231 lines
No EOL
6.8 KiB
JSON
231 lines
No EOL
6.8 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "0",
|
|
"date": "2016-09-16",
|
|
"extends_uuid": "",
|
|
"info": "Malspam 2016-09-16 (.js in .zip) - campaign: \"Re: request\"",
|
|
"publish_timestamp": "1474011313",
|
|
"published": true,
|
|
"threat_level_id": "3",
|
|
"timestamp": "1474011291",
|
|
"uuid": "57dba07b-c36c-4d98-88ac-450e950d210f",
|
|
"Orgc": {
|
|
"name": "CIRCL",
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": false,
|
|
"name": "tlp:white",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#3a7300",
|
|
"local": false,
|
|
"name": "circl:incident-classification=\"malware\"",
|
|
"relationship_type": ""
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011281",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57dba091-14ac-4e2d-88e1-4874950d210f",
|
|
"value": "178.212.131.10"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011282",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57dba092-a058-49d4-892c-4edb950d210f",
|
|
"value": "37.200.70.6"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011282",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57dba092-27e0-4eec-8252-4948950d210f",
|
|
"value": "bulkreasy.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011283",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dba093-982c-4756-95a0-4e8b950d210f",
|
|
"value": "http://bulkreasy.com/8tl3rmh"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011283",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dba093-3248-4dc1-bc24-4219950d210f",
|
|
"value": "http://bulkreasy.com/905jscb"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011284",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dba094-a7f4-454a-8c84-4cd4950d210f",
|
|
"value": "http://bulkreasy.com/c3vaho"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011284",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dba094-a6e4-43e0-9892-4b95950d210f",
|
|
"value": "http://bulkreasy.com/oqn8p"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011285",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dba095-9a50-4fac-a18b-4429950d210f",
|
|
"value": "http://maggycocoa.net/8i00a"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011285",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dba095-46f8-4b96-80f1-4eff950d210f",
|
|
"value": "http://maggycocoa.net/i9uje"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011286",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dba096-f244-4723-a56f-4564950d210f",
|
|
"value": "http://maggycocoa.net/uml71ij"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011287",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dba097-8a4c-4210-a49e-4857950d210f",
|
|
"value": "http://maggycocoa.net/z8xl3w7q"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011287",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dba097-0030-4e3a-8c83-4479950d210f",
|
|
"value": "http://maggycocoa.net/zi6mrx"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011288",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dba098-48b4-41e5-807b-4b24950d210f",
|
|
"value": "http://yerndrunk.net/ez5jqc0n"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011288",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dba098-6f38-486d-983b-430a950d210f",
|
|
"value": "http://yerndrunk.net/nhddf4gt"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011289",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dba099-b6b4-44f0-b16a-41fd950d210f",
|
|
"value": "http://yerndrunk.net/t43anq3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011289",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dba099-97f8-418f-bc06-48fa950d210f",
|
|
"value": "http://yerndrunk.net/yk5vx6i"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011290",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57dba09a-deac-4736-9f9d-4d76950d210f",
|
|
"value": "maggycocoa.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474011290",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57dba09a-73bc-4ed4-91e8-4e3e950d210f",
|
|
"value": "yerndrunk.net"
|
|
}
|
|
]
|
|
}
|
|
} |