253 lines
No EOL
7.5 KiB
JSON
253 lines
No EOL
7.5 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "0",
|
|
"date": "2016-09-16",
|
|
"extends_uuid": "",
|
|
"info": "Malspam 2016-09-15 (.js in .zip) - campagin: \"Booking confirmation\"",
|
|
"publish_timestamp": "1474010796",
|
|
"published": true,
|
|
"threat_level_id": "3",
|
|
"timestamp": "1474010755",
|
|
"uuid": "57db9e5a-8178-469b-8e29-4e5d950d210f",
|
|
"Orgc": {
|
|
"name": "CIRCL",
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": false,
|
|
"name": "tlp:white",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#3a7300",
|
|
"local": false,
|
|
"name": "circl:incident-classification=\"malware\"",
|
|
"relationship_type": ""
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010749",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57db9e7d-bde4-4e26-a67e-4899950d210f",
|
|
"value": "178.212.131.10"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010750",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57db9e7e-4a10-4033-aa6a-4600950d210f",
|
|
"value": "37.200.70.6"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010750",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57db9e7e-f814-4f8c-83cd-465e950d210f",
|
|
"value": "gobantakao.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010751",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e7f-db94-4ca5-afee-495d950d210f",
|
|
"value": "http://gobantakao.com/0a64s"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010751",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e7f-d804-4e83-951c-43e2950d210f",
|
|
"value": "http://gobantakao.com/3qm01xeb"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010752",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e80-c054-419f-ae8e-4edc950d210f",
|
|
"value": "http://gobantakao.com/8vdtrq"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010752",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e80-d9a4-4959-a2f4-44e4950d210f",
|
|
"value": "http://gobantakao.com/m15l0gez"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010752",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e80-4e38-4d28-be3d-46c9950d210f",
|
|
"value": "http://gobantakao.com/q6csqde"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010753",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e81-347c-4c0f-840e-4dc6950d210f",
|
|
"value": "http://ponggirr.net/3k3wyjp"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010753",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e81-b338-4ab6-93a1-49d6950d210f",
|
|
"value": "http://ponggirr.net/ccbbcu"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010753",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e81-86dc-42ea-9bfa-4861950d210f",
|
|
"value": "http://ponggirr.net/erowakv"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010754",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e82-42e0-4806-96dd-4b43950d210f",
|
|
"value": "http://ponggirr.net/hbx7xs4f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010754",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e82-dd50-4663-94d4-452f950d210f",
|
|
"value": "http://ponggirr.net/qs060j5"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010754",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e82-2730-4d3d-80de-441d950d210f",
|
|
"value": "http://satyrwelf.net/0ygdf9nf"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010754",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e82-78a0-4290-9c61-4a11950d210f",
|
|
"value": "http://satyrwelf.net/27d4l09"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010754",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e82-dbd8-4b59-a9d5-4ae4950d210f",
|
|
"value": "http://satyrwelf.net/96cbdy"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010755",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e83-6bb8-400d-9e66-47eb950d210f",
|
|
"value": "http://satyrwelf.net/igle880a"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010755",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57db9e83-92f0-42ff-9ebf-450c950d210f",
|
|
"value": "http://satyrwelf.net/k9nz8"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010755",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57db9e83-f6b0-4da7-b4b3-4879950d210f",
|
|
"value": "ponggirr.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474010755",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57db9e83-ba08-4010-aae8-4f48950d210f",
|
|
"value": "satyrwelf.net"
|
|
}
|
|
]
|
|
}
|
|
} |