1146 lines
No EOL
33 KiB
JSON
1146 lines
No EOL
33 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "2",
|
|
"date": "2018-02-21",
|
|
"extends_uuid": "",
|
|
"info": "A Slice of 2017 Sofacy Activity by Kaspersky",
|
|
"publish_timestamp": "1596436827",
|
|
"published": true,
|
|
"threat_level_id": "1",
|
|
"timestamp": "1596436741",
|
|
"uuid": "5a8d2377-208c-4330-908f-4818950d210f",
|
|
"Orgc": {
|
|
"name": "CthulhuSPRL.be",
|
|
"uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#0088cc",
|
|
"local": false,
|
|
"name": "misp-galaxy:microsoft-activity-group=\"STRONTIUM\"",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#12e000",
|
|
"local": false,
|
|
"name": "misp-galaxy:threat-actor=\"Sofacy\"",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#f71212",
|
|
"local": false,
|
|
"name": "APT",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#0f4d00",
|
|
"local": false,
|
|
"name": "Threat Type:APT",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": false,
|
|
"name": "tlp:white",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#00223b",
|
|
"local": false,
|
|
"name": "osint:source-type=\"blog-post\"",
|
|
"relationship_type": ""
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199107",
|
|
"to_ids": false,
|
|
"type": "link",
|
|
"uuid": "5a8d2384-c8c0-40c3-ac89-4248950d210f",
|
|
"value": "https://securelist.com/a-slice-of-2017-sofacy-activity/83930/"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199238",
|
|
"to_ids": false,
|
|
"type": "vulnerability",
|
|
"uuid": "5a8d2406-6cd8-4f08-b88a-4923950d210f",
|
|
"value": "CVE-2017-0262"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199238",
|
|
"to_ids": false,
|
|
"type": "vulnerability",
|
|
"uuid": "5a8d2406-7d74-4a27-b345-4012950d210f",
|
|
"value": "CVE-2017-0263"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-4164-4110-9631-4986950d210f",
|
|
"value": "66b4fb539806ce27be184b6735584339"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-6b4c-4b2e-a136-4a37950d210f",
|
|
"value": "e8e1fcf757fe06be13bead43eaa1338c"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-8788-452b-9aa6-4dc0950d210f",
|
|
"value": "953c7321c4959655fdd53302550ce02d"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-91cc-47bf-9982-47bb950d210f",
|
|
"value": "aa2aac4606405d61c7e53140d35d7671"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-c4b0-47e1-a865-4da8950d210f",
|
|
"value": "85cd38f9e2c9397a18013a8921841a04"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-f988-4d20-9489-43c4950d210f",
|
|
"value": "57601d717fcf358220340675f8d63c8a"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-2118-456d-a8a9-4ec9950d210f",
|
|
"value": "16e1ca26bc66e30bfa52f8a08846613d"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-67e8-4fdb-89a5-4640950d210f",
|
|
"value": "f8e92d8b5488ea76c40601c8f1a08790"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-bd2c-4165-a340-470d950d210f",
|
|
"value": "b137c809e3bf11f2f5d867a6f4215f95"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-152c-4094-801f-4834950d210f",
|
|
"value": "237e6dcbc6af50ef5f5211818522c463"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-5b98-425b-8ba1-456f950d210f",
|
|
"value": "88009adca35560810ec220544e4fb6aa"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-9070-4c8c-bf61-489b950d210f",
|
|
"value": "2163a33330ae5786d3e984db09b2d9d2"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-acac-48bf-b211-4ae1950d210f",
|
|
"value": "02b79c468c38c4312429a499fa4f6c81"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-bec0-4aec-af87-4e82950d210f",
|
|
"value": "842454b48f5f800029946b1555fba7fc"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-d458-4a4c-bb8b-4895950d210f",
|
|
"value": "b88633376fbb144971dcb503f72fd192"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-f4e0-40a9-bd34-40f6950d210f",
|
|
"value": "8f9f697aa6697acee70336f66f295837"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-06f4-4586-90c8-4568950d210f",
|
|
"value": "b6f77273cbde76896a36e32b0c0540e1"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-1e80-4142-ac23-4aed950d210f",
|
|
"value": "1421419d1be31f1f9ea60e8ed87277db"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-5f10-4cbc-9e58-42a9950d210f",
|
|
"value": "1a4b9a6b321da199aa6d10180e889313"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-8e0c-4e70-9c38-4901950d210f",
|
|
"value": "9b10685b774a783eabfecdb6119a8aa3"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-b1b4-442b-becf-452f950d210f",
|
|
"value": "aa34fb2e5849bff4144a1c98a8158970"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-fa14-43f6-a905-4a61950d210f",
|
|
"value": "aced5525ba0d4f44ffd01c4db2730a34"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-2b04-41a7-be9f-4920950d210f",
|
|
"value": "b1d1a2c64474d2f6e7a5db71ccbafa31"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-729c-41eb-bd61-4324950d210f",
|
|
"value": "b924ff83d9120d934bb49a7a2e3c4292"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-9a2c-4d6d-92ba-4ad5950d210f",
|
|
"value": "cdb58c2999eeda58a9d0c70f910d1195"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-e3b8-4a7a-882d-4907950d210f",
|
|
"value": "d4a5d44184333442f5015699c2b8af28"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-18f4-4c3f-bdf1-432a950d210f",
|
|
"value": "d6f2bf2066e053e58fe8bcd39cb2e9ad"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-66cc-4660-be54-4e1d950d210f",
|
|
"value": "34dc9a69f33ba93e631cd5048d9f2624"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-962c-48b5-b1fb-4077950d210f",
|
|
"value": "1c6f8eba504f2f429abf362626545c79"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-e01c-446a-bb5d-4434950d210f",
|
|
"value": "139c9ac0776804714ebe8b8d35a04641"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-174c-4b80-965c-4b8c950d210f",
|
|
"value": "e228cd74103dc069663bb87d4f22d7d5"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-771c-4a79-8a8e-45fc950d210f",
|
|
"value": "bed5bc0a8aae2662ea5d2484f80c1760"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-b554-4488-a976-4a5f950d210f",
|
|
"value": "8c3f5f1fff999bc783062dd50357be79"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-019c-4c11-ae6a-46bf950d210f",
|
|
"value": "5882a8dd4446abd137c05d2451b85fea"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-1f04-49ae-99cf-4f75950d210f",
|
|
"value": "296c956fe429cedd1b64b78e66797122"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-52b0-43e1-8923-4d18950d210f",
|
|
"value": "82f06d7157dd28a75f1fbb47728aea25"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-6dc0-40cd-8914-477d950d210f",
|
|
"value": "9a975e0ddd32c0deef1318c485358b20"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-7034-4b89-97fa-4785950d210f",
|
|
"value": "529424eae07677834a770aaa431e6c54"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-8054-44f1-819d-4de2950d210f",
|
|
"value": "4cafde8fa7d9e67194d4edd4f2adb92b"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-a1a4-4b43-9be2-402d950d210f",
|
|
"value": "f6b2ef4daf1b78802548d3e6d4de7ba7"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-a47c-4a00-8f6e-4384950d210f",
|
|
"value": "ede5d82bb6775a9b1659dccb699fadcb"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-a9ac-4741-8fec-4136950d210f",
|
|
"value": "116d2fc1665ce7524826a624be0ded1c"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-b968-4b78-8cae-4bbe950d210f",
|
|
"value": "20ff290b8393f006eaf4358f09f13e99"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-abd8-4a59-aa77-4564950d210f",
|
|
"value": "4b02dfdfd44df3c88b0ca8c2327843a4"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-9eac-4f73-b5f8-45bb950d210f",
|
|
"value": "c789ec7537e300411d523aef74407a5e"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-9248-4b5d-b97c-468e950d210f",
|
|
"value": "0b32e65caf653d77cab2a866ee2d9dbc"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-8a94-4392-b470-4292950d210f",
|
|
"value": "27faa10d1bec1a25f66e88645c695016"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-7660-4f3b-b3fa-4183950d210f",
|
|
"value": "647edddf61954822ddb7ab3341f9a6c5"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-6b28-405f-b280-450c950d210f",
|
|
"value": "2f04b8eb993ca4a3d98607824a10acfb"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-64a0-4112-8110-4ff3950d210f",
|
|
"value": "9fe3a0fb3304d749aeed2c3e2e5787eb"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-a7ec-48cf-80d5-431d950d210f",
|
|
"value": "62deab0e5d61d6bf9e0ba83d9e1d7e2b"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-ca04-4144-b1fe-41c6950d210f",
|
|
"value": "86b607fe63c76b3d808f84969cb1a781"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-d448-4e3c-bbc4-4ada950d210f",
|
|
"value": "f62182cf0ab94b3c97b0261547dfc6cf"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-eb70-41ea-82d9-4fc5950d210f",
|
|
"value": "504182aaa5575bb38bf584839beb6d51"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199306",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a8d244a-1fe4-42ce-9c45-4b43950d210f",
|
|
"value": "d79a21970cad03e22440ea66bd85931f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199438",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24ce-99c4-49a4-b98c-4b0a950d210f",
|
|
"value": "nethostnet.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199439",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24cf-4040-4fe9-a83b-4759950d210f",
|
|
"value": "hostsvcnet.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199439",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24cf-03a4-41b5-b0a5-48ca950d210f",
|
|
"value": "etcrem.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199440",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d0-0ce8-47cf-b988-47ad950d210f",
|
|
"value": "movieultimate.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199440",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d0-ae38-40ad-8fb7-42ed950d210f",
|
|
"value": "newfilmts.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199440",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d0-65fc-45fe-a819-4194950d210f",
|
|
"value": "fastdataexchange.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199441",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d1-9fe4-48ac-92c4-4032950d210f",
|
|
"value": "liveweatherview.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199441",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d1-f2e8-4f4b-aedd-45e3950d210f",
|
|
"value": "analyticsbar.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199441",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d1-9044-4e35-a69b-4ed5950d210f",
|
|
"value": "analyticstest.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199442",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d2-4788-43b0-85f3-4c17950d210f",
|
|
"value": "lifeofmentalservice.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199442",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d2-f15c-4c5f-99d4-4187950d210f",
|
|
"value": "meteost.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199443",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d3-34ac-47e5-8f63-47e3950d210f",
|
|
"value": "righttopregnantpower.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199443",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d3-77a8-4194-a948-4a8e950d210f",
|
|
"value": "kiteim.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199443",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d3-11e0-4f5e-abb0-4ec6950d210f",
|
|
"value": "adobe-flash-updates.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199444",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d4-b964-4d38-9de8-42ec950d210f",
|
|
"value": "generalsecurityscan.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199444",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d4-4590-48e2-a9a7-4f00950d210f",
|
|
"value": "globalresearching.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199445",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d5-36ec-4aac-bae4-4c3f950d210f",
|
|
"value": "lvueton.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199445",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d5-102c-4e72-9a6c-4738950d210f",
|
|
"value": "audiwheel.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199445",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d5-9828-4754-8c1a-44fc950d210f",
|
|
"value": "online-reggi.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199446",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d6-ebec-4fde-8eb8-4fea950d210f",
|
|
"value": "fsportal.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199446",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d6-cec8-4e3e-bef9-4e73950d210f",
|
|
"value": "netcorpscanprotect.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199446",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d6-c09c-4628-90e3-4374950d210f",
|
|
"value": "mvband.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199447",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d7-8a18-46ea-8483-4fb6950d210f",
|
|
"value": "mvtband.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199447",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d7-d680-4c88-aa2f-4c39950d210f",
|
|
"value": "viters.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199448",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d8-b19c-4e65-8415-4710950d210f",
|
|
"value": "treepastwillingmoment.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199448",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d8-b8b0-4731-a87c-428a950d210f",
|
|
"value": "sendmevideo.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199448",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d8-4978-41f5-b523-4abd950d210f",
|
|
"value": "satellitedeluxpanorama.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199449",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d9-ff34-48a9-b709-4a84950d210f",
|
|
"value": "ppcodecs.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199449",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d9-1968-4616-8dfd-488a950d210f",
|
|
"value": "encoder-info.tk"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199449",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24d9-0088-40b4-ae61-4521950d210f",
|
|
"value": "wmdmediacodecs.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199450",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24da-90f0-408d-9512-47f6950d210f",
|
|
"value": "postlkwarn.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199450",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24da-aa2c-4c86-bcc7-4941950d210f",
|
|
"value": "shcserv.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199451",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24db-0bac-4a89-83a8-4ffc950d210f",
|
|
"value": "versiontask.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199451",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24db-faec-476e-b340-4c9a950d210f",
|
|
"value": "webcdelivery.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199451",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24db-d7bc-4e75-8d4b-4ef5950d210f",
|
|
"value": "miropc.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199452",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24dc-b5d4-4aa0-9261-4df3950d210f",
|
|
"value": "securityprotectingcorp.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199452",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24dc-4804-4756-a80d-4d9a950d210f",
|
|
"value": "uniquecorpind.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199453",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24dd-6c1c-4b56-a267-42f4950d210f",
|
|
"value": "appexsrv.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519199454",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5a8d24de-3254-4a47-a2ea-4421950d210f",
|
|
"value": "adobeupgradeflash.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519910979",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "5a980043-2c20-450d-bc03-0d490a950b0d",
|
|
"value": "12e6642cf6413bdf5388bee663080fa299591b2ba023d069286f3be9647547c8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1519910962",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "5a980032-9854-4d56-a880-0a3f0a950b0d",
|
|
"value": "ff808d0a12676bfac88fd26f955154f8884f2bb7c534b9936510fd6296c543e8"
|
|
}
|
|
]
|
|
}
|
|
} |