
|
|
"value": "mail.hm.qov.hu"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243921",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839fd1-988c-42c1-9a57-c1f3950d210f",
|
|
"value": "log-in-osce.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243921",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57839fd1-f574-43ee-947a-c1f3950d210f",
|
|
"value": "academl.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Nameserver",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1468243922",
|
|
"to_ids": false,
|
|
"type": "domain",
|
|
"uuid": "57839fd2-3ad0-4b53-aa5d-c1f3950d210f",
|
|
"value": "trademarkarea.com"
|
|
}
|
|
]
|
|
}
|
|
} |