1 line
No EOL
11 KiB
JSON
1 line
No EOL
11 KiB
JSON
{"Event": {"info": "M2M - test", "publish_timestamp": "0", "timestamp": "1496043593", "analysis": "1", "Attribute": [{"category": "Artifacts dropped", "comment": "", "uuid": "592bd022-6ff0-4183-9fc9-7e4b950d210f", "timestamp": "1496043554", "to_ids": true, "value": "f79fbe26abff1e3a2b3f3a21480196afc09d13b1", "type": "sha1"}, {"category": "Artifacts dropped", "comment": "", "uuid": "592bd023-4e8c-4554-b9d8-9168950d210f", "timestamp": "1496043555", "to_ids": true, "value": "39f5fb49ec3c0e011a5c6ad4b7ac60bcf49af05a", "type": "sha1"}, {"category": "Artifacts dropped", "comment": "", "uuid": "592bd023-b790-435e-a8d4-7e48950d210f", "timestamp": "1496043555", "to_ids": true, "value": "02a76d86db0cbe79fcaf1a500630e24d961fa149", "type": "sha1"}, {"category": "Artifacts dropped", "comment": "", "uuid": "592bd024-a310-412f-a544-9166950d210f", "timestamp": "1496043556", "to_ids": true, "value": "82bb44dd3b7f42b90494294b32f8413a39cb2030", "type": "sha1"}, {"category": "Network activity", "comment": "", "uuid": "592bd025-8414-4c0c-b00b-9152950d210f", "timestamp": "1496043557", "to_ids": true, "value": "http://download.asustor.com/download/docs/releasenotes/RN_ADM_2.7.3.RHQ3.pdf", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd026-4718-4196-9389-9001950d210f", "timestamp": "1496043558", "to_ids": true, "value": "download.asustor.com", "type": "hostname"}, {"category": "Network activity", "comment": "download.asustor.com", "uuid": "592bd027-0660-4735-a618-915f950d210f", "timestamp": "1496043559", "to_ids": false, "value": "54.231.40.155", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd028-dd30-4910-8444-915b950d210f", "timestamp": "1496043560", "to_ids": true, "value": "https://security-tracker.debian.org/tracker/CVE-2017-7494", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd028-37e4-480e-86ec-9062950d210f", "timestamp": "1496043560", "to_ids": true, "value": "security-tracker.debian.org", "type": "hostname"}, {"category": "Network activity", "comment": "security-tracker.debian.org", "uuid": "592bd029-c7c8-455c-9bd1-9153950d210f", "timestamp": "1496043561", "to_ids": false, "value": "128.31.0.67", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd02a-e2a4-472f-962e-7e4b950d210f", "timestamp": "1496043562", "to_ids": true, "value": "https://bugs.freenas.org/issues/24162", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd02a-4b28-4355-93d6-9168950d210f", "timestamp": "1496043562", "to_ids": true, "value": "bugs.freenas.org", "type": "hostname"}, {"category": "Network activity", "comment": "bugs.freenas.org", "uuid": "592bd02b-cf20-4835-83f2-7e48950d210f", "timestamp": "1496043563", "to_ids": false, "value": "64.62.136.47", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd02b-ba54-4da3-b671-9166950d210f", "timestamp": "1496043563", "to_ids": true, "value": "https://kb.netgear.com/000038779/Security-Advisory-for-CVE-2017-7494-Samba-Remote-Code-Execution", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd02c-cee0-4443-a01a-7e43950d210f", "timestamp": "1496043564", "to_ids": true, "value": "kb.netgear.com", "type": "hostname"}, {"category": "Network activity", "comment": "kb.netgear.com", "uuid": "592bd02d-7288-4bd6-bdd8-9162950d210f", "timestamp": "1496043565", "to_ids": false, "value": "136.146.13.27", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd02d-ebec-41e4-aa48-9165950d210f", "timestamp": "1496043565", "to_ids": true, "value": "https://access.redhat.com/security/cve/CVE-2017-7494", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd02e-4614-4c74-98f1-9152950d210f", "timestamp": "1496043566", "to_ids": true, "value": "access.redhat.com", "type": "hostname"}, {"category": "Network activity", "comment": "access.redhat.com", "uuid": "592bd02f-25f4-45af-9397-7e44950d210f", "timestamp": "1496043567", "to_ids": false, "value": "184.25.247.203", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd02f-9714-4930-8d2e-915f950d210f", "timestamp": "1496043567", "to_ids": true, "value": "https://www.suse.com/security/cve/CVE-2017-7494/", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd030-e18c-4f98-b560-9153950d210f", "timestamp": "1496043568", "to_ids": true, "value": "www.suse.com", "type": "hostname"}, {"category": "Network activity", "comment": "www.suse.com", "uuid": "592bd031-891c-41a9-b3f2-9168950d210f", "timestamp": "1496043569", "to_ids": false, "value": "130.57.66.10", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd031-a7e8-4e40-a772-7e43950d210f", "timestamp": "1496043569", "to_ids": true, "value": "https://www.synology.com/en-global/support/security/Important_Information_Regarding_Samba_Vulnerability_CVE_2017_7494", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd032-572c-42b0-9113-9165950d210f", "timestamp": "1496043570", "to_ids": true, "value": "www.synology.com", "type": "hostname"}, {"category": "Network activity", "comment": "www.synology.com", "uuid": "592bd033-897c-4ae0-9ba7-9152950d210f", "timestamp": "1496043571", "to_ids": false, "value": "52.222.231.55", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd033-e168-4f14-936d-915b950d210f", "timestamp": "1496043571", "to_ids": true, "value": "https://forum.qnap.com/viewtopic.php?f=5&t=132991", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd034-e258-4043-8cc1-915f950d210f", "timestamp": "1496043572", "to_ids": true, "value": "forum.qnap.com", "type": "hostname"}, {"category": "Network activity", "comment": "forum.qnap.com", "uuid": "592bd034-f1ec-4b58-8bcb-9001950d210f", "timestamp": "1496043572", "to_ids": false, "value": "211.21.125.36", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd035-8b44-41de-8571-7e4b950d210f", "timestamp": "1496043573", "to_ids": true, "value": "https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-7494.html", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd036-ae58-4a14-be4c-9153950d210f", "timestamp": "1496043574", "to_ids": true, "value": "people.canonical.com", "type": "hostname"}, {"category": "Network activity", "comment": "people.canonical.com", "uuid": "592bd036-4758-4970-a155-7e48950d210f", "timestamp": "1496043574", "to_ids": false, "value": "91.189.89.62", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd037-f4b4-4c59-92e5-9168950d210f", "timestamp": "1496043575", "to_ids": true, "value": "https://www.ubuntu.com/usn/usn-3296-2/", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd037-9040-45bd-8034-9166950d210f", "timestamp": "1496043575", "to_ids": true, "value": "www.ubuntu.com", "type": "hostname"}, {"category": "Network activity", "comment": "www.ubuntu.com", "uuid": "592bd038-36f8-4823-be5c-9162950d210f", "timestamp": "1496043576", "to_ids": false, "value": "91.189.89.110", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd039-3cf4-4666-aa04-7e43950d210f", "timestamp": "1496043577", "to_ids": true, "value": "https://git.samba.org/?p=samba.git;a=blobdiff;f=source3/rpc_server/srv_pipe.c;h=f79fbe26abff1e3a2b3f3a21480196afc09d13b1;hp=39f5fb49ec3c0e011a5c6ad4b7ac60bcf49af05a;hb=02a76d86db0cbe79fcaf1a500630e24d961fa149;hpb=82bb44dd3b7f42b90494294b32f8413a39cb2030", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd03a-a600-4053-8555-915f950d210f", "timestamp": "1496043578", "to_ids": true, "value": "git.samba.org", "type": "hostname"}, {"category": "Network activity", "comment": "git.samba.org", "uuid": "592bd03a-59e8-4a69-abf4-9001950d210f", "timestamp": "1496043578", "to_ids": false, "value": "193.175.80.230", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd03b-8690-4601-b39a-7e4b950d210f", "timestamp": "1496043579", "to_ids": true, "value": "http://nmap.org", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd03c-e888-4f5a-a4b9-9153950d210f", "timestamp": "1496043580", "to_ids": true, "value": "nmap.org", "type": "hostname"}, {"category": "Network activity", "comment": "nmap.org", "uuid": "592bd03c-0308-42f5-9522-7e48950d210f", "timestamp": "1496043580", "to_ids": false, "value": "45.33.49.119", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd03d-12e4-4618-852a-9168950d210f", "timestamp": "1496043581", "to_ids": true, "value": "samba.org", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd03e-ed90-42ee-ab41-9162950d210f", "timestamp": "1496043582", "to_ids": true, "value": "samba.org", "type": "hostname"}, {"category": "Network activity", "comment": "samba.org", "uuid": "592bd03e-3948-4acc-bc18-9062950d210f", "timestamp": "1496043582", "to_ids": false, "value": "144.76.82.156", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd03f-87cc-4fec-8672-7e43950d210f", "timestamp": "1496043583", "to_ids": true, "value": "https://www.samba.org/samba/security/CVE-2017-7494.html", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd03f-7714-4c19-b064-9155950d210f", "timestamp": "1496043583", "to_ids": true, "value": "www.samba.org", "type": "hostname"}, {"category": "Network activity", "comment": "", "uuid": "592bd040-8950-4cbf-bd51-915f950d210f", "timestamp": "1496043584", "to_ids": true, "value": "https://github.com/rapid7/metasploit-framework/pull/8450", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd041-adf0-452d-894c-9001950d210f", "timestamp": "1496043585", "to_ids": true, "value": "github.com", "type": "hostname"}, {"category": "Network activity", "comment": "github.com", "uuid": "592bd041-fa88-4902-bc22-7e4b950d210f", "timestamp": "1496043585", "to_ids": false, "value": "192.30.253.112", "type": "ip-dst"}, {"category": "Network activity", "comment": "github.com", "uuid": "592bd042-3970-437d-aeb5-7e48950d210f", "timestamp": "1496043586", "to_ids": false, "value": "192.30.253.113", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd042-ada8-40fd-9b86-9168950d210f", "timestamp": "1496043586", "to_ids": true, "value": "https://github.com/opsxcq/exploit-CVE-2017-7494", "type": "url"}, {"category": "Network activity", "comment": "download.asustor.com", "uuid": "592bd044-5534-4ade-8b27-9151950d210f", "timestamp": "1496043588", "to_ids": false, "value": "54.231.98.96", "type": "ip-dst"}, {"category": "Network activity", "comment": "", "uuid": "592bd047-6020-4d3d-a031-9165950d210f", "timestamp": "1496043591", "to_ids": true, "value": "https://forum.qnap.com/viewtopic.php?f=5&t=132991", "type": "url"}, {"category": "Network activity", "comment": "", "uuid": "592bd049-e008-43fb-b0ca-9151950d210f", "timestamp": "1496043593", "to_ids": true, "value": "http://samba.org", "type": "url"}], "Tag": [{"colour": "#ffffff", "exportable": true, "name": "tlp:white"}], "published": false, "date": "2017-05-29", "Orgc": {"name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"}, "threat_level_id": "3", "uuid": "592bd021-fd44-4594-938f-915b950d210f"}} |