17255 lines
No EOL
519 KiB
JSON
17255 lines
No EOL
519 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "2",
|
|
"date": "2020-10-29",
|
|
"extends_uuid": "",
|
|
"info": "unc1878 - ryuk",
|
|
"publish_timestamp": "1603993457",
|
|
"published": true,
|
|
"threat_level_id": "2",
|
|
"timestamp": "1603993373",
|
|
"uuid": "d353f73e-4c80-4cc8-84c1-940b4899df95",
|
|
"Orgc": {
|
|
"name": "CIRCL",
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#004646",
|
|
"local": false,
|
|
"name": "type:OSINT",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#0071c3",
|
|
"local": false,
|
|
"name": "osint:lifetime=\"perpetual\"",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#0087e8",
|
|
"local": false,
|
|
"name": "osint:certainty=\"50\"",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": false,
|
|
"name": "tlp:white",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#0088cc",
|
|
"local": false,
|
|
"name": "misp-galaxy:ransomware=\"Ryuk ransomware\"",
|
|
"relationship_type": ""
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "0e510cf4-0a8b-40bb-b87d-84b5bb069de5",
|
|
"value": "updatemanagir.us"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "b79abda0-8991-44d2-80b9-01ae6e139015",
|
|
"value": "cmdupdatewin.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "8029ea29-849e-4296-acc8-e04fc939c9ca",
|
|
"value": "scrservallinst.info"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "00470e52-9e40-4b33-8fbf-cf1a2a15cef7",
|
|
"value": "winsystemupdate.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "d7f03305-111e-4039-81f4-8a883fae581f",
|
|
"value": "jomamba.best"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "bb42dd19-4a0d-4f38-b5ed-aa4a02a10447",
|
|
"value": "updatewinlsass.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "1668e9be-e479-492b-a9f6-c9809c9d8516",
|
|
"value": "winsysteminfo.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "c59fc97a-34ba-49db-98c5-0e7b86739150",
|
|
"value": "livecheckpointsrs.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e49f8c80-7a38-4181-9891-75fcc0eaec25",
|
|
"value": "ciscocheckapi.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "51178cad-6faa-418b-86e3-1679f64ec108",
|
|
"value": "timesshifts.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "cb0ee1c3-3e0b-44d7-891d-5c3382d046a7",
|
|
"value": "cylenceprotect.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "bbc8a1e5-9390-40f6-9c1a-1fcd62ab7742",
|
|
"value": "sophosdefence.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "aef5fcd8-349b-40e0-bbf3-d64ad63e7b4e",
|
|
"value": "taskshedulewin.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "be6fe921-a05c-42b3-a4e4-7df07a79f208",
|
|
"value": "windefenceinfo.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993194",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "ad01529e-aaaf-47db-bb7e-e0979e8158a2",
|
|
"value": "lsasswininfo.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "9fd10fb4-99a0-403e-aca8-43272b2db140",
|
|
"value": "update-wind.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "6d21d45a-98cd-4912-b0f9-b2e2b425ef53",
|
|
"value": "lsassupdate.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "bd5c742f-cf37-434e-ada2-83a8304efa59",
|
|
"value": "renovatesystem.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "31829be6-f86e-40d7-a62e-a6650c38af17",
|
|
"value": "updatewinsoftr.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "8d00cfbc-906c-4e10-9c30-4059122e44f9",
|
|
"value": "cleardefencewin.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "b5de8771-cbc7-4d84-863a-8a13ecbb0c7c",
|
|
"value": "checkwinupdate.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "9607f014-e703-47b3-91a8-638fe1963433",
|
|
"value": "havesetup.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "d9255ec3-f159-4117-8aad-22125bdade7f",
|
|
"value": "update-wins.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "53eeaa71-0322-4a27-9c77-74b9f9be932d",
|
|
"value": "conhostservice.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "f0999aad-5a2b-4be2-b1b4-4ebaa9d153c7",
|
|
"value": "microsoftupdateswin.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "396083a5-6709-49a7-8da4-af9ab0518b21",
|
|
"value": "iexploreservice.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "0518e865-cb65-491f-9a6f-8c19692f9fa5",
|
|
"value": "avrenew.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "ce0abd7a-c23f-4db1-946e-1056e7616ab2",
|
|
"value": "target-support.online"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "721db859-6c01-40c8-96c5-8da9ad5e8fa9",
|
|
"value": "web-analysis.live"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "fed2f4d7-b8f7-4e8a-921f-6f4458b4f9a0",
|
|
"value": "freeallsafe.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "8465c022-87fa-4d2d-92fe-2e863899f4a6",
|
|
"value": "windefens.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "78d4f999-2916-4b0b-910e-452cfa77ccd3",
|
|
"value": "defenswin.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "f5ef8640-e988-4c92-bf42-3870270eeba4",
|
|
"value": "easytus.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "0f331f07-89b9-43ea-9785-ea30416d5358",
|
|
"value": "greattus.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "cae10b32-1fcf-4610-931c-020e72922680",
|
|
"value": "livetus.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "3e0bb93c-d446-4d33-9b00-d27e4f07690d",
|
|
"value": "comssite.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "f6618925-8e7d-4c30-9786-d8512b129f03",
|
|
"value": "findtus.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e9107ca8-b2c0-48a0-95e2-87141a397256",
|
|
"value": "bigtus.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "fd1247d9-76c1-4cb7-8c21-3c6a61dddbd9",
|
|
"value": "aaatus.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "a1f78f35-78f5-46e3-be73-feee4f541636",
|
|
"value": "besttus.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "cdad0744-57a9-4f43-802d-e096b0c1b936",
|
|
"value": "firsttus.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "42c05f50-7958-4f2e-b2e9-c241c0a0c9ab",
|
|
"value": "worldtus.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "2193c9bc-881e-4c91-bf0c-c11b2c6d852b",
|
|
"value": "freeoldsafe.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "af49652e-ac6c-40d3-8aa7-dad5b3210ca8",
|
|
"value": "serviceupdates.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "91599026-7e02-4a7a-b960-f4083ca418c1",
|
|
"value": "topserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "21286784-2392-4cf8-9f2f-711a0baa553a",
|
|
"value": "myserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "96b299a1-c189-44be-9e92-a8e62f75f073",
|
|
"value": "myservicebooster.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "385c2b7a-5245-4864-9336-40a06ca97a83",
|
|
"value": "servicesbooster.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "db09395f-95ee-4722-ae6d-2cabd7994444",
|
|
"value": "brainschampions.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "2d64f34a-c01b-41b8-8492-1adb11c9dafe",
|
|
"value": "myservicebooster.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "156f8a3c-2eb9-4b94-95a8-02dbc283e05b",
|
|
"value": "topservicesbooster.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "d3950c70-68fd-493d-9806-1d4c77a55b4d",
|
|
"value": "servicesbooster.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "9cab761a-c772-4e2e-a97f-bf8a96cdcb4b",
|
|
"value": "topservicesecurity.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "b8c72484-a295-4835-ac5a-2d9005c9a504",
|
|
"value": "topservicesecurity.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "88fcada1-2078-49b0-9cb8-d4f18056ec3a",
|
|
"value": "topsecurityservice.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e17a6b08-b2a1-4f8d-8632-f38f95b77756",
|
|
"value": "myyserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "4b8804e2-5a5a-4e35-b24e-62d3a0d4990d",
|
|
"value": "topservicesupdate.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "9459a394-bceb-4e23-9fc9-de355a3495b1",
|
|
"value": "topservicesecurity.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "60d3fdca-c76e-4359-8305-5719c410571e",
|
|
"value": "servicesecurity.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "8c9f095d-3667-4e63-a758-99c9967e0225",
|
|
"value": "myserviceconnect.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "1726dd1a-2420-45d7-945c-cd9be4ccec4f",
|
|
"value": "topservicesupdates.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "977aec27-6a2f-4785-9d4e-adfad0fa9d0e",
|
|
"value": "yoursuperservice.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "7faddd14-e29f-40d3-96ee-22a9fea9c2d6",
|
|
"value": "topservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "fefa8be4-60d9-471a-a1fc-6daa670e28a9",
|
|
"value": "serviceuphelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "1da39e7c-ade3-42fb-9767-98616879da82",
|
|
"value": "serviceshelpers.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "fd31ab9a-3be2-4a47-908c-fd98a15eb143",
|
|
"value": "boostsecuritys.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "f9027605-e493-4d93-9f34-08ca3ebf3287",
|
|
"value": "hakunamatatata.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "b44f9dda-5ba5-4c93-8117-7e8253c14521",
|
|
"value": "service-updater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "a38397f4-81a4-424d-b30c-2248314de599",
|
|
"value": "secondserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "92d23998-f758-4b3e-82bf-98f4d5d80d0e",
|
|
"value": "twelvethserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "7f1a97a5-8032-4959-b0ee-510631c21335",
|
|
"value": "twentiethservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "98091a09-a30a-40ca-8060-55f3188ce730",
|
|
"value": "twelfthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "4fc4456f-bb69-4267-94fb-894d683f0a06",
|
|
"value": "tenthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "b2e770dd-fcc5-4eab-8f30-8a42373b1c7f",
|
|
"value": "thirdserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e1fdc801-a4da-4442-aa1a-1767f3496104",
|
|
"value": "thirdservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "c006047b-4cd4-4cb3-8c91-edaa0f734688",
|
|
"value": "tenthserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "c6c1f8ec-1281-48bd-93c6-6425f79ec4e3",
|
|
"value": "thirteenthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "603f2b29-e2d7-43f2-8bb6-cafab70fefc7",
|
|
"value": "seventeenthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "b4895402-6985-43c9-bc27-8bbe8a73605c",
|
|
"value": "sixteenthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "bd1c29a7-2222-4978-8b46-92450f3e8522",
|
|
"value": "sixthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993195",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "dd463fef-734d-4ad2-9504-0c05f5a1fe27",
|
|
"value": "seventhservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "d1c3fcf6-35b5-4d35-b6a4-6601eeede5dc",
|
|
"value": "seventhserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "dd418c94-4553-4b35-a53d-8db63a6e2a7e",
|
|
"value": "sixthserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "c2e2c22f-ae80-4b01-95da-32aeb1e87e0b",
|
|
"value": "secondservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "19edcef7-7090-4563-89ca-72441f791564",
|
|
"value": "ninthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "78da7f56-5630-4c80-b149-f9fdec7826c0",
|
|
"value": "ninethserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "ad48d8d0-e4a2-4374-91fc-2b0f2bf90ce4",
|
|
"value": "fourteenthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "f2441129-f67b-4527-84a4-0765ae113da5",
|
|
"value": "fourthserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "c802b1fb-a1b0-4dd2-80ec-995a2906ccf4",
|
|
"value": "firstserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "37986109-6f89-4aee-8158-df273c2022bf",
|
|
"value": "firstservisehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "18872b71-0bce-4b39-8006-3cc6d640d79a",
|
|
"value": "fifthserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "36ce9689-0281-44b3-9e7e-cc14033e81a2",
|
|
"value": "eleventhserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "1053036a-54d6-4893-a788-0139824ba514",
|
|
"value": "fifthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "907d57a6-c128-44e9-9a15-844bc37a2867",
|
|
"value": "fourservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "101845fe-fb68-4574-8d0d-6b31236019aa",
|
|
"value": "eighthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "0b0749db-bd9d-45c0-9e11-ee45e0d41e9f",
|
|
"value": "eighteenthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "86aefff5-322a-47b5-90d3-6eec57478210",
|
|
"value": "eighthserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "d99f08d2-e08e-4c4e-a393-5905b6369a8a",
|
|
"value": "fifteenthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "49474735-57d2-42c0-8ec9-fdbae5ef6c68",
|
|
"value": "nineteenthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "eb76374d-d301-43f8-8d9f-56cd357180e4",
|
|
"value": "eleventhservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "acffda59-39b6-4d8c-bc33-445bc9aff287",
|
|
"value": "thirdservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "54738ec7-f16b-4d2e-9630-ef182b42fade",
|
|
"value": "fifthservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "6dcfff38-8b5f-4cc3-8467-d340c7e48c93",
|
|
"value": "firstservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "34ee3280-2d7e-49ee-abbc-3ded3ac5f0d0",
|
|
"value": "fourthservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "9ab952fb-7134-4a88-8f89-a6cc9c82473f",
|
|
"value": "ninethservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5268d3f8-4003-4c8f-9c58-9f5270063037",
|
|
"value": "seventhservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "eb57fbf7-dd09-45f9-b8df-31f1448e10fc",
|
|
"value": "secondservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "95c9082f-d2d2-4043-8518-5d813db3e94e",
|
|
"value": "sixthservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "76c77c0b-6595-44ad-850c-cbf735bb1da8",
|
|
"value": "tenthservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "cc8ae1e2-a010-4141-9e4a-941a5c2f4a4c",
|
|
"value": "eithtservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "17cf0c4d-f0df-4389-900b-7ded3daf035d",
|
|
"value": "servicedupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "371fc829-7a80-44cc-98ff-ec96fda99455",
|
|
"value": "service-updateer.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "44945b47-d702-4c3a-9d6c-0d97f7181acb",
|
|
"value": "sexyservicee.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "0fa316b3-a084-453b-9277-6512044edd18",
|
|
"value": "serviceboostnumberone.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "27eb0449-d1ea-44f2-a3e9-513ab26583ea",
|
|
"value": "servicedbooster.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "d27eb7a5-d6b4-4836-9fea-cd33f2548b0f",
|
|
"value": "service-hunter.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e80b078e-d45e-4898-9b7e-4e689d74b77d",
|
|
"value": "servicedhunter.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "d15d6268-120a-4e4a-a37c-5f6c48fe760c",
|
|
"value": "servicedpower.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e4322fdd-c206-4a73-8d7a-e2df46728008",
|
|
"value": "sexycservice.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "602cbb47-6524-4c56-a726-4030ca5384a0",
|
|
"value": "yourserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "1d4bacb5-c8da-4d60-853f-17ccb0eea487",
|
|
"value": "top-serviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "f9506bef-fa38-4b9b-a56c-1a971668fb8e",
|
|
"value": "top-servicebooster.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "41652205-a9eb-4555-b718-f089379160c2",
|
|
"value": "serviceshelps.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "1b76eeea-2d89-4534-8814-56b6b9240940",
|
|
"value": "servicemonsterr.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "26ec9e81-ee48-4f61-b76b-b1a6ecc39239",
|
|
"value": "servicehunterr.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "2f4963c5-25e3-422c-b213-2c72bbe4eff9",
|
|
"value": "service-helpes.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "0b3ef31c-01e5-4b61-9c23-81bcf9463e0b",
|
|
"value": "servicecheckerr.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "2c8836ed-0988-4957-a9b6-08dd13eb12ca",
|
|
"value": "newservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "070774f6-6f2d-4253-a0b5-e75d4d876c4b",
|
|
"value": "huntersservice.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "4ff3778f-9b9c-479c-84e5-125f2f57883a",
|
|
"value": "helpforyourservice.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e933b430-a319-4fad-a831-34934763c095",
|
|
"value": "boostyourservice.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "dbce1379-ceae-4ef3-92b2-b74a7c5f420f",
|
|
"value": "developmasters.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "43857724-aece-487c-bea2-f88df06696a5",
|
|
"value": "actionshunter.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993196",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e983a0b4-fd8a-482e-a42a-851e0093817b",
|
|
"value": "info-develop.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "442311f6-cb52-447c-a5f6-a0e5e8cab447",
|
|
"value": "ayechecker.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "69823864-bb8d-48bb-993e-288f6acf7846",
|
|
"value": "service-booster.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "7e5ad9a6-69d3-446e-b17d-a2017069d6b5",
|
|
"value": "zapored.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "014a6356-629b-4b13-a4d5-3bc5f51928bb",
|
|
"value": "gtrsqer.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "91f05bab-973e-49dd-94d9-80568be0cc21",
|
|
"value": "chalengges.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "6186d53c-c1ff-43f8-8ece-b395479a2bf5",
|
|
"value": "caonimas.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "4f125523-fd2e-48f7-ac3b-c41555c8c159",
|
|
"value": "hakunaman.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "f0a75a88-9c0a-41ee-adea-e94f131d41aa",
|
|
"value": "getinformationss.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "3e1d4d96-08d4-4c44-89cb-4197b50b5342",
|
|
"value": "nomadfunclub.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "de671ca9-4133-4efd-aca7-aad8b78ae91e",
|
|
"value": "harddagger.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "3a686ea5-d608-4100-ba37-88a2efcfdeec",
|
|
"value": "errvghu.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "f2ea9c74-15f9-42e6-80b9-1dadad0f30cb",
|
|
"value": "reginds.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "6dd9cdca-ddd8-4aae-a888-413ffbfc9b4e",
|
|
"value": "gameleaderr.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "6a528e75-edb2-43f2-beb9-d5d30d55d352",
|
|
"value": "razorses.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "b73c08db-2d9a-4233-b65a-366738316bff",
|
|
"value": "vnuret.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "22ef2358-974a-419e-9b2f-bc89c8e146f5",
|
|
"value": "regbed.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "44bb354d-1ed2-4e4f-8fc3-61839e2bd6bc",
|
|
"value": "bouths.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "1f90aa71-7d64-416a-9073-fd5440f0a886",
|
|
"value": "ayiyas.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "bcc93ac2-9cec-4331-b36b-a396c41dada3",
|
|
"value": "serviceswork.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "1595d197-b2cd-4240-9c31-c6a1b432420a",
|
|
"value": "moonshardd.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "c31baaaf-3c31-4754-a227-7bd3d9823623",
|
|
"value": "hurrypotter.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "22cff312-1e6e-4bfe-9d1b-dc26c12f8f15",
|
|
"value": "biliyilish.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e326c048-595d-4c0d-926f-eaa0077cec59",
|
|
"value": "blackhoall.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "93cd1781-6941-415e-9cab-55ef1322c680",
|
|
"value": "checkhunterr.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "4f9ce231-5c1b-4e64-9170-9c138d1c9efc",
|
|
"value": "daggerclip.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "571ae1bf-b2a4-418c-b4dc-0240b7fe5c76",
|
|
"value": "check4list.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "fa0f6349-aa64-4b3c-ad49-3cb6967062ba",
|
|
"value": "chainnss.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "49c6e8e1-c4a7-483f-992b-d0772d080f39",
|
|
"value": "hungrrybaby.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "79ae6abb-5caa-4c87-94d7-bd426957373c",
|
|
"value": "martahzz.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "1c4a672c-9bad-44fe-a85e-8bdc27c3d12b",
|
|
"value": "jonsonsbabyy.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "23cab516-19d4-4197-b06c-5b1fb77b2f1e",
|
|
"value": "wondergodst.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "eee6b2aa-0f02-491e-9905-befa92176d30",
|
|
"value": "zetrexx.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "59c45612-089f-4303-bcf2-d8091d835811",
|
|
"value": "tiancaii.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "ebce8760-9408-4bb7-8f8a-3c738bc42097",
|
|
"value": "cantliee.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "7c53aa97-1592-4292-9e43-acc5e8c0f0d2",
|
|
"value": "realgamess.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "f1e3750f-3064-4a3b-a75c-5d6312556e04",
|
|
"value": "maybebaybe.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "08fc52e9-4503-4045-b5fd-f2858c65d815",
|
|
"value": "saynoforbubble.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e46d57f5-2fd1-4fe6-9f87-1cb6d8953a5e",
|
|
"value": "chekingking.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "6c4bcddf-aa14-4f7f-afb0-d44028fe9d88",
|
|
"value": "rapirasa.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "2376768a-7af7-4219-b62d-420caf8b1746",
|
|
"value": "raidbossa.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "2166864b-2024-45f0-bc98-62857e06f06f",
|
|
"value": "mountasd.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "d6f48942-72ac-46a7-8fad-6a179959c4cb",
|
|
"value": "puckhunterrr.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "4867aeb7-5226-41fa-82d3-9daebe6bc2c8",
|
|
"value": "pudgeee.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "678a9b19-a86b-41ca-9f67-67b71f61de38",
|
|
"value": "loockfinderrs.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e723061e-3c3e-4037-81d1-db99c5e21f60",
|
|
"value": "lindasak.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "2a1eba4b-5bce-4967-9aba-8b89505e1576",
|
|
"value": "bithunterr.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "0a554c26-fce9-4365-a90e-637eaeea7b88",
|
|
"value": "voiddas.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "2999ec11-c768-4473-a7bb-214f809ebe63",
|
|
"value": "sibalsakie.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "b59c41f4-0f1a-493b-8148-186a86db59ef",
|
|
"value": "giveasees.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "05301123-ac36-4ee4-a85e-7330bca8391f",
|
|
"value": "shabihere.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "00a04905-bbde-4d53-879e-f2a41dbc6469",
|
|
"value": "tarhungangster.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5faf6f6c-46a1-46f8-9332-e592e8a738bd",
|
|
"value": "imagodd.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5675ef98-df42-499a-90c0-2bc8f714faa3",
|
|
"value": "raaidboss.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "be6823ef-20c5-4d01-be1d-8be7c822827c",
|
|
"value": "sunofgodd.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "d5369581-7c9c-4258-9788-89fa25c6a903",
|
|
"value": "rulemonster.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "cfe1fa68-166b-4594-b079-f70c391eecf4",
|
|
"value": "loxliver.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5da9f641-a4ef-47fd-8c0b-8cc62ad43e0d",
|
|
"value": "servicegungster.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "bd3ab226-7d83-4af1-8424-a2b93e20cf96",
|
|
"value": "kungfupandasa.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993197",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "7cd2ebca-b362-405b-84b5-d509621eb93f",
|
|
"value": "check1domains.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "3c4d646b-54ae-40d6-8776-8f9d8b25ad8d",
|
|
"value": "sweetmonsterr.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e5809aa1-04d6-4bad-bb5d-144d4239b923",
|
|
"value": "qascker.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "9862be1b-1fc8-4218-ab2e-0bba8a4546c0",
|
|
"value": "remotessa.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "ddeec549-8ea3-4bf0-9965-d946dc0dc34a",
|
|
"value": "cheapshhot.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "56b3f47d-6ff6-4a2c-985f-7774ae4d46e2",
|
|
"value": "havemosts.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "d78f453a-5219-4cec-aeef-b4a6c695ae6f",
|
|
"value": "unlockwsa.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "27c8f930-605a-4628-bdba-d24b32342cd0",
|
|
"value": "sobcase.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "ca7e4b82-9a53-471a-8d85-91561acd3f5d",
|
|
"value": "zhameharden.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "b3642b1e-4d84-41b4-a575-916acd3684e7",
|
|
"value": "mixunderax.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "10f20e10-3693-40f7-b506-ee4f7f854ba5",
|
|
"value": "bugsbunnyy.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "aea4d6bd-88ae-46d9-8f64-0bc413ed5d47",
|
|
"value": "fastbloodhunter.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "3785aea4-93e3-466f-9dbe-044d828ca1a7",
|
|
"value": "serviceboosterr.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "85f79cc4-3c0a-47fd-b263-8641887dec1a",
|
|
"value": "servicewikii.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e3b7d7b7-46b7-435a-9168-6dbff92e43c8",
|
|
"value": "secondlivve.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "a4567206-4c5c-4b96-b6a5-176795231f10",
|
|
"value": "quwasd.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "1ff727c4-11e7-4bbc-88ab-8b6c4bff9b21",
|
|
"value": "luckyhunterrs.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "03f60aa1-68c5-49d7-ae19-3a84fa321dd8",
|
|
"value": "wodemayaa.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "8e84c011-d8a8-4124-a204-6853aa5cecef",
|
|
"value": "hybriqdjs.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "37033e75-44da-41fb-afe3-49de58389af0",
|
|
"value": "gunsdrag.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "928198d8-1734-45fa-8130-cf5255e74992",
|
|
"value": "gungameon.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "300596a6-9da5-4ba2-a2a2-93a6dc1af457",
|
|
"value": "servicemount.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "f014506b-8d19-42a6-8aac-021dd904cae4",
|
|
"value": "servicesupdater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "eb526e18-08b2-4244-a617-161b78e089e4",
|
|
"value": "service-boosterr.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "ad1f7ac9-7cb5-40e0-87e0-8ca68220a68d",
|
|
"value": "serviceupdatter.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "b90c4730-14f1-4eea-83ca-6f38341ffdcc",
|
|
"value": "dotmaingame.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "584567c1-94ce-42f1-b4d7-8cf5bfd36729",
|
|
"value": "backup1service.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "fa180915-6a4a-45fc-a4dc-d690575d6f7a",
|
|
"value": "bakcup-monster.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "df3eb83a-7fff-4a20-997f-6baf976ceff2",
|
|
"value": "bakcup-checker.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "b68d157e-3c1f-4da1-9294-bee11e0b78ee",
|
|
"value": "backup-simple.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "af64685d-11fd-44e2-8559-746c53995329",
|
|
"value": "backup-leader.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5f882c75-4e31-4a1b-95ff-a82aa546130a",
|
|
"value": "backup-helper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "a232b039-1745-4f39-9a12-3e9e459dcc1a",
|
|
"value": "service-checker.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "196c2975-0c5f-4d50-8f2f-d421ed276e84",
|
|
"value": "nasmastrservice.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "883347d3-26ea-4f52-8a3d-bd464ad96aab",
|
|
"value": "service-leader.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "507e319d-17f6-42a1-944b-99f1850fdf7e",
|
|
"value": "nas-simple-helper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "3c960291-6a70-49b7-92fd-5a966754a1b0",
|
|
"value": "nas-leader.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "8afab6d6-3f37-4079-b2b7-b705106fdb72",
|
|
"value": "boost-servicess.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "61f8af91-f90a-4573-9bc4-2d4a4f0cddbf",
|
|
"value": "elephantdrrive.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "fb2220de-bc48-4cad-9d27-ba9e73bed20c",
|
|
"value": "service-hellper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "3691daa0-2c0b-4abd-bb58-2afaa5e261e0",
|
|
"value": "top-backuphelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "83ca6033-26a4-4dbe-b35e-95345fc2dce1",
|
|
"value": "best-nas.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "6c40d67d-96ed-4113-9e1e-d75b416062a2",
|
|
"value": "top-backupservice.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "43352263-1d35-43bb-ad1c-ddeba4be0911",
|
|
"value": "bestservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "9c621491-4bfa-48fc-a707-e8d68908469f",
|
|
"value": "backupnas1.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "258a2a75-e301-44d0-b4e1-f7f1e0336da6",
|
|
"value": "backupmastter.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "73008488-2344-46eb-8ecb-2bc223079e74",
|
|
"value": "best-backup.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "1f4389fd-b526-44d9-b911-804e0b8817aa",
|
|
"value": "viewdrivers.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e55bf1fa-0c77-47b8-b718-ccdc3fad7162",
|
|
"value": "topservicebooster.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "6291ce1a-3870-4355-aeb3-b1f6f74f599b",
|
|
"value": "topservice-masters.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "bf7ee762-ae60-4b9e-bed8-62e1e1e31ba5",
|
|
"value": "topbackupintheworld.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "6e125c36-3d7f-4605-ac04-dd3abe3f9782",
|
|
"value": "topbackup-helper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "3c3590f1-9c18-4cb4-aa07-0eb9c4d42b71",
|
|
"value": "simple-backupbooster.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "fcdfdf08-31df-4968-83ca-89c823696dd5",
|
|
"value": "top3-services.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "7f3d483f-fecb-42dc-ae77-e59e6e9abb1b",
|
|
"value": "backup1services.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "d3a4f901-4950-4011-a4fa-51388723f834",
|
|
"value": "backupmaster-service.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "8682976e-9341-4c3c-84ed-34585bfb3b0f",
|
|
"value": "backupmasterservice.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "f3e7bc46-00e9-4070-b686-ce88523cfcfe",
|
|
"value": "service1updater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "0a4c0b1a-3295-43ce-bbd9-ad233c68b9e8",
|
|
"value": "driverdwl.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "217c56e6-3c54-4cb1-ab40-b15574bd604c",
|
|
"value": "backup1master.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "1994343f-fc2d-4115-a99d-d4abd7f5f0b5",
|
|
"value": "boost-yourservice.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "68b12309-d236-480c-950c-1345360c33f9",
|
|
"value": "checktodrivers.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "006d023f-d05a-4e40-8aed-7f2bb3038c29",
|
|
"value": "backup1helper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "68d6845e-5ee8-4522-abe4-035eb4084eec",
|
|
"value": "driver1updater.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "7afdedf9-c666-40c4-bdc4-ae67c4526230",
|
|
"value": "driver1master.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "b2420766-0c2c-45c5-8a81-8e7d78cea42c",
|
|
"value": "view-backup.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "2f2760b4-2069-4dff-89e3-08c07122d148",
|
|
"value": "top3servicebooster.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "0ceb7e88-7454-423e-9d13-679a83224729",
|
|
"value": "servicereader.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "97d0c8f4-8e2d-4878-a949-5dc559898238",
|
|
"value": "servicehel.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e7a01f7a-615a-4966-b1b9-0b2b7bae9289",
|
|
"value": "driver-boosters.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "605d2af8-303c-4a41-b38a-79ff8949de41",
|
|
"value": "service1update.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "1618785e-93d0-4b85-b104-85c4e7c058c8",
|
|
"value": "service-hel.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "0780e27a-1ad0-4c00-8e25-e23578292c06",
|
|
"value": "driver1downloads.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "c8c7610b-f439-4905-a53b-111492e77303",
|
|
"value": "service1view.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "d45b2e12-d6d3-4b47-9be6-ac9c1fc0a09e",
|
|
"value": "backups1helper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993198",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "19550356-2857-49ce-b2d1-0b564b562f13",
|
|
"value": "idriveview.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993199",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "b8c49aed-4b15-4d83-a6c0-639d067b1cc1",
|
|
"value": "debug-service.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993199",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "91f26696-09a8-40f9-9b18-4ad5f7f00d96",
|
|
"value": "idrivedwn.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993199",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "0a0f2907-800c-467b-84a9-01764b30722b",
|
|
"value": "driverjumper.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993199",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "5d5e9fbd-5229-45d5-8d1b-2d3bf191ee0c",
|
|
"value": "service1boost.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993199",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "25640bd7-cdac-46e7-b5c1-379e7393f510",
|
|
"value": "idriveupdate.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993199",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "65b4548d-2f2b-4be2-b628-fdbeef468a80",
|
|
"value": "idrivehepler.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993199",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "947e0956-be51-4b7e-ac68-9ea3c8a52a60",
|
|
"value": "idrivefinder.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993199",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "048d3562-f446-4358-9444-c161c18119f6",
|
|
"value": "idrivecheck.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993199",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "e6527e58-79a7-4bea-b211-c80b31178e93",
|
|
"value": "idrivedownload.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "d7ec2a79-f5e1-4466-909a-30882663a807",
|
|
"value": "140.82.60.155|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "cd1a1903-a107-43b4-a3b9-0f9bb3cfb1b7",
|
|
"value": "CN=updatemanagir.us"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "99579807-56d6-4757-bbc2-50829755949c",
|
|
"value": "ec16be328c09473d5e5c07310583d85a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "f0d1c5b5-1919-4c89-8998-3bd053cb01a3",
|
|
"value": "a22b04a7a053f845670760d529b6a25777f0c4d9"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "dba8af9a-3b12-4a8d-b003-3c8f49725093",
|
|
"value": "d292eb271818c2eed1ce83f2be9743e0f14f641419b479152d211daccb9bd861"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "4aafc5f0-3f2e-4140-a5a4-6c7b03b603cd",
|
|
"value": "96.30.192.141|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "12d5b17f-5c01-472a-bab3-cf1440422c38",
|
|
"value": "CN=cmdupdatewin.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "082ec694-e91a-46db-9474-f8fadcf95f55",
|
|
"value": "3d4de17df25412bb714fda069f6eb27e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "fd8a587a-724a-442c-8342-8a73f8a828cc",
|
|
"value": "10fcc4132e04f5fb560179e268bbc4920fced952"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "edede5fe-6dae-45f2-8c90-47e5ed8813eb",
|
|
"value": "eb12c9f3c7c21aac3fb7d09e447173c5e2e391c9c21921213bc752fc9a60eb27"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "8488cbc4-9995-4825-8a76-b2baff105f76",
|
|
"value": "45.76.49.78|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "bedf4af8-b6de-4b67-8da8-04fbf5fa2d5b",
|
|
"value": "CN=scrservallinst.info"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "469b1eb0-273c-4cf4-bc10-1b7312b955df",
|
|
"value": "cd6035bd51a44b597c1e181576dd44d9"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "1dee85ab-fd90-4bda-bb20-932fc8905108",
|
|
"value": "8180fd377143b12029f4872b88376e2bf1e7f7f3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ac85d57f-64b8-42c1-be06-1d17b1ebaf72",
|
|
"value": "8cf5f2be05770e8d1d66aee3e727692ee93768a0ec4b7646d2a9360e80b58a3b"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "7ad9c175-7bb1-4629-aea2-92ec634626a6",
|
|
"value": "149.248.58.11|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "8e061138-4a4b-4b19-b9f9-2968b40ccd8f",
|
|
"value": "CN=updatewinlsass.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "47ad5c1f-67fa-4000-b5c2-48ce989f2d9e",
|
|
"value": "8c581979bd11138ffa3a25b895b97cc0"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "c265c7b3-248c-43b5-8444-24733eea83b3",
|
|
"value": "105a96511d2fe0229738a6990f32265c96ddeb2b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "041e4ec9-8837-419f-a56f-1ee0b40a9da4",
|
|
"value": "3aeb23a06002a9e67e6f9aa6f720bb29f6f7c4de2beca0d9c3f8c10c2d8f1572"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "cb4cbae2-66c0-4358-9409-397c05b03d8c",
|
|
"value": "96.30.193.57|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "55652f2f-2cb1-4807-a694-730f102e3655",
|
|
"value": "CN=winsystemupdate.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "9df10636-d08a-4942-b917-7ded00f890c5",
|
|
"value": "e4e732502b9658ea3380847c60b9e0fe"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "ca27f596-979e-4ba4-9232-31d1c6add0e8",
|
|
"value": "6e2fa611740f7e555d72b4b010f3a084d7af22ae"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b628e17b-5e20-4992-b4ae-13ab410f5df1",
|
|
"value": "ccc6c43bf0296f4f58177005e8587870d127b3cf7dfda98c8ec0db874d7645d7"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "0e3d7d59-cf66-44e6-bf76-005ce499bff8",
|
|
"value": "95.179.219.169|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "65b44e79-e726-403d-b4ec-35bc41c1cda5",
|
|
"value": "CN=jomamba.best"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "7f5c5135-a308-45ae-b677-a23a50ca27e5",
|
|
"value": "80b7001e5a6e4bd6ec79515769b91c8b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "4ba974bd-9008-4e97-8037-61b7e4beeb5a",
|
|
"value": "066963090ca0bd82db74edb1d487e8a934434216"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "81b9d089-e682-496c-965b-806fd9e6e918",
|
|
"value": "7572a48a8fedc50f3a8795632b087a9aac252b302347a4ecce948373b4e2ca7a"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "22fd10c0-8037-414f-baf1-388451e7e132",
|
|
"value": "140.82.27.146|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "e34791a9-a71d-4dea-8fa4-8d3af6408777",
|
|
"value": "CN=winsysteminfo.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "8146fd51-c406-4cf2-bc51-c370aaa12189",
|
|
"value": "29e656ba9d5d38a0c17a4f0dd855b37e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "789b7584-d570-4586-b7f1-52ed12c041ff",
|
|
"value": "b553cd33508d21fb825219518f9f80c9e4cc1084"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "90b43e0d-08db-43d2-a424-3ab352c071dc",
|
|
"value": "264fcf6a027152fc8cef1466d7462b2ffee419ce9aaf9ce431ea82b2fb0bc4e9"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "649a816e-ec67-463c-97e4-687b40e0824a",
|
|
"value": "45.32.170.9|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "7f62c673-edc8-4f14-a0b5-e6cbd9097112",
|
|
"value": "CN=livecheckpointsrs.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "ee7b99a3-3a3d-49bc-affa-1fa6098c232e",
|
|
"value": "1de9e9aa8363751c8a71c43255557a97"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "5449fe33-e928-4429-ba18-0be3c63be58b",
|
|
"value": "7c1939f24a7b37dc60418366ea892e342cd399ba"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d9f16707-beca-43dc-bbac-0f009abb779e",
|
|
"value": "1e314dd0d5e09afced92b7fca8df8fb6d9509526402a3f385998525760ee6402"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "cbf1a0ef-1202-440f-86fc-4dccf75642c5",
|
|
"value": "207.148.8.61|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "58c4fb1e-c752-4062-9a09-2a25010955a6",
|
|
"value": "CN=ciscocheckapi.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "1c555887-1bb5-45ff-bafc-7982e3acea15",
|
|
"value": "97ca76ee9f02cfda2e8e9729f69bc208"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "ea880e3a-e4ea-4f52-8331-f4d587c0fd5e",
|
|
"value": "5d444ff5147f4efb210c46c776b583048b8a659d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993249",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "515e544c-0029-4d4b-a232-0aa7e0fecf00",
|
|
"value": "f2a2bcd31317e23f8c30219b373bdd1fc1bcb2d33afe0f36aa716dad0ecd00e1"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "79fffecc-6028-4da7-8c0a-bb88d7809361",
|
|
"value": "209.222.108.106|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "62ca0e36-6656-42b1-a526-0210484870a3",
|
|
"value": "CN=timesshifts.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "f3315103-00e7-4404-8c92-c398a40180a8",
|
|
"value": "2bb464585f42180bddccb50c4a4208a5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "adc635ec-7091-408b-940b-6b74df35fa6e",
|
|
"value": "e0cb4fa500df56dd0845bbcb54d2714e71574c30"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "4ad901c6-1b47-4354-b70c-ea591c91cc2d",
|
|
"value": "2c264d7e234a80db5330f8d84563accc4731e635704b938ad12a2ab264d0ac7d"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "2e174bf5-5b31-494c-af38-a976210bd4fd",
|
|
"value": "31.7.59.141|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "34494ce5-0042-49aa-9240-efd9dcc94b99",
|
|
"value": "CN=updatewinsoftr.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "4a15ae74-9edf-45bb-8924-acd35e5eb1d7",
|
|
"value": "07f9f766163c344b0522e4e917035fe1"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "28ee7af6-d076-4f97-9baf-87f026fbd6e9",
|
|
"value": "b45bafb8f93613d50df578337422a4822efa26aa"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "e02a38a3-cb97-4d1d-8a6d-7fd0f81db706",
|
|
"value": "b4d23c249febb6fe1c2abb74694f523d5a17ae6d8b2881e45183e4bf8d16e62b"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "4279d92f-3e32-4102-a2f7-f5a8c173d375",
|
|
"value": "79.124.60.117|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "4f4cbbea-6b69-4c18-b000-8670b336c567",
|
|
"value": "9722acc9740d831317dd8c1f20d8cfbe"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "79bb428e-d085-4fe5-975b-6dafb7890107",
|
|
"value": "b960b263c727ad26d4113938ffad1cad8b2c5ed0"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "5ce85cc8-3396-4349-b710-c051451dbed4",
|
|
"value": "f1adc5abaf6fa1c92cc3904fe45577322b156bdf8ae31d819fdebc63efd2d811"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "b97dda49-3923-4fbe-b043-779a18f0d3cd",
|
|
"value": "66.42.86.61|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "96eb9dc6-f643-4353-bb4c-c5bfda428407",
|
|
"value": "CN=lsassupdate.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "0ccc53f0-60a0-4152-a4bd-74659550ba40",
|
|
"value": "3c9b3f1e12473a0fd28dc37071168870"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "7246b713-4a08-4e50-8b62-e670a75254c5",
|
|
"value": "1cff540c8d292ebcae1233d25c6e07244780a937"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "da75a00f-4756-4dd8-9062-82d8801bcff1",
|
|
"value": "110a573cbf00c84cc12403c729810d583f8bba9ac05493a48c415335cb88cbbc"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "8e1493b8-74c8-4246-8d6c-14c86d96810f",
|
|
"value": "45.76.20.140|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "0e5a06d2-3477-447c-a677-4c9e21a844e0",
|
|
"value": "CN=cylenceprotect.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "dd4ab430-9e3c-49e2-9d61-30f70e4c37e9",
|
|
"value": "da6ce63f4a52244c3dced32f7164038a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "52bfe7f0-a2dd-4616-8e54-41a0d958500e",
|
|
"value": "38c3f9bb4108fb1850b350fce35893d33600564a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d4564a42-a813-427b-ac42-4389d12b67ba",
|
|
"value": "b1dfa21c616a858349528fc62907b8b1003b511aa767f7d9ca52406e2f764d2c"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "d3b8b273-7c51-4921-9174-c555b3809d62",
|
|
"value": "45.76.20.140|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "c53342df-523f-4d31-9289-94d234353705",
|
|
"value": "149.248.5.240|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "b7693181-befb-44e4-8f5a-9f7612db4440",
|
|
"value": "CN=sophosdefence.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "ddbdde6f-8ef7-48b2-8dac-973d2bbba41c",
|
|
"value": "e9b4b649c97cdd895d6a0c56015f2e68"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "607e1909-5319-457a-b4cc-0cf829720c43",
|
|
"value": "41a22c194b0d130e66df80a98af9c38bd4df1dbf"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b6bc51c6-6907-488a-a7bf-e93f478f5353",
|
|
"value": "93c0ed964432b30b221da415e2ccfcfe5148b61cc7f337dbb8ff476ed4a97df7"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "0d9d7cf9-8a29-4fa6-a4a7-d7c90904c0cb",
|
|
"value": "144.202.12.197|80"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "7f0097db-e6a0-414b-9de0-f18dfd21c23b",
|
|
"value": "CN=windefenceinfo.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "9837d389-179c-4c46-a16a-7af158091b4c",
|
|
"value": "c6c63024b18f0c5828bd38d285e6aa58"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "510d4112-9f9f-4932-b10a-02f648ab5f15",
|
|
"value": "47849e64b1564dc4070ddccbf0932b5389c3e896"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "56a99f2d-d9c3-4748-93bf-b33a87b811b7",
|
|
"value": "40b3e19429e6554b4a205d74d4360096e1b80b60826a5753f4bb33bb6e093e57"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "15cd97ac-d0ec-4641-81bd-f5b8be067884",
|
|
"value": "149.248.5.240|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "91f25e5a-a78f-4603-880b-d06ae222123d",
|
|
"value": "149.28.246.25|80"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "bcc3af6b-5b42-41d5-aa76-a37bd1658653",
|
|
"value": "CN=lsasswininfo.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "80f893d0-c29d-4162-aa79-a114d080a028",
|
|
"value": "f9af8b7ddd4875224c7ce8aae8c1b9dd"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "bfcb857a-7824-4b1a-bc71-1483cbed3b16",
|
|
"value": "99cb2bce40c34f414dfe4dca266a4b36504e7240"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "a7a70f78-2184-4389-91f5-3b4a01e01a03",
|
|
"value": "cdae5bf21f7506d5d37588b77cbd75e9a2eb6b3767feffe10e79c6c8c5c21460"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "840b7f84-f925-4481-958f-d8956a1ab3e5",
|
|
"value": "144.202.12.197|443"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "8ce8748a-f05a-4d98-9c50-3387a80e76d6",
|
|
"value": "149.28.246.25|443"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "38d8ade5-9ada-4d85-827b-7ca6fc4ab893",
|
|
"value": "45.77.119.212|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "52ff35be-fe3d-43c8-abcd-81bef8edaeb7",
|
|
"value": "CN=taskshedulewin.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "7547d5c8-ebd9-42ef-b385-06a63f99b3f5",
|
|
"value": "e1dc7cecd3cb225b131bdb71df4b3079"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e76ff0c0-2d79-40bd-9032-74794b26ce92",
|
|
"value": "9fb79662e49c6584da6524e65b393a6e90c5bdc2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d6e1f8e3-d7d0-4182-b622-426944aba38e",
|
|
"value": "c655bc84859da3af855fa69104bc970bf30c617843419cc01bcfdc2ac777eb8f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "91bfab1c-644b-4841-9d3e-f15229b2ad34",
|
|
"value": "45.77.119.212|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "42a54e77-2c32-4eac-87af-6bd7821517af",
|
|
"value": "149.28.122.130|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "a09bf7cc-1866-4983-a76c-8b456378ebf0",
|
|
"value": "CN=renovatesystem.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "05d3f6b8-c8a0-49f7-af78-d7a09ee8b31f",
|
|
"value": "734c26d93201cf0c918135915fdf96af"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "db4f0e67-6ecc-4e97-b200-d7d369ae101e",
|
|
"value": "8c46fde811fdae417aaabd6686f2da5e51532ba8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d4cd9b1f-dd33-482e-96b6-8715f6852d7c",
|
|
"value": "9878b760618d03f4899fe35bd68aafea65c9e38e6af7116cc85dab23058d6563"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "affa1d86-7bc5-44b1-a945-2c8a4c787f1c",
|
|
"value": "45.32.170.9|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "42571d8e-b1ae-424f-a89e-33c10c6ad9e3",
|
|
"value": "149.248.58.11|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "e64f7e4c-c178-4f6a-8769-30a05d60ea10",
|
|
"value": "149.28.122.130|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "5b67f6ab-659e-46b7-8ae8-5c4eb1fafaaa",
|
|
"value": "207.148.8.61|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "85a551e9-4226-4380-a1af-b80d44d4139f",
|
|
"value": "81.17.25.210|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "b038ebf6-b92e-4a93-b426-bfd1eea51867",
|
|
"value": "CN=update-wind.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "891c5c3e-957d-400b-8014-9bfd800de769",
|
|
"value": "877bf6c685b68e6ddf23a4db3789fcaa"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "52921701-9e1d-4598-a5bd-0e1564fe67fb",
|
|
"value": "d01d336421a6faaafb6a7c475501fef2b3daab73"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "fdc3a2a6-5d57-4c70-948a-e2553643c83e",
|
|
"value": "76d128e9d2f4cbbca53f1c12d99d34861e2d0093dfc4bf266eb4bda1d18c9b13"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "2a62e775-8281-486b-b09c-9606c8a5ae12",
|
|
"value": "31.7.59.141|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "37669819-2b0a-4d87-bc4d-5c4bc28d2927",
|
|
"value": "155.138.214.247|80"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "f1b883ec-0426-41b0-99c3-647ab0a58222",
|
|
"value": "CN=cleardefencewin.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "8aac1a4d-84f0-4225-95b1-a73f9bbf1119",
|
|
"value": "61df4864dc2970de6dcee65827cc9a54"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e6b48a3e-16d9-4941-bd68-b4baf493eea5",
|
|
"value": "609b7f799292cf1f4558340d7968b1c5d4a79888"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b1688fd4-eb08-46ba-a411-0f8924bae0df",
|
|
"value": "9476e968b85e956f238ea88e88959ac9b806e9d6347db687f27844cc56a154a6"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993250",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "8a55a2aa-adba-4bd8-baca-5c2ffd54b1fa",
|
|
"value": "155.138.214.247|443"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "ed42d975-3d9c-48b7-9ec5-95712661bca6",
|
|
"value": "45.76.231.195|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "1d05b2b3-7366-4cbe-9cfc-01f972bd2a90",
|
|
"value": "CN=checkwinupdate.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c1d4452e-f225-4695-9793-f86af9544c60",
|
|
"value": "d8e5dddeec1a9b366759c7ef624d3b8c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e24520dc-60c5-440d-9be1-136e13f93544",
|
|
"value": "99a9ba078055c65e35e74481b40373912da752a1"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "fcec772a-2c58-4442-9b87-b44a8e49db7d",
|
|
"value": "2db47909e28b0fdfccbf276f5d0e462f3a5edf8f55340f4e76d62612b67691b5"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "870c086f-5868-4fde-9828-a5f356a810b1",
|
|
"value": "45.76.231.195|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "ece89a73-da41-43f1-83f9-ebe9571ddeb0",
|
|
"value": "46.19.142.154|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "84593f8a-0699-42ae-93ba-dcb9bf1f6fdd",
|
|
"value": "CN=havesetup.net"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "ae517785-3a6a-4af5-9e5e-fb5b03eeab11",
|
|
"value": "cd354c309f3229aff59751e329d8243a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "d592fd88-37e7-4450-b6ec-b72938a9077e",
|
|
"value": "b0381f14516ec5099ac50274355360f6d068bf8f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d7117419-1f5b-47d7-bd46-6fe9340fcb54",
|
|
"value": "97917f3e47bbfc83cf0c3bf91575cf03fdcf8f7e8a09fdcf99392ab1353a1afb"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "fcfcdbf2-acb4-4062-95e5-fd40f07fc51e",
|
|
"value": "95.179.219.169|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "23cd5963-af60-4cd3-bbc8-d2ce93256fb9",
|
|
"value": "140.82.60.155|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "523463da-c26c-4243-914e-bd35091e9f42",
|
|
"value": "209.222.108.106|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "1087592f-a6e2-4485-8fd5-852a10a0ae9f",
|
|
"value": "66.42.118.123|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "334ed1dc-51b6-433d-8442-6f7e7bb369a7",
|
|
"value": "CN=conhostservice.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "b6cb1577-4ddf-45c2-b5a7-253470db1e64",
|
|
"value": "6c21d3c5f6e8601e92ae167a7cff721c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "de9ad2b4-44b6-4cee-8b19-6988a87f3cfc",
|
|
"value": "7dbc84187ee9fc33c72c8feb1373d9811a5c6714"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "6624c957-3a4d-41d0-9321-13044d288e21",
|
|
"value": "4e63e1695eed77132662e83ebbd108db5b2eabb4f7e1362bd29468fdb2f7611c"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "33f66d93-7a56-433b-9a9f-19bd7300d6e3",
|
|
"value": "80.240.18.106|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "017b27be-78d2-4d35-88cc-d1e5b70ecf96",
|
|
"value": "CN=microsoftupdateswin.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "51fb7a88-e1f9-4f64-b722-6cf37c8cf3a7",
|
|
"value": "27cae092ad6fca89cd1b05ef1bb73e62"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "7698d8b2-1816-4459-a86d-fc720ac414c4",
|
|
"value": "4008249a1d6486bfa92e8c33b61d9598cf9d5881"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "e5b633b7-32f3-4d80-af1f-bd67ea176cb6",
|
|
"value": "2616a8bf6de6a32070b3221f1387ddf56a57bb7b4ebefd54bc1e1741c9fbf018"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "ef30ca0f-b2b9-4563-ac35-77ba97bf06f2",
|
|
"value": "95.179.215.228|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "c7e495a5-f056-4069-bd3e-ccb679523ac9",
|
|
"value": "CN=iexploreservice.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "9aaee704-524d-463c-a060-1bf72d900391",
|
|
"value": "26010bebe046b3a33bacd805c2617610"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "ab266991-0faa-4e2f-b232-7f7af48c21cc",
|
|
"value": "eec4f054456000b57ff799dd48b77c4519ddccff"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "24af6b4a-682c-4558-b4e3-29470f3e69e4",
|
|
"value": "0a0cd4e9513989477dfb3c36938ccba04300d22db5f1f77ff08f65bbe7863a8d"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "35d7d42d-1af5-4c97-a3a8-e1ada1875819",
|
|
"value": "155.138.216.133|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "f3f78ff2-424b-41ff-b367-76071414d1fb",
|
|
"value": "CN=defenswin.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "80c3b8d2-f836-47b7-823f-ffd5b64447f8",
|
|
"value": "e5005ae0771fcc165772a154b7937e89"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "d853deec-d2fa-4f54-b588-63a247a36ba9",
|
|
"value": "f5ab640e738b6f352b2654cd41f7b4e6761156c5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "e79030e4-9c74-493b-8492-1b820ea76bd6",
|
|
"value": "8d7b207f3fe350c41e5b90b0e8e8a652906c80e3b2437dad2dc1e310cd4a1a42"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "c7276df2-361b-4b46-9574-1d22a7b1b527",
|
|
"value": "45.32.130.5|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "eb8bb344-3d11-402c-ba34-23ebd1f588c8",
|
|
"value": "CN=avrenew.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "ffff96cf-9a22-4b3d-8d27-d0b4272ab8b6",
|
|
"value": "f32ee1bb35102e5d98af81946726ec1b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "b35a2ea5-e6c1-4d9a-802d-6843440de102",
|
|
"value": "890c66fc0caa1fe398c9a2aa07aaf68192a1c5f5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "24ff8890-7497-4d4f-98b6-58d78e71870e",
|
|
"value": "e83809857c10be61ad695e517681c70c2f5d998fb848f6b61edefa173dbbda85"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "a3a8e4d4-fbe3-49c5-8948-64c013450b7b",
|
|
"value": "45.76.167.35|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "f2afd0f9-0a32-4279-ac14-8a3948b96cc3",
|
|
"value": "CN=freeallsafe.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "6aab0f9e-4e7a-4b6a-8220-e6cb1cdf8894",
|
|
"value": "85f743a071a1d0b74d8e8322fecf832b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "35857348-45e2-4ffb-8282-e89cbaca3532",
|
|
"value": "cb730c6ab5514eaabbcf21d5b0879e4e073122ec"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "20b23af0-b997-462a-9689-6c2177e5ca99",
|
|
"value": "c3885ce675c2557545b280a0fb6a74ce659f1c55411182026509475d04189722"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "50022956-441b-4e5d-bee0-25a452fe8454",
|
|
"value": "45.63.95.187|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "a3eaf3d7-13c9-4c75-ba4a-d105c9b2c0bc",
|
|
"value": "CN=easytus.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "4eb1f228-168f-47a4-819d-c6d5cc0f1c25",
|
|
"value": "17de38c58e04242ee56a9f3a94e6fd53"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "4216d33a-6eaa-44cc-835b-68531461e4e9",
|
|
"value": "467e5b8ef36321eaed59253dc46ff058ccabe4dd"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "f9c6e4d9-d24d-45b0-a942-317429816ad1",
|
|
"value": "79e5ad973029586c33a59362ab3d9cf2aded0712a44dc20b295bee64f380eaa7"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "bdeb5b71-4413-4bf6-9f50-c952cd06bb15",
|
|
"value": "45.77.89.31|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "9ddecf54-7bbb-4c2b-8323-567e58f6dc96",
|
|
"value": "CN=besttus.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "32e56fca-50c5-407d-a417-8e72d944bea5",
|
|
"value": "2bda8217bdb05642c995401af3b5c1f3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e08afaad-8dfa-4523-aacb-e21cd91c6b17",
|
|
"value": "6517d2589340d932ffa3d12de873a1297286a087"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "cff4a452-cb57-41eb-8618-7de534a7064f",
|
|
"value": "076a258d15761e3aabb33812de719b829ce6bb0f50c8faa92c8c69616ac94c89"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993251",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "8739266e-d1fd-454d-803b-e028416a05d3",
|
|
"value": "95.179.147.215|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "dea0d7ab-d634-4177-80e8-d09126b287f8",
|
|
"value": "CN=windefens.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "00804b68-a984-466c-b97c-17926f6b2ed4",
|
|
"value": "57725c8db6b98a3361e0d905a697f9f8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "2bff29dc-5ca8-46bb-9f2d-ddb9e111acaf",
|
|
"value": "69e0992fbc7f770d925978563b8651d3935ec15e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b86ce5c9-dc12-48f1-afc6-ff45b5eb6978",
|
|
"value": "6b0b890f300f638408d4fb8b327f59ab70e395eb71254f75e93f4c0497d0a4d8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "47c99504-e196-4514-9d45-542ec9b77bee",
|
|
"value": "c07774a256fc19036f5c8c60ba418cbf"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "9745e202-bb4d-4a23-9560-794e4d30d7d8",
|
|
"value": "33abb3e6aebf999d9e3ed6b0fee219adbe3e4b4e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "7322295b-4c8a-4fe1-904a-decd073e513f",
|
|
"value": "b3a85e75c513b6d1a4fdb48cb50a210cb2016ba2e76b701b32c7ade5e1d17c1f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "4e7ef519-f153-45a6-9c24-64efe085162f",
|
|
"value": "104.238.190.126|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "b54942c3-939b-49ac-8968-4a771175e041",
|
|
"value": "CN=aaatus.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "77de66e7-a990-4413-9207-3f6e40dc537c",
|
|
"value": "4039af00ce7a5287a3e564918edb77cf"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "5959b75b-37d1-4f13-a8f4-e0ce3c84cf01",
|
|
"value": "b09b8ee999de518d22143210ca33297512b1c4df"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "07a99311-b5f4-40bf-b37f-689517074cec",
|
|
"value": "07843c5cb2660d79ed39314eac202c2d646c94b9223020e7b124d31a36006a05"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "db6d80a4-1b90-4a46-bbfa-23a39ba1fc70",
|
|
"value": "144.202.83.4|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "cc667ed8-8cea-40a3-8e52-d3c12717b182",
|
|
"value": "CN=greattus.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "f4f81a7a-b1dd-4031-bfe9-44872db4e2df",
|
|
"value": "7f0fa9a608090634b42f5f17b8cecff0"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "bd430d31-7344-4d84-8495-74633357e1f9",
|
|
"value": "d8475d0d71b35560536189979cb60083c69c5226"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "e9efd60d-eb9a-420e-a4ec-e4388868b1d1",
|
|
"value": "b07c7e9a9a5809aaa4112ab3b5c05d05d921507dd668601d6068d84cd4f8ae14"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "59b38e6a-6374-4b4b-b52b-cb20b07c6eff",
|
|
"value": "104.156.245.0|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "644e4230-5f4a-4eaa-8a2c-a3da19443168",
|
|
"value": "CN=comssite.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "ffb2edd2-528f-4fbb-8bec-01a07d8de347",
|
|
"value": "f5bb98fafe428be6a8765e98683ab115"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "d638b367-9d7f-4daa-b0ba-eb0c54f715b2",
|
|
"value": "56004e82dc46cef5b3a81fc5eb5024b598d5e960"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "4c19dc05-8157-460d-8262-c54084eefe32",
|
|
"value": "bb3a0f596d115a74c021662fceeb0712518eba8198f0db50708582325f356d36"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "42000986-a42e-41f6-8fa9-fb2743e94126",
|
|
"value": "45.32.30.162|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "10b98549-99c7-4d34-9fc4-02317bed4488",
|
|
"value": "CN=bigtus.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "4ed1a635-f92e-4ae5-b7ed-d7871487a840",
|
|
"value": "698fc23ae111381183d0b92fe343b28b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "9e9d3341-356f-4651-8fd6-1002171c1d56",
|
|
"value": "0c37d764a4fd7ea1deac606ba43c64543bcacdb8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "80efd8ec-2470-4c1c-91d7-5c795848425a",
|
|
"value": "9f46b2ef7e2aed87d59536d2c228b19b04e319110b505c74490d430a367fa63d"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "fb4c1789-b46c-49f1-bb19-e3789ae84db7",
|
|
"value": "108.61.242.184|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "bc7ce885-0275-42b4-92b4-83253d95e337",
|
|
"value": "CN=livetus.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "53a0c056-215b-4949-a281-08c5481e5b8c",
|
|
"value": "8bedba70f882c45f968c2d99b00a708a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "5ff0d1c2-9552-4163-825b-03223a8e8021",
|
|
"value": "7316167007e6569003792dfc1d2c7a71c3948964"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "8ea8a639-183e-41cf-8411-5af5e88eac45",
|
|
"value": "6709891071e905d80f6ef1b60e313e7a78f7c13c4766c9eaf7440ba7ab1e4146"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "dc33750e-b31b-4184-8dbf-25ef4033a98e",
|
|
"value": "207.148.15.31|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "62781b34-d0f1-415c-86d9-d5bfc8a15cae",
|
|
"value": "CN=findtus.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "a665fdea-ed12-4baf-bd05-648103ef840c",
|
|
"value": "15f07ca2f533f0954bbbc8d4c64f3262"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "be73285b-0bdd-47c1-b9e3-c1b9eea322ec",
|
|
"value": "909fdc653db2a9c1ce7ea9205fad977da04ef87b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "7b33407d-3ff2-45cb-bfb3-397e9b050e08",
|
|
"value": "723f307f7588a95a1825ba8e9d2c73bacb32cfe817b92b6ee95cc2f1bc10c52f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "cf841ac4-c104-44e5-8183-6690286ee8bf",
|
|
"value": "149.28.15.247|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "81a28832-2709-458a-b39f-9f3c07f98c8d",
|
|
"value": "CN=firsttus.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "8b759d10-a1cb-4f54-a2fd-c2f3f1b6cc5a",
|
|
"value": "88e8551f4364fc647dbf00796536a4c7"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "7134def7-6a58-4b58-aaa0-74a7eb5718a7",
|
|
"value": "b74c4ae719caaa86ad6a82257f2e5763056130a0"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "2800c260-fded-4900-a15c-5331a02c5306",
|
|
"value": "f4e742724b0ef84c6ca0222140369fcb2e3c3c1c937d931ea2084fcda9976d5c"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "8df2c887-50e2-4884-82f4-3a2dda412219",
|
|
"value": "155.138.136.182|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "4fce7aca-c250-4042-8c39-c3307a979c85",
|
|
"value": "CN=worldtus.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "eae46961-9e2a-4543-a725-46d7249a3d46",
|
|
"value": "b31f38b2ccbbebf4018fe5665173a409"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "ccf8449b-8faf-4ec1-8164-7cc6d2202b87",
|
|
"value": "94e778d9dec76c8bf6202729b8d58a35ae7ab200"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "35f72a43-6add-4881-b9b7-6da3e9fc3637",
|
|
"value": "1afa19b14c4ddb369da37f62eae288e862aed2c83d7fa1972bb87fd04b260262"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "21e044b5-a67b-4fab-abfc-5261a827cbef",
|
|
"value": "45.77.58.172|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "18ab8719-be52-4acc-8c3f-f03580ed6fc0",
|
|
"value": "CN=freeoldsafe.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "846a0c04-b4e4-46c8-9030-ba44c069557e",
|
|
"value": "a46e77b92e1cdfec82239ff54f2c1115"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "67330ae6-5320-4394-9c0d-3dc392912bf6",
|
|
"value": "8be806aa652622cf863504db24f08951be702e83"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "07e0f333-3853-4a05-917c-4d655e3c52b6",
|
|
"value": "24674de1ee2fd5321cf807331b7ab22d5cec3829c0e1725864a5270bfd58062f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "540f8845-ff29-44ec-8f39-bb64230a29f3",
|
|
"value": "108.61.72.29|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "bfb24beb-d96b-46f2-bd41-ec3d9c38a4df",
|
|
"value": "CN=myserviceconnect.net"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "580acf6d-97d7-4c85-8019-9d98b711750e",
|
|
"value": "9f551008f6dcaf8e6fe363caa11a1aed"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "dca816ef-48c4-40db-9cc7-0a27d020e67c",
|
|
"value": "f6dbc5b6efebb9393b66defb71ce54cde1ab4df7"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "f5f440b1-f38d-45a5-8dd9-c6ec0cc390d8",
|
|
"value": "68965e193004f8171252a6987a9a79348ad2b50772bc0ded3a47dac834488e57"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "61c6eb7a-5a09-44ff-8ed6-138ea8b34450",
|
|
"value": "216.155.157.249|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "41dd3a54-5fdf-45eb-8966-f644e7919dbb",
|
|
"value": "CN=myserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "01764c4d-ff52-442f-b61a-6d73261af626",
|
|
"value": "4c6a2c06f1e1d15d6be8c81172d1c50c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "66a5ad42-e341-4746-8da8-49654123134c",
|
|
"value": "83a360c0b4d2b7301e86666a62fcf280b675516a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "a3538e62-9122-4077-a7ff-eb958edce93c",
|
|
"value": "86e634473a5b7a91161bf11921ec20720452a54bde0c1d81289e392473ad6243"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "d27fa217-5779-4c1c-96f2-5a28cea4ecbd",
|
|
"value": "45.77.98.157|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "6ec68618-a003-4c89-9bb4-cfced5c5d429",
|
|
"value": "CN=topservicesbooster.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "16d4dbf4-7cd2-4f3d-a86a-587b48f3096b",
|
|
"value": "ba4b34962390893852e5cc7fa7c75ba2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "ad210c39-268c-440c-96fb-dd8782a2347a",
|
|
"value": "7a00b9eb03646cbc879f5a3fa3be440ce21e18a5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "bb2d5c3c-24a9-4906-9714-049fb6669706",
|
|
"value": "a7373c28c6c580374d9a7fcb7c10b9e46ec34c5f0d7f00cf94991c2bde63ae68"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "718118e5-4294-4758-a405-9a23e4d3eaa7",
|
|
"value": "104.156.250.132|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "5f519f7b-1df3-4dd9-8ec8-6ca147f29b73",
|
|
"value": "CN=myservicebooster.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "a0c0ace9-6e06-4779-97a8-276d1cc272aa",
|
|
"value": "89be5670d19608b2c8e261f6301620e1"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "1b42e574-a18a-4af7-89d3-14b1b8bbea3f",
|
|
"value": "d65f5b78e1f4fb0dc7c9d18c63518985a228a07c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "3e172674-72d0-4626-a222-436a8dc1a025",
|
|
"value": "f94d94a3758a7d067031253da6769d3cd482d871ce5df372688aba974c049e27"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "f164e840-f539-441d-8feb-8d4e22acf9f2",
|
|
"value": "149.28.50.31|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "e82a9826-8191-4159-8b3a-a8486dbd1724",
|
|
"value": "CN=topsecurityservice.net"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993252",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "fa82a8cc-c952-4f31-ab2a-20e1a490f100",
|
|
"value": "77e2878842ab26beaa3ff24a5b64f09b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57b71b6a-3026-455b-b601-b877a779af76",
|
|
"value": "cd733eacf19997bfd1b410cba2df471692836e40"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "fdd12221-bacc-4364-88a9-8811a507495b",
|
|
"value": "464d2a04fc080c7a42236deb9ee3904fde31fbd91578a606411d0df54c0dd5d5"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "ee380cca-82ba-476c-884a-9fe8da5e76ef",
|
|
"value": "149.28.55.197|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ce54cacd-d226-4dbf-b72b-50c5158f9496",
|
|
"value": "CN=myyserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "dfd6a1eb-b683-4020-9d32-87555b035081",
|
|
"value": "0dd8fde668ff8a301390eef1ad2f9b83"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "5a94ec98-ed20-44f7-8f21-a477849124c7",
|
|
"value": "4de1b99c45cfa1277665e868c7e5fff5d3e1985d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "6f68c0ed-af39-4209-ac62-db46363e227e",
|
|
"value": "8146b93c184a5ea52bf62fd646b3a2790416a399413eb09bc39e34e7fb6e9e59"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "f6b3ef3e-8977-49a4-85e8-46e0bc550c28",
|
|
"value": "207.246.67.70|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "bf8b68df-e6f5-4c5b-9028-6322ccf0defb",
|
|
"value": "CN=servicesecurity.org"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "0175249b-809e-4bfc-9ceb-427e5d25c7e7",
|
|
"value": "c88098f9a92d7256425f782440971497"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "8aad1757-ac36-4d7e-83a8-a3af6de23f3a",
|
|
"value": "c3b9cf865498ab88d627704ea6a63ae5fea0be1f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "bda0a089-ab15-4ef5-a2d6-2279897308e1",
|
|
"value": "703e77b15e6f9d35775d0a03bbe1df67b2b705c501d1fe61b0e09dfc9591e903"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "04e520db-1cb6-43e8-8b1b-4831ee1f42b1",
|
|
"value": "63.209.33.131|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "6020be27-94d6-432a-8e14-71f5a87c9bb3",
|
|
"value": "CN=serviceupdates.net"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5ae9d6ae-45d5-4eb3-9e52-4a5c8ed0e7d3",
|
|
"value": "16e86a9be2bdf0ddc896bc48fcdbb632"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "b1463b89-2ff7-49cb-9694-23d103788607",
|
|
"value": "2e63006994f34f38af65a5ae17f4b0bc36f3923b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "dbff6aef-6fdb-4215-869c-97db79c900f2",
|
|
"value": "18cdda74b6284302b1e8016a6f7be0be98714abb99a9838dfd24e6b5c325705e"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "1c6c49d5-1063-42ad-a39a-e748feb0d386",
|
|
"value": "45.77.206.105|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "8482caa9-8900-447b-98f5-8918acbdc631",
|
|
"value": "CN=myservicebooster.net"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "56f5e5d6-1adb-46d8-9bfc-4c38cff04453",
|
|
"value": "6e09bb541b29be7b89427f9227c30a32"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "3c42f2b3-eea3-46e8-bd13-a5b9d11882de",
|
|
"value": "0b7fff8e99688f969695d8082e2fffa3d4baeb5d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "45ed8c29-07a3-4f59-912e-018319f179bd",
|
|
"value": "8c9e4f3cbb903924b0957051981eae7b4126599570a7c450e40a13dc36a757b3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "dba98b7c-139d-4289-8040-083b6c7e4c36",
|
|
"value": "140.82.5.67|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "dd4a191e-9a1a-487b-87f3-6d3dd298649c",
|
|
"value": "CN=servicesbooster.org"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "382433fa-6455-4633-b45b-fb0ed854bd48",
|
|
"value": "42d2d09d08f60782dc4cded98d7984ed"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "299f8416-84df-4f29-ace7-8a5837d5fade",
|
|
"value": "fb55e32e6e0a4ad94849640271db2077bd87b33c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "3b3b6aed-e0ec-4335-8599-59072d63275b",
|
|
"value": "e7a35463bdcfdfa35b93f22f1932489c2545fc7d59437b786160d4fbb770385b"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "58dba38a-9775-4847-8974-9909966b339a",
|
|
"value": "108.61.209.123|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "5077cc53-61bd-4dd4-af0f-0b0b5c40105a",
|
|
"value": "CN=brainschampions.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "30361603-692f-480c-9d88-03d6d5d1533b",
|
|
"value": "241ab042cdcb29df0a5c4f853f23dd31"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "c18bc053-de01-4b51-a754-b022c6781c27",
|
|
"value": "c9a5b93d7ed3b1ff9e22ec2d23950799d6dc32a5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "cea3391b-3611-4b06-8aba-f9bb1a3a40e6",
|
|
"value": "caf6468f1b2c19d263df862572abf9c2802a70434668f1dcc355b7b8b5bdb8a0"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "9b007635-7b73-4bc5-8dc5-1813c5208d5b",
|
|
"value": "104.156.227.250|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "2bd12c05-7c3d-4ffc-b505-42b96fde5d3a",
|
|
"value": "CN=servicesbooster.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "583420e8-db42-47bb-a943-8d80271b2d3d",
|
|
"value": "f45f9296ff2a6489a4f39cd79c7f5169"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "c0e417bf-1d0b-4a27-b6cc-177addb75740",
|
|
"value": "0f8e67da6bd21a18fd3284bdc9c9a6c2e24a34ad"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "833854bc-84f9-4c04-a4c5-b815cd7f33de",
|
|
"value": "3b2dfe2cdbd8f6c21049ec7a0e29b0293002990448a4517c52fc4a24dd21c7aa"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "56ccbc57-8715-441b-9c3a-ad6d10a24c6a",
|
|
"value": "140.82.10.222|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "0a1ada3e-6f1f-431d-aeb4-b5206865bbd5",
|
|
"value": "CN=topservicesecurity.net"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c2282a6a-7df5-48b1-935e-867f1a28d949",
|
|
"value": "b9375e7df4ee0f83d7abb179039dc2c5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "af195795-8cea-4e64-a47a-0b7e228cd43f",
|
|
"value": "9d3bef858d1c7634c39e01baecaf89433c5885ca"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "f07fa32a-b72f-4056-b2ef-11fe51409455",
|
|
"value": "afa1c237384c5bfb837ad0954cff51bd06ee319b2b5de2a79dc33ace16167e0a"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "2f3569b7-165e-4544-b9ff-635bba45284a",
|
|
"value": "149.28.35.35|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "a5a2c5d4-9c74-4fdc-bee0-1f699f027a9c",
|
|
"value": "CN=topservicesecurity.org"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "475e17a7-7484-4eaa-96a4-204d969e7aa7",
|
|
"value": "82bd8a2b743c7cc3f3820e386368951d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "6f300fb1-fec6-482f-bfdb-740843e2c4c2",
|
|
"value": "ce75596aa0267c7a7e080259c1c1acfeb255404d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b78f0356-fc25-4ffb-ab7a-cab3d8f62c33",
|
|
"value": "307b05a89a820a13293b4d397e58d50f4fe66253addf7bc10ce5a1b49ae89d90"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "6f594e8c-4b35-468f-9ebb-d2883086c8f6",
|
|
"value": "207.148.21.17|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "7418e75f-fcc0-4bab-9ca3-818234162e27",
|
|
"value": "CN=topserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "d66b9925-c0a0-4a7b-b1f8-12405aba0009",
|
|
"value": "ece184f8a1309b781f912d4f4d65738e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e0b35643-62c0-40b5-927c-e7606e1ea028",
|
|
"value": "c9a0613f52059ae9eb22b8e39f19b9cc97740f06"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d5ef0d71-4c73-4c21-a228-068f1abce7be",
|
|
"value": "171130c71df2bd9f4c6a9218ff38ed187f934b8736a5edbb2d288b5548f88537"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "ae1de120-0cdd-494d-ac37-34974024ff85",
|
|
"value": "45.77.153.72|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "e19e7105-2f52-4d11-a800-cfa5637730a5",
|
|
"value": "CN=topservicesupdate.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "a9c7eb92-c4a2-436c-b31c-dfc70b6868e1",
|
|
"value": "8330c3fa8ca31a76dc8d7818fd378794"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "f135606e-16e3-4bc9-9626-03db99a9ab86",
|
|
"value": "d76fffdaf1f47c5ec66192b8c399853bdf8b82ab"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b3126455-4d27-44f8-a40c-f7cc9a2dabae",
|
|
"value": "365bc7cde718d582675ceb99f2c07fd5adb0f021a94ac61c60c7025ae8ee6c10"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "0f52418e-4382-4948-8652-7632cb4591e8",
|
|
"value": "140.82.10.222|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "8246fbf7-fbfb-4891-a9cf-f505e31a3ce5",
|
|
"value": "207.148.21.17|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "df878759-b12a-4d82-b2ea-b57d2e0c2e37",
|
|
"value": "108.61.90.90|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ae8fa118-32b6-4a45-8f9e-4ca43cb9e796",
|
|
"value": "CN=topservicesecurity.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "58fb5edf-99fc-48d1-82f1-bdcffdc4531d",
|
|
"value": "696aeb86d085e4f6032e0a01c496d26c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "86ae72b5-639b-4120-9a98-bd9e31eba2d0",
|
|
"value": "147bd186a7b472a85607cd53b5f7e31b678bf05f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "a2da9635-35dc-4288-8d31-e8a8c48f2102",
|
|
"value": "a5ecc0fad362c57f24780db553b8c29771c49639b0698e73dca7bdf822033570"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "6be40d00-7567-40f9-bd2e-79134bb804ed",
|
|
"value": "45.32.130.5|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "71fba833-c734-4f80-adcf-6842d02c5f61",
|
|
"value": "217.69.15.175|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "b439462f-0be4-453a-a0b3-ef136c730480",
|
|
"value": "CN=serviceshelpers.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "41807646-a0d3-4ea7-918f-8ecf882fa58b",
|
|
"value": "9a437489c9b2c19c304d980c17d2e0e9"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "6ee9c704-dedc-4f5d-bf78-6c0726a253ec",
|
|
"value": "d8d91d7820347c7182f8cfb8cca88adff9b1aa41"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b1e09bd6-9626-422c-83bc-863b8f5198ee",
|
|
"value": "adc88b40464f477c860ebdbcbe1265ad6c01e624e873027cd9eecfee18e9683d"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "b5bba6ce-3f0f-4bdd-90c4-3b70d82a2816",
|
|
"value": "155.138.135.182|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "256656a0-df7b-4ecb-b2d8-3a2801854bb6",
|
|
"value": "CN=topservicesupdates.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "459fb9f5-4564-4c4d-9a09-427df43a2178",
|
|
"value": "b9deff0804244b52b14576eac260fd9f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993253",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "623ec286-d15b-4552-8693-25e40512df83",
|
|
"value": "3140f46636268af8ca50bd91f7b95b25734c7ef7"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "43355b51-f1da-4c70-8173-511a3f196c1a",
|
|
"value": "6971bcf5a82edf40bc4be702fa320e4f055e973248e0156cc30884ac4febc28c"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "e6ba647e-397c-49fe-a986-b4d450fda250",
|
|
"value": "95.179.210.8|80"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "e099d903-9a71-4bbf-ac27-8543367059e8",
|
|
"value": "CN=serviceuphelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "37ceceaf-613a-458e-b703-46a7f999da25",
|
|
"value": "bb65efcead5b979baee5a25756e005d8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "1271c5f9-f39f-45ac-9ca0-cb5bfc221967",
|
|
"value": "55a914adb9ba1352a09771b0e289c434cdda9257"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "705871f7-847f-4d5e-8dbd-7d08e9a70c45",
|
|
"value": "4c9fc43824a06be22828a0c10fcc9db36874f6160dc991e1df675a693b8d47c3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "510f2131-d0d6-4c75-bb4c-996f49afd75a",
|
|
"value": "45.76.45.162|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "33b81b51-3b31-4b34-b196-dec73260d386",
|
|
"value": "CN=boostsecuritys.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5ded9954-0a73-43a7-b7d3-e8ee32a53ece",
|
|
"value": "7d316c63bdc4e981344e84a017ae0212"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "f7b288bb-7763-4c95-9cb8-0692b7c9ca7c",
|
|
"value": "b4c2fe59c205f861469ec9049e00cc5284fdcf12"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "1f17bf4f-9754-4305-8f30-30be5e5da14c",
|
|
"value": "2ef5f4e625389123a91524cde8ac5e46e42b737a3e1e89fabd7c600d917adfa4"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "759e6e6c-59a6-4aed-842f-ee701128ec66",
|
|
"value": "108.61.176.237|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "706b9dc8-137a-4ea9-9aa7-8b164ec944b6",
|
|
"value": "CN=yoursuperservice.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "4749a19f-9821-4722-af79-735d0264bc78",
|
|
"value": "7424aaede2f35259cf040f3e70d707be"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "483c1990-ed4d-436e-b0d4-d2bc94e28cc5",
|
|
"value": "a60d8ca9d451e52f095ec61605f6cbbaffa2fca5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d7318abe-89a3-47c8-b172-3bfcb23295de",
|
|
"value": "ddbccecbdf186dcdf6c439f4272128e443389187421afb33261e0399cc127fdb"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "024c7e8f-890d-47db-b493-0022cb00d4fa",
|
|
"value": "d66cb5528d2610b39bc3cecc20198970"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "d0995c76-885d-4449-97ca-ce1707d710de",
|
|
"value": "ef2c77a7bc8d595b6a5b042750dc99d369bba20c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d2e6d198-a2c4-4b9f-87cb-fad846ed427c",
|
|
"value": "35a4d2ce4de30e0a7295d3ca805e266a13a869ae4f35fdc8dd4dd78c4642746e"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "7b1745e0-cf2a-4062-927e-153b4952f528",
|
|
"value": "188.166.52.176|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "dedc3abf-cdf4-4528-9c2e-8df1993f7109",
|
|
"value": "CN=top-servicebooster.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "6ed712a6-d25f-4fc1-8cd8-7009153a829e",
|
|
"value": "f882c11b294a94494f75ded47f6f0ca0"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "5298d32c-d1f9-432b-945c-a8d7eddce4b1",
|
|
"value": "8eb1ffc7aba522a4010be154d52f3e87d1475487"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "62a63c0c-85d1-4333-8186-c5c19eab94c7",
|
|
"value": "66ba56e6ce3446c900bf160d589e78915291802cab5de02bdd68d62eab07f490"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "9cf3091b-b7a5-4ce1-99eb-43438ba39c36",
|
|
"value": "149.248.56.113|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ff157fa5-0ba9-45c8-b2c9-998a44f105f3",
|
|
"value": "CN=topservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "f45683ce-78f8-4025-9f2a-f0df75252e6f",
|
|
"value": "2a29e359126ec5b746b1cc52354b4adf"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "3bc8bf91-84d6-4367-a7de-20a292c266aa",
|
|
"value": "f084969f98c9dd88ff1fbdcf61e3c9b250c20432"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "52bb4616-a484-4c4c-b8d1-4970ef67ce51",
|
|
"value": "93162e42f09c89c87987837d16b009ddc7a491bb431a02fed46b11c3c94ccb69"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "456b386b-c39a-4e3d-adce-35996100f95a",
|
|
"value": "199.247.13.144|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "4bcfb24d-b3db-4649-a1f1-2bb7ea1d9a20",
|
|
"value": "CN=hakunamatatata.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "9ef791d1-e789-4ebe-a855-4e0cfc145225",
|
|
"value": "e2cd3c7e2900e2764da64a719096c0cb"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "cd24a6d4-a7d8-4213-84a4-05895933ef8d",
|
|
"value": "0c997bf6e1373cd9baa06b1f0ff4cc5a77956939"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "c89a6e71-0426-4502-a011-3fc217dac5a2",
|
|
"value": "82ccdb1da0643c4d6df8ec18f995b4a05ad11293ac03db5fe10baf2875076144"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "e78101be-608f-4288-8c64-9894593f7217",
|
|
"value": "95.179.210.8|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "83b50ee0-349c-448b-86b2-33c4204455fd",
|
|
"value": "d89f6bdc59ed5a1ab3c1ecb53c6e571c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "347fba6a-b9e6-4c8d-ab53-57c40a44c4cc",
|
|
"value": "964a9af671fe7fc5f7691270f2ce021a9bb99467"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "f1542eca-9b22-48d2-8fc0-157f40e4aae0",
|
|
"value": "31ad5fa34bee148f6e003da8328e66934e6eb0d0ee013af29094e5da8fabdb54"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "c2943b65-6957-4cf0-9e26-e5ea9f8fbaf2",
|
|
"value": "194.26.29.230|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "f1f02b45-c659-44be-8d79-44dda038ac04",
|
|
"value": "CN=secondserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "eaa303cd-5b60-457c-b562-743c9029b8de",
|
|
"value": "c30a4809c9a77cfc09314a63f7055bf7"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "21879a0e-a1c1-4e54-9113-e96703cd501b",
|
|
"value": "8ee35bd3a782d181ec72a46a5646c3e117561b74"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "68d923ae-f41d-4479-9bac-0035022e211c",
|
|
"value": "ed61f2ddd11a23999762416cc74dba24df9135164d2ed4767ad6d42f5bf59ba4"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "62b5798a-3e84-4e81-b06e-ba6d063e956b",
|
|
"value": "194.26.29.229|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "20d07890-c505-4447-af76-b610f10ccaa6",
|
|
"value": "CN=firstserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "e3bd05f8-bba5-49ce-addf-45d2e3f0d0ce",
|
|
"value": "bc86a3087f238014b6c3a09c2dc3df42"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "420f8d5b-39ca-477d-bbb6-511d6fd943d2",
|
|
"value": "90dcf1b735dbc0814a6b262b525c98a6368a69de"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "aac95057-974e-44e5-b561-f3aa71a97393",
|
|
"value": "ecd7b942937fc7ebdd42c88443599890474fbdfd1eaedd87833ef743f0afedad"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "48434b6b-e209-4ff0-9301-306c913d5b5f",
|
|
"value": "194.26.29.232|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "d784eead-1baa-4d54-8d9c-50b34a66502c",
|
|
"value": "CN=fourthserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "b1ebf7e1-ac1f-4a31-b7ab-cbbdca248bff",
|
|
"value": "3dc6d12c56cc79b0e3e8cd7b8a9c320b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "21a3d66b-f1c1-442c-94b7-f74527d4fe36",
|
|
"value": "a7cc6d3bf0d757b60d30247ae044d5b2cf5d4480"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "20491d8f-92b8-479c-917c-edcb16feb4fe",
|
|
"value": "bb0d6cef2507ad51d60d8e2d7a55ff008fbbac71b395338d3c57fdd43ec8448e"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "0c2aac4d-ad4b-4d7c-a13c-302704d8c5c8",
|
|
"value": "194.26.29.234|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "3b407888-b1cc-45a0-a520-117c737e552d",
|
|
"value": "CN=sixthserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993254",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "7e414aa1-256d-4e66-a6d4-963f04745e07",
|
|
"value": "951e29ee8152c1e7f63e8ccb6b7031c1"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e4c0c916-05ac-4adf-9688-fc0068694699",
|
|
"value": "6ba985c0806efa30cd08d63703fea0b7de6ba069"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b3576beb-0fc2-48ce-aec1-ef233e592587",
|
|
"value": "bbb4f4efd5422502419a20d1266bb490cac2ad72e8976a6827dac150e861490d"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "fce36e00-e6a5-4877-8b9e-0f52c4610d91",
|
|
"value": "194.26.29.235|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "4f8c3803-e15b-4541-aaf3-237498589a0d",
|
|
"value": "CN=seventhserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "aa090680-5312-4729-9e19-c4673f0ac3e5",
|
|
"value": "abe1ce0f83459a7fe9c72839fc46330b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "f1349081-75b8-4190-98e9-96a4f23feb4b",
|
|
"value": "fdd928b0c85157f6ba6cfd3368c667fe8e1fb5d4"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b910fada-d293-4ec4-8fcf-07c8be2584b2",
|
|
"value": "5ed06362012051d4338cf4aead763f2cf73b8ceb6b5818490e039505c37ef563"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "cd7d251f-71cf-4f39-91e4-3fb02da79e00",
|
|
"value": "194.26.29.236|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "600edddd-a4c4-4425-8b10-64eabfa678b3",
|
|
"value": "CN=eighthserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "b554dfe6-750f-4531-9b0e-ec1d4a3b9d29",
|
|
"value": "c7a539cffdd230a4ac9a4754c2c68f12"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "c14e9b91-097e-4678-b691-26935724db3e",
|
|
"value": "9f0d0fcba3b6587a58e1c234dd8bc415440a5cf7"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "6454027d-ba56-4ff8-abe4-da29313229f7",
|
|
"value": "026a92b4137193b82ad67cf0d9a7fc5b8946da7916f7d1a8b9f904b1e5ec8109"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "d378d31f-9220-4356-9898-ad05baf12e12",
|
|
"value": "194.26.29.237|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "2c8e5e92-43f1-4e92-8267-f53b82d518c8",
|
|
"value": "CN=ninethserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "4c40c2f7-378c-4177-94ff-f62ad8de7fad",
|
|
"value": "1d1f7bf2c0eec7a3a0221fd473ddbafc"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "1f01f899-9371-4fc1-b898-5e1e89b4b743",
|
|
"value": "3792f2728a464f05874899d5a6330bb750054ea9"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "c652a508-456d-4765-b489-09d76303c69d",
|
|
"value": "d11e1ec2ccb82f591fd7f3d057f1920559ff0f4b8f12c96920c55f917d5a2340"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "81b4883e-afec-4570-8c40-27cebc52835f",
|
|
"value": "194.26.29.225|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "5d96f360-7cc4-4d7f-a677-27af5a9f9656",
|
|
"value": "CN=seventeenthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c4cd2da2-3e19-424c-a1f5-108f21a61cb3",
|
|
"value": "6b1e0621f4d891b8575a229384d0732d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "b9eba227-b1bb-4ec2-91b7-2f9a16ca6280",
|
|
"value": "6122b1f5fd9b21a25bb8167d3fd8ba137fe73424"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "15aa62ad-8ce9-487e-b87a-203ee74adef4",
|
|
"value": "d1f5d43cc9223c67e6cad5030f178daeb242cf09ed452e35c0f4cc18885f2823"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "c0b37616-78ea-4aeb-8238-6afc1c498f2c",
|
|
"value": "194.26.29.227|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "b871b0f8-269b-42f2-a748-c830ee321aff",
|
|
"value": "CN=nineteenthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "8232b2a7-9a90-4383-bfdf-9ce634050600",
|
|
"value": "38756ffb8f2962f6071e770637a2d962"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "172deb5a-6f4f-4b7b-8671-1dc8ec712d12",
|
|
"value": "200331224aaf52ca6f2c5196d4cb65509622fb13"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "9d6401f0-81a6-4b07-b365-907598d4ab5c",
|
|
"value": "4f9db8e1d3f1d48c68c609f0c4dfea3057cc763a4563548700e63c64b8ef9e86"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "f4a2682f-390f-400c-a587-a37325329d3d",
|
|
"value": "194.26.29.242|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ee971f0f-21d9-4d8a-a254-c2c3617eaa6d",
|
|
"value": "CN=thirdservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "ed6f73f3-80a9-4011-9f16-89722ed1fa53",
|
|
"value": "3b911032d08ff4cb156c064bc272d935"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "50cec67c-34ef-4df8-9565-886d7e811239",
|
|
"value": "0305c923a596bcef4a77d339b0ee2275884bf6c8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "086dc1ef-0ddd-43df-ae62-8e413d2fd8b5",
|
|
"value": "5ac4e8321c0afb663d8038281a03274fced1897b95a76685c3af321556442a1c"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "5328a2f4-77a3-420c-85e3-964501cbacc3",
|
|
"value": "194.26.29.244|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "84d943e9-df76-4c10-a643-a532665bd8ce",
|
|
"value": "CN=tenthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "b0d692cf-6806-4bb5-9c2d-1ce7f5b1e2f5",
|
|
"value": "a2d9b382fe32b0139197258e3e2925c4"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "a76c6556-476c-42da-ac46-a3bcd2610729",
|
|
"value": "98780351c45ea79aa5c5df18bea0228cb99953c6"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "8401d91e-b9be-4e39-8791-923d9edd28d0",
|
|
"value": "7cb497230d1a533367ad17ca4b4efce35f429c67382bcfa3b4a1f330d932a091"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "62e5f5bd-4cf5-44e3-8d2b-abc5e00d640b",
|
|
"value": "194.26.29.226|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "74ee8895-3b8c-4ce3-ac18-7ca3aa88ed48",
|
|
"value": "CN=eighteenthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "eb349e07-ba85-4379-93f7-2322ebe95692",
|
|
"value": "4acbca8efccafd92da9006d0cc91b264"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "c59e2d73-fcb8-4be0-b016-ca1f5505cfb0",
|
|
"value": "71f5e9bfb1e84240422ab4de02ba720d4d27bfa2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "2e832141-3b17-4ad2-a474-9e0c1d467965",
|
|
"value": "5c5c8f0f9d36c7fadb599cac5eeed4dcffc117dfa5f224e36f489af29e138413"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "2814d3e3-2a31-4363-a15e-3136e5298e06",
|
|
"value": "194.26.29.243|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "3fdb6e97-0ad9-4a94-aacb-b4756c70289b",
|
|
"value": "CN=ninthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "a3cb1b93-0233-4848-bba0-b27b6e24bdf1",
|
|
"value": "0760ab4a6ed9a124aabb8c377beead54"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "3dbd8e81-b482-49e1-a93b-773918382d44",
|
|
"value": "e9ba8d107eb11c1559e1e0cb8848a3db58a658bc"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "9f166889-7fbf-4faa-9268-204162c20694",
|
|
"value": "1c46a92fe32c2440aa5cf5e7f221dfd30c36e7ad8f893f6b0f685c8f463daef0"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "ca421f03-e8ef-4e42-b18b-e41c86670f0f",
|
|
"value": "194.26.29.201|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "e171a2de-6a30-44c2-b405-1e4f52fbb290",
|
|
"value": "CN=secondservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "3afcf257-9bf6-45b5-8a2a-e289e836850f",
|
|
"value": "d8a8d0ad9226e3c968c58b5d2324d899"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "21afc526-9a27-4d26-8863-9774bfcf61d3",
|
|
"value": "170a5457a5b9bb0929b057863ca3cfe6af09ead0"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "bb876b7f-b859-4588-9ac9-c22dab97bd76",
|
|
"value": "09d6520dc9e554a38d8608cc3523f316c01dd152eaa28a715a22c4f29065d9b6"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "77e08877-57f1-413e-963c-f813c56346eb",
|
|
"value": "194.26.29.202|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "a837a6d8-62d2-4790-968d-07bff0c289a7",
|
|
"value": "0d3b79158ceee5b6ce859bb3fc501b02"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "4b5aa2b5-419f-4775-b0ab-425baed55b36",
|
|
"value": "85c8981c67ac70c12736d9ff58c073ccfc4d8356"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "2211725e-214f-4f02-a7f3-69e58b750265",
|
|
"value": "395ee531bf5c1790d1484df5505431a74073cab00d642cece309ec8bcaaa9ec8"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "302c902c-dab8-44e0-ac06-ad499096f488",
|
|
"value": "194.26.29.220|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "59135b56-f5e3-4c2e-a118-c088f6ee4efb",
|
|
"value": "CN=fourservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "b2e48d5b-d875-47ca-9d16-4a687572ddc1",
|
|
"value": "831e0445ea580091275b7020f2153b08"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "45651cbf-48c5-4674-97f1-d7af1e109f90",
|
|
"value": "b967639413cf2be482fb4a3384634f7114f21628"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "6416f2bc-b14d-4e89-ba06-78f4e26e6769",
|
|
"value": "353e073a7b77cbbecd06568308ac9b38a449e1151397d77011e00557fd4b7f80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 80",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "7a91e9fb-ae5a-4980-ae29-a8ecbe42c0ee",
|
|
"value": "207.246.67.70|80"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "7cbbc8ca-3ebc-4fbb-b0a8-f49b0b76d17c",
|
|
"value": "165.227.196.0|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ee2ba1c9-dc6e-41e3-a0b3-3384b7946211",
|
|
"value": "CN=twentiethservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "0f94ccf0-0841-444b-a00d-5f9773af62a4",
|
|
"value": "977b4abc6307a9b3732229d4d8e2c277"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "3496b920-839f-4ccc-a12b-6cdd666b88ad",
|
|
"value": "5c22876d3293b96fb2111b33107506cc5bf26e94"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ac010bf3-ae8e-4c6b-9b1b-3ecedccc1308",
|
|
"value": "c8f0c12ec149707de1caae8590894fec98ad1103c63d1c51e0ed9c3812f1248a"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "d552827a-80c9-426b-a8ec-366d41435573",
|
|
"value": "45.141.86.91|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ddb8f045-4a2d-4e0d-9da6-0bb5ac4fd5de",
|
|
"value": "CN=thirdservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "8c378136-6954-417d-8035-5265a4140942",
|
|
"value": "edc2680e3797e11e93573e523bae7265"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "8741e161-10a5-4163-8f05-b0411f0d5243",
|
|
"value": "ae29d540e40c889c11e996c626045c79ff1d58cd"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d3186fb0-63da-4f0d-a913-a95992da6942",
|
|
"value": "7b9840afd5826086e9b50b799ec2f559c2d6b6e3450a54293d5299905ef5b3c1"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "86c48ffd-40d2-467d-a1f0-760bd82f6c0e",
|
|
"value": "194.26.29.219|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "4ccb2f28-3a74-47d3-9c76-b13660b2a96d",
|
|
"value": "CN=firstservisehelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "74ad0d72-7134-4c67-9018-627ef8f98a95",
|
|
"value": "6b444a2cd3e12d4c3feadec43a30c4d6"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993255",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "f53eff93-50ae-44a2-b53d-18bed1fdc8de",
|
|
"value": "11fe8a3e5922e574ba82b5474142dfff9079f6e4"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "3a4b4445-4af6-47bf-9624-08827bf1bff5",
|
|
"value": "9dc3a97e0f86677bdf7c6acedd74e232d5acdb7bafbfb9f28d713a4d4717c5be"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "733bc930-b76d-43a2-89e7-edd4a19e5101",
|
|
"value": "45.141.86.93|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "9c9b3759-3df1-4afc-957a-b2a09cd6ccd2",
|
|
"value": "CN=fifthservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "587df44c-b5d1-4c33-a1c4-4cc8828aabeb",
|
|
"value": "60e7500c809f12fe6be5681bd41a0eda"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "f83cc9d8-5879-4014-9af3-31a968c78ddb",
|
|
"value": "9be40f49f6760e8d8dbd73158bf1bb5065f565b1"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "473cd2f9-013a-49eb-a1a4-c6b68ba772ef",
|
|
"value": "7f9b9d03af249b9d849aacef60f1cfa544d2b5cd8a45a48a9c87c5a00ada2533"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "5d3769ea-64c9-4e76-9a7d-5867eea9ad07",
|
|
"value": "45.141.86.90|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "b1b69c60-6b92-4f93-bf3d-b0565450b537",
|
|
"value": "CN=secondservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "fcc4282c-f545-46ce-91e7-a0701aaad220",
|
|
"value": "de9460bd6b1badb7d8314a381d143906"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "ded8e33b-23b0-40ec-b7f6-05ec5447f279",
|
|
"value": "848d9ba856ea343812e81aae4a956a680b25ca51"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ac2d291f-e1e4-448d-9598-db2d8b428da2",
|
|
"value": "196d386180df255311be789f449649297b85ae7943d09d226705d1332dea05b0"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "c70cf32c-6fec-422f-a160-2b8acea21b21",
|
|
"value": "45.141.86.84|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "2be0c536-4e66-4116-90de-fb3c001bf569",
|
|
"value": "CN=firstservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "698671e5-cde5-4a57-8526-a6ed81266fe7",
|
|
"value": "6385acd425e68e1d3fce3803f8ae06be"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "a057bc41-7970-44de-bdf3-193b6c7ed8a9",
|
|
"value": "4e72c8036313e812428b0e5978d48e5821d2e60b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "68933312-5b81-4ae7-b919-bce2746dffd2",
|
|
"value": "f00856f25467e320c5883486cdbf53848818cc270648cabc41760f77357f98bf"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "ddc665d0-657a-4fd3-a891-e54895a50a9b",
|
|
"value": "45.141.86.96|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "b73bf60d-cfb6-4fdb-a1ff-4f64d3a66f04",
|
|
"value": "CN=eithtservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "4fc3b56f-ca3b-4478-84a5-d4b9125b29cf",
|
|
"value": "e1d1fb4a6f09fb54e09fb27167028303"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "b196fe50-f418-413a-a3bc-0a8b5878fc90",
|
|
"value": "e5c1db89d5f685b79cea43ac4bd22e25b0446723"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "350d919a-9076-4ad7-828c-48e21ee0fcb4",
|
|
"value": "4a8b83a91e53fa0acc65cc19433bfe36fd685776bbacdefb15f55affde3005f3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "9f4e4c66-7cc5-45e2-8b9d-2d4b3f175d6d",
|
|
"value": "45.141.86.92|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "a3e01d3d-5e49-43f1-bc29-8d4f92172ca9",
|
|
"value": "CN=fourthservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "2921469a-a596-4c19-9afb-ba01f259ca3a",
|
|
"value": "5b5375bf30aedfa3a44d758fe42fccba"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "fea09baa-7610-466e-b6fc-ee047df20974",
|
|
"value": "95674988186e8a8929b56e783976c66bf30cb93a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "894d61ab-2195-4899-87aa-8cc5150f9fe7",
|
|
"value": "31413afff6b201aa678484780dea0fc3e8ae9e38ad82297c7577e579a447bcc8"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "0c52145f-e906-473b-96df-43108436d781",
|
|
"value": "45.141.86.94|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ed4310dc-5dfc-41b9-81fa-f86f385bd88b",
|
|
"value": "CN=sixthservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "a277ee67-b7d8-402c-944f-4dc70b86fa15",
|
|
"value": "4d42bea1bfc7f1499e469e85cf75912c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e45c88c3-8f07-4e8a-a9b0-73d309f9e0c2",
|
|
"value": "aff04c3420d065b9ae3d4edaa9afcfc599c899df"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "fe48f2f9-4faa-484a-ac9c-5b86656571ef",
|
|
"value": "e4f95e5f4f696b266291ab3e285eebb2492d6d047877018465b32fb82752eab1"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "ab1c739c-6e78-4b37-b169-a10ce9804c7e",
|
|
"value": "108.61.209.121|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "307c2195-25f6-4f45-b181-89fc0619483a",
|
|
"value": "CN=service-booster.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "8e8912df-edcc-40ff-b9f0-0e119ab377a3",
|
|
"value": "692ed54fb1fb189c36d2f1674db47e45"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "713cb9c9-7bf2-49c3-9ee4-d50feafae848",
|
|
"value": "8e38a8bbfddebb0203a3ec6b58c352d8c29be891"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ea76ddfa-5e8b-49c0-a881-b7d01ac20431",
|
|
"value": "df37e083f15d996d244ffb945c166a7198e246952fca4c069628e33d84cd9aea"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "f2143c37-3351-4b31-bf26-72fc4ceaeb23",
|
|
"value": "134.122.116.114|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "fde4ef0b-1a7b-43c1-9aa6-70a46e7f2bfc",
|
|
"value": "CN=service-helpes.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "85ef4294-842e-489b-987e-5a032766da5b",
|
|
"value": "ad0914f72f1716d810e7bd8a67c12a71"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "152c1e59-acf5-46b9-8490-bf49b41efc87",
|
|
"value": "1302395c401b35c5e483e24c33d0e1577f0fac58"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "026eaf49-3c28-4d5b-a270-4e5320b48416",
|
|
"value": "d909c081f1885f03bfc578cdfd5dbc11dfc374e5178b2ba0e4552dc4217b81bb"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "be9e967c-dc79-4606-8693-271a319236cf",
|
|
"value": "209.97.130.197|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "9f12ef88-f07e-40ff-84e1-6050305f6171",
|
|
"value": "CN=helpforyourservice.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "19042820-e197-4ba5-b8da-727d0d074bc8",
|
|
"value": "00fe3cc532f876c7505ddbf5625de404"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "208482bb-ce1d-49fe-9af4-6410dd96a240",
|
|
"value": "9c4cbf168e6ef3d37ff30e9148de0364d92268dd"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "05eb9e68-f2e2-4725-aee5-9d0efa67a279",
|
|
"value": "cf2ee926b0e4736a507dd650c3c76a9edab561438936434501f4f687a77761a8"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "9dac58ff-0807-4fb7-bbf9-7802b84ea89b",
|
|
"value": "192.241.143.121|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "c7d82b6a-022c-411b-8ef9-e42f40426a28",
|
|
"value": "CN=serviceshelps.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "ee15dcd9-b6e0-4ee3-b94a-5bd92133c505",
|
|
"value": "e50998208071b4e5a70110b141542747"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "0c423bac-1283-4819-b7d9-cbca648a8a02",
|
|
"value": "7f251bd73a416d1a92cb6a3c6e2de0cac5350d45"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b4e2e224-2077-4b52-bc27-8f2a2a7a8a72",
|
|
"value": "d39a87ff39ae5f0efe9d03c53827b4c9a5c8d5269dec42433c8a1064a3890b8a"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "bdb6b0b8-c674-427c-9d7f-5ba5c32bdd37",
|
|
"value": "45.141.86.95|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "34e88eb7-9f8b-4b47-a393-2d2ad3c8e170",
|
|
"value": "CN=seventhservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "2e70f889-b43a-4644-844c-755e3199b218",
|
|
"value": "413ca4fa49c3eb6eef0a6cbc8cac2a71"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "c0a30425-8e95-456d-9835-5e20e748a222",
|
|
"value": "ef288bad2e19d041170cbe9f886810c64811c233"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "cab08b3f-f45d-463b-8212-197d44723838",
|
|
"value": "9a5c541d1a20eba5944401942ba7f93c4010ad5e6c71ebf1b37cbb6d26a83e65"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "55cd62fb-6581-4649-a4bc-1789c019ad2f",
|
|
"value": "198.211.116.199|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "0591319a-6e77-443d-973c-027e21218952",
|
|
"value": "CN=actionshunter.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "9eaba568-f7c2-4059-81ca-7e126a498847",
|
|
"value": "8e5bedbe832d374b565857cce294f061"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e0d5747e-bc4c-415a-8611-cdee019d698b",
|
|
"value": "58baaf1b4e739d7b7dba47253c1ce6044c9037ac"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "4479be88-94b0-4586-9c93-e6af5165fbc6",
|
|
"value": "c9bdea0e979bddebc93b99a0e5f374c7cc49e595d77ea19b4497ecaa4cd84812"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "be321e84-b2ea-4d14-bd02-8109887c7c93",
|
|
"value": "45.141.86.155|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "fe03bc12-3daf-4e95-a20b-84e6c25c4510",
|
|
"value": "CN=sexyservicee.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "2a9647c6-5790-4194-8ee1-b520fdfdaa7c",
|
|
"value": "cca37e58b23de9a1db9c3863fe2cd57c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e7d8687f-0730-4e07-9462-b24208b2db5f",
|
|
"value": "ebbf885ae58aa577c47ed8a76e8a1d27ef0fe9b2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993256",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "666d1496-2245-4e3e-9feb-8fa6b5a3206c",
|
|
"value": "d7eecd89833760a8e212a26d3a4440d48658f51371ee8aafa6d9496210c035f7"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "e780e445-f947-4d20-9292-e894c1844820",
|
|
"value": "194.26.29.239|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "572eaf39-770e-4120-9256-fc753cbe9864",
|
|
"value": "CN=eleventhserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "9643a604-36a6-40f4-a0ee-14a5439a00e3",
|
|
"value": "7e0fcb78055f0eb12bc8417a6933068d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "066d55e2-6764-4f0d-9adf-1de9c49aa858",
|
|
"value": "b6e561e9336265ce7999496e645e411c1cf6d32a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ed3384f6-bab8-4dfd-a213-861b7f176226",
|
|
"value": "e7ee39057173408d32ad678a9bbe1285841fcc07462ea4ea635193976166e4ef"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "db8f2194-fa1e-48ee-81c9-48e9a79838cf",
|
|
"value": "45.141.86.206|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "c13a00d2-a310-45e5-a66f-dbc7befc810b",
|
|
"value": "CN=servicedhunter.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "b5e2de49-2fdd-4f98-b99a-c0ad35ab3d80",
|
|
"value": "fdefb427dcf3f0257ddc53409ff71d22"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "0ae811ff-4933-47f9-baa6-9776165817e2",
|
|
"value": "3484cb2df365360595990209bff18cafdd2f88b6"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "4f3641d0-a7b6-4730-9602-0a49ed953352",
|
|
"value": "ca34ed4ffc9de2c14ce6e2fc5f5a117423d715280249078aaf93119e072d84ab"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "55580574-048a-4168-8edf-077f07e8a480",
|
|
"value": "CN=service-updateer.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "9d8652ec-bcba-4e27-8eea-85a5f630aad7",
|
|
"value": "51ba9c03eac37751fe06b7539964e3de"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "5078f0c1-049f-4816-a534-5ad961be2101",
|
|
"value": "7bd69f9b20fead1715424f2a41570cbb202987a0"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "a72e328d-63c7-495e-ab99-ece920bdf926",
|
|
"value": "f9e9d1e53371510e0510f1d166df989e37ca9d67d0551fb2789b276a1b3da04f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "67fa12d1-d4c9-4132-ae96-7d718e396c1c",
|
|
"value": "134.122.116.59|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ccb3b387-7736-4922-ac39-a70bc7dc9cec",
|
|
"value": "CN=servicedbooster.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c3c5be82-7e3c-438e-9000-5b91761c2bdb",
|
|
"value": "db7797a20a5a491fb7ad0d4c84acd7e8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "0075caf0-ebda-4923-96e5-22804e87910c",
|
|
"value": "3cdd7ff2efb830024b9cde8dbd480dd90ce74e28"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "e57f51fd-801b-4a1b-b108-c958c9bb4b79",
|
|
"value": "eb083bfd99cfa4c2c9feccbaaadb1415a75046269360ede0f9f15849d2184e0c"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "881a4e98-9532-4396-b604-c3a23ebfa15c",
|
|
"value": "134.122.118.46|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "6d7ae4ff-52c0-4875-bd10-43d4a2ee89fd",
|
|
"value": "CN=servicedpower.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "01865e78-8165-45af-a0d4-7762c04d9493",
|
|
"value": "7b57879bded28d0447eea28bacc79fb5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "687ba8a1-e2d4-4d76-8c96-99bd7d3f936e",
|
|
"value": "4014f28e2ad10e0703894a713f37759c7e11d12e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "2e632650-d38e-433b-8e26-063665b30b7c",
|
|
"value": "cb31b3b68a9621c23a5c9a9ae60ee37df2c85e05de4bda627ff7c200403d4cd7"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "cea92d2c-a9b1-454b-8ac7-98eb23291062",
|
|
"value": "134.122.124.26|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "986b9866-d5aa-4bb9-85d7-668df0b077d4",
|
|
"value": "CN=serviceboostnumberone.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "bbc00d31-6b61-4fd7-aed1-cbcd99b9cece",
|
|
"value": "880982d4781a1917649ce0bb6b0d9522"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "9d44ba55-0492-4d82-b6f0-04bf9f3234a9",
|
|
"value": "de2e4fae773052383e0d05ff8a2a5efb436d7d3b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "3507944a-39f2-4e7c-80ca-1083b2eccf10",
|
|
"value": "3f79071f197133614fa796d44ba9322c1b2f847166c1986fe2bea5304c107f3d"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "5b3cf645-b14a-499a-8db9-78776594170e",
|
|
"value": "45.141.86.97|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "f1dffec0-e1df-4b75-ae88-c82c35c2ee59",
|
|
"value": "CN=ninethservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "1e3f983f-5874-4a18-9351-18b54ef42357",
|
|
"value": "e4a720edfcc7467741c582cb039f20e0"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e46d3f02-85ce-4c24-8fc2-041de8af91ff",
|
|
"value": "de321d8e683f0b11ff37073331a2aee5859ff518"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "9dc16b9f-4fec-4372-87c4-08c5401a8e3f",
|
|
"value": "fd0b15acc21b2fa372a9ded83f2ce7dd1519db53335d3db7ae975a2ab4861f4e"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "568d3120-64de-4a58-82b3-5a68bed9a23b",
|
|
"value": "178.62.247.205|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ddea9843-601e-4bd4-9977-be803030a7fe",
|
|
"value": "CN=top-serviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "456c8d52-ab10-4dd1-bf3d-4573e68d746a",
|
|
"value": "a45522bd0a26e07ed18787c739179ccb"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "b83f751b-cc1d-4ac2-b90c-59b3933d8eaf",
|
|
"value": "1cb308247b0c9acd8b85a551f068dba57f43003c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ed0b79d9-ecec-4132-aef9-07c8a0b30eb1",
|
|
"value": "22049b5e5a7f8cd603b034f2dac43ea51df6455ec6e7a19ff82819dc735b59a2"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "4c498f4c-69d8-41fa-8c8c-6fee7cf40df5",
|
|
"value": "159.203.36.61|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "f6937c45-b573-44db-8833-7a952e6a2e33",
|
|
"value": "CN=yourserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "303fc7a1-dda1-4516-936e-aaf2a2822696",
|
|
"value": "7b422c90dc85ce261c0a69ba70d8f6b5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "eedbe759-528e-47f2-9d89-7ef0dc8ee902",
|
|
"value": "4aca11453ea2cb8025e7e1b0b43490edea5be848"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "03c1a3d1-c5aa-4563-807e-8e8105cffae4",
|
|
"value": "e588cd6a13ff837b8131b452fddecbc9c8b5c9e1910ed8ff83d15731557f89f2"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "8fbbda04-8316-496a-9362-dbae8748ea3e",
|
|
"value": "134.122.20.117|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "c09c542b-3e81-4541-ab04-8fbc53926e62",
|
|
"value": "CN=fifthserviceupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "e3fe3de6-06db-417d-81b6-da3ff0a74cdc",
|
|
"value": "99aa16d7fc34cdcc7dfceab46e990f44"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "4bc17340-f718-42e2-8a79-1764aa316451",
|
|
"value": "a53905596113b7034057c63471ccaf1cc73aca4a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "5c00b409-bba0-40a8-bfd1-9a6c17f9d7c0",
|
|
"value": "0ec1a43076685564484b38506263640e3a213338db2604a57792a2a3f8e42b56"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "862a634f-835a-402e-85ce-e4599dc9ad24",
|
|
"value": "165.22.125.178|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "1963abec-56ad-4bf1-89ed-b5db12780f0d",
|
|
"value": "CN=servicemonsterr.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "3910ccdd-c2fc-46e1-9203-90d5909f9861",
|
|
"value": "82abfd5b55e14441997d47aee4201f6d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "50bb85b0-00d9-427a-bd4a-f63b3e97a063",
|
|
"value": "7fac10cd2c2ea8ef8a57e929501e56c9abdcbae2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "42332cb6-3ae2-42a4-8eb4-79cb7ff45a68",
|
|
"value": "d2e503b1c92b9b1c0e6cefa55b08157676ddddb888bc1b2b3511c8c2800d907b"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "9f67a507-f780-48c5-a44a-87380eb4e1ea",
|
|
"value": "69.55.60.140|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "23f520bc-ff8e-4500-bca1-c7011fadbcdd",
|
|
"value": "CN=boostyourservice.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "a7173beb-3eb0-4cb6-a4bd-d3a6e61b23d6",
|
|
"value": "7f3787bf42f11da321461e6db7f295d1"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "91483c54-d8e3-402b-8246-45a9960ebbdb",
|
|
"value": "a6d1fd88257c51bd2c129a76343d1155390fd069"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "87fe0685-f7b9-4d46-bf31-c4169cb48f94",
|
|
"value": "f9a24c855d8d30f2e711497c5d11d646e6ec0de85eb323f19c373ac9d36ef391"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "5fe25635-fa8f-41e0-a63e-a533a43bc451",
|
|
"value": "45.141.86.98|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ec39c56b-c05f-44a6-9d15-a8ff1d2df2df",
|
|
"value": "CN=tenthservice-developer.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "ad4177d5-91b5-44bc-91b3-ea53c1695019",
|
|
"value": "eef29bcbcba1ce089a50aefbbb909203"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "eb7ae905-035f-4878-a670-3be89b2607e0",
|
|
"value": "c545cf69299c116e897b5cdc888feaad833a4df2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "12f0b506-713c-4b09-b413-45f11a9e5fe7",
|
|
"value": "d4365e2bfc72e6eb1a2183569d2562f71858b87d41e2c1649cff03d0cba13f4f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "3f924f5e-0265-4d09-b767-2778d8982e3e",
|
|
"value": "178.79.132.82|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "3e9aa384-5588-4775-8dc4-679a8a19cf91",
|
|
"value": "CN=developmasters.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "42ec078c-251e-42df-8273-d8ce6d17e712",
|
|
"value": "5cf480eba910a625e5e52e879ac5aecb"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "cf6960f5-3dba-4e03-89ac-97fe6841b62a",
|
|
"value": "0fefff7692342dca99c95c36e369a3835694497f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "9311857f-a29d-4c9a-9803-d36b5f63600e",
|
|
"value": "31f6977f48f522d1d935ca1c1d84d701515646c9c054f0ba7f33d0a065f4972f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "fbe62ddd-be4f-489b-ac56-e3dbea3d0889",
|
|
"value": "194.26.29.247|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "b85591ce-b5b6-424e-a011-d63b7b6a7e48",
|
|
"value": "CN=thirteenthservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c09f4a84-0d09-47e6-9748-f56966476659",
|
|
"value": "2486df3869c16c0d9c23a83cd61620c2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "49b75c88-d07f-4cdf-bb2f-bce532204c24",
|
|
"value": "10b8427b7b585e4498eac8a7a79677f75e459041"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "623b80e5-857f-46f7-9fc8-20ce164fdda6",
|
|
"value": "d873c8a307303406582f918c5623a57ef1095896ef8a5b864d9df623c98ce1d4"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "086f43a9-9598-47c5-b296-63d283f37963",
|
|
"value": "159.65.216.127|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "0b03e9d5-6ff3-48db-8de5-f9b9e1bf920e",
|
|
"value": "CN=info-develop.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "48e10d2a-4cba-4634-beba-f5fe783da9b0",
|
|
"value": "5f7a5fb72c6689934cc5d9c9a681506b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "befcf080-d92c-4cc8-aef2-1337b22f9349",
|
|
"value": "31a42d1eff743c09b7a85dea35698cd7a3b75915"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "00b13b76-57b2-4dce-9121-7eeb33a84b2f",
|
|
"value": "3c5627220ff714a53a38962c6fb046bb1b0df193b4ffb0e8612a9fb9ed7accf2"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "b275d503-c5ed-4219-98d7-3e01365d48df",
|
|
"value": "69.61.38.155|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "cc27c398-a9ad-4ac0-9dd6-fdc90ff57c46",
|
|
"value": "CN=gtrsqer.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "0b9955ac-f3c7-439e-8493-1ffe1abb098a",
|
|
"value": "d37ba4a4b1885e96ff54d1f139bf3f47"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "1abce5de-180d-4245-93eb-59b2c9b28d5f",
|
|
"value": "5a70f18b547e0824e791c7ad99bc5520e369c90d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "a020f422-27bd-4a96-970a-60707af247b4",
|
|
"value": "931f03baa30a7e07dc130f53a2a1e925b6b081e69a7c8de7b3a117639433cbd3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993257",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "49499f4e-74fe-45a5-9b3f-d24d44e3e969",
|
|
"value": "96.9.225.144|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "c9f9886e-a0b3-4199-97ad-b717de4179e2",
|
|
"value": "CN=hakunaman.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "9c31a392-4efa-4b99-9a9e-f3ef06891d96",
|
|
"value": "4408ba9d63917446b31a0330c613843d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "5a4fa8f9-03b8-4952-9a21-82eebb35a7f4",
|
|
"value": "87266a8de7add18e4b061029552ae9bf5a34aa88"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "2e1c2077-e9ef-4df5-a660-f984e0234ef6",
|
|
"value": "6768d54a8de271ed2bbcfe6519717ef72e7d78be87570b76bfa159b97a4646b7"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "23020bf9-fbd8-4b83-a144-bfd92f4f6be2",
|
|
"value": "96.9.209.216|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "e9a9cfe8-7753-4923-8724-18547c98c369",
|
|
"value": "CN=caonimas.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "1ea5aeb4-27d3-4085-a30c-6c16f3c11ca3",
|
|
"value": "d921dd1ba03aaf37d5011020577e8147"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e1f45206-287c-43b7-a514-94843acac0dd",
|
|
"value": "5646eee066ae74272c2f495292ec056d407e2a4c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "661c040c-ed6e-4a3c-a8b7-552b478817e7",
|
|
"value": "13a03d22dcbcb90adf5158b2a5c9c694e080d2f9510063f1b3770312992dc58f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "515d7c18-98a1-43c1-8c71-43504c07bdbe",
|
|
"value": "107.173.58.176|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "9f76cbe8-9ad7-4bf6-8aab-9592a4986c60",
|
|
"value": "CN=chalengges.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "6fb9658b-1093-46eb-bcc5-cb1bf418b6c0",
|
|
"value": "dfeb6959b62aff0b93ca20fd40ef01a8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "59e53e0e-d10a-4710-a693-009b93c78f16",
|
|
"value": "952875e8dd1887c43ed834f44181cbc6f1ff5608"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "f63ce578-d2a4-4325-945a-d15afd8692ea",
|
|
"value": "374fca70315cce164eab45140973881019ec54882d8142b59b9a4803561d7de5"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "d466c468-e3bd-4830-979c-a6f3da97abb8",
|
|
"value": "96.9.225.143|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "1cfc0d11-4015-40eb-93c8-40bf4d99f9f2",
|
|
"value": "CN=reginds.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c85227c4-75c7-48ac-a464-0b149988bc70",
|
|
"value": "05c03b62dea6ec06006e57fd0a6ba22e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "5994d579-81d5-4a42-bf52-485aa4dc777f",
|
|
"value": "fe35ac015239384d55a6538ed54bc3fe52e1e60d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "38a3062c-4cb2-446c-9f6b-32f7a363bd82",
|
|
"value": "3f6a80c0bdbcd18b32733f01b4ecc194d1239c7e2c96732f7a2559f470d34df6"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "e973015f-b916-4ff5-8622-8f58cf8cbd14",
|
|
"value": "69.61.38.156|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "e03a72c1-fe7e-4138-ba55-a350846bd805",
|
|
"value": "CN=errvghu.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "414f8925-abae-4f37-aa3c-58e7f3a9e73b",
|
|
"value": "c14a892f8203a04c7e3298edfc59363a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "f8150826-6529-435b-a385-d5ac0de3d030",
|
|
"value": "f01101625a8ce165ef52230ce6232066c5c93f9e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "aecbb46b-af1c-4b6e-9559-37b291a65eeb",
|
|
"value": "aa4d6ab28e11b508d899c11c417678017a355e563ca2869dc5ba306ca8257f7f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "69f2a674-238e-4210-a0c8-d90ed759bb5c",
|
|
"value": "45.34.6.229|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "f7e6fb98-6c84-42a6-ab6c-07467dee9595",
|
|
"value": "CN=harddagger.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "7f8596f0-5b42-443f-adcb-775fb04cdcd5",
|
|
"value": "7ed16732ec21fb3ec16dbb8df0aa2250"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e215ff8f-fdd1-4748-baf7-9778ea21c70d",
|
|
"value": "321833abdcc08ed393b589b1404065dcae4683d0"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "514af8a4-d87e-48ed-a4a7-858fea4fd05b",
|
|
"value": "ac29dee3554729861ac30308c8767b08256a1f32333cbbe7dedd06152d8fd9c0"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "1b1ef17b-dbfc-49c9-88ef-0076a1caaafc",
|
|
"value": "45.34.6.226|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "6f7036dc-2f94-4bdf-90a5-4c757d7160e8",
|
|
"value": "CN=getinformationss.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5f30dbb0-702e-4467-a4fe-30d35da263f9",
|
|
"value": "1788068aff203fa9c51d85bf32048b9c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e2f03e39-5d7b-436a-89ed-dd580bb40261",
|
|
"value": "7d74898dd525aad9ce90e9ffb80c1f85d68a7091"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "93c29c23-17c3-4ee2-97a2-fbd4c8ebc12a",
|
|
"value": "d68822f4ab1a7f343d52489ae80cadc1cd83539c7fed23f33ed39a5f94ffa536"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "580b43e3-5529-4997-a017-5defc7746f90",
|
|
"value": "45.34.6.225|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "99bbe2ba-f6ea-4401-89ef-4b54816528db",
|
|
"value": "CN=gameleaderr.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "b8c307bd-cca0-4e76-ba40-76ddb805da5c",
|
|
"value": "0fff2f721ad23648175d081672e77df4"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "33842538-7113-4454-a842-8e32efcb83cb",
|
|
"value": "71a5f31e80cab1a5040da3cafdbb5b71b8ea8922"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d56209c3-5f16-444b-b86f-d753792c6327",
|
|
"value": "b1f6b17fbdaf46723551d443681e9122b09ec2f0f8600e581e4fecb6033b3298"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "628e6552-f101-4ce8-8b91-fb40e60dad25",
|
|
"value": "107.173.58.185|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "03e5a8c7-2615-436b-8235-87de98266227",
|
|
"value": "CN=razorses.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "74e15372-686e-4231-8dfa-6a8fa6f8921e",
|
|
"value": "b960355ba112136f93798bf85e6392bf"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "239351df-02bd-4458-bd45-4bffce197635",
|
|
"value": "248e9b33fac5937abe69312c7e8f641837cd3672"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "2bbc15e2-2dcc-4bbc-ba3e-ac57ac49c80f",
|
|
"value": "af794805f6af2206b5bcdfffc86c54a5f1717ad93f0a44da4f87a87a719e2d85"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "53f7fd8b-2478-45ed-b56b-3fe7046bd550",
|
|
"value": "107.173.58.183|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "fc091243-be49-4088-b285-2e26644776d4",
|
|
"value": "CN=nomadfunclub.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "a2a93443-61ba-400e-a963-6236d47a4bc8",
|
|
"value": "a3d4e6d1f361d9c335effdbd33d12e79"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e842a429-cbbf-4044-a955-deb5194fc964",
|
|
"value": "e2132ca429aef3fa351fe15b2c257657375bdc35"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "4fe4fb36-1361-415b-9f54-c2ec00465547",
|
|
"value": "a331a499d45fd5424c9ebc95229e0becee3cbb6b46a95cdba67b0ef2c7d7f69c"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "0ed4f387-d295-46ee-96a6-26163e56a6bd",
|
|
"value": "107.173.58.175|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "4c6ebcfd-ad22-4f9d-86b2-4235b72b74cc",
|
|
"value": "CN=bouths.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "fdb0d4fc-d109-4436-8505-43138a798732",
|
|
"value": "e13fbdff954f652f14faf11b735c0ef8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "7d91b537-64d0-436d-b13d-cb6848f00c2c",
|
|
"value": "3bd508d74b240e3b5c27975cef1a57e607e7f094"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "55ba3e34-cf13-4f86-b248-d8149e41953f",
|
|
"value": "0b9cd8f486dfc94feed71be0d30561adc40d7d7f2d9609fd258c6ce7bb15da09"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "dc8e189d-55dd-4be3-b8a8-2fe2f53c27a9",
|
|
"value": "185.184.223.194|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "80a849ad-2185-4477-a80c-d7e08d8c3bca",
|
|
"value": "CN=regbed.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c4dc42fc-59a0-4ec1-8ba8-f7c595846e9e",
|
|
"value": "67310b30bada4f77f8f336438890d8f2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "dadf2647-a15b-4a46-8569-5c05da781b4f",
|
|
"value": "f7acd5fcee54ed881ba4137ecc4b6f51237536b6"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "15e196fd-2148-4907-b0d4-2c58ab57610b",
|
|
"value": "3664508b9ef4fbf8e2f5e0c2a125b7576f307029960be28f78b5322ea17286e0"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "a8a3da68-5e7e-4458-a447-c1e90c39e121",
|
|
"value": "109.70.236.134|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "d9dcbace-8121-4b57-b231-0cf9c2aae6d5",
|
|
"value": "CN=vnuret.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c39e3a99-3a7b-49b8-a793-b57c6f58bf5f",
|
|
"value": "ae74cbb9838688363b7928b06963c40a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "55e45809-c9ab-4ded-9eac-aff00402bce0",
|
|
"value": "e79668f5841c0bb454fa46857f0747e4f08ad62d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b818f2c9-d8f3-40e1-ab62-0008dac14773",
|
|
"value": "768182aae020e240a5ccf9c938807ea272c8c532c653253fa8e3bf25a52027a2"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "5ca1ead5-57e9-450d-805b-2f27d7e1881d",
|
|
"value": "64.44.131.103|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "8eb11483-00f0-4da1-9513-59d90716862a",
|
|
"value": "CN=serviceswork.net"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "e109a3ed-241c-4d0d-8a62-55a0cdaec442",
|
|
"value": "af518cc031807f43d646dc508685bcd3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "72c1f242-1711-4a64-9eb8-11f98efbd3d8",
|
|
"value": "80987eb71f88e6e2cc91ed13a38ae56fdb4eb2e2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "010ea11a-be8a-4d18-87df-83c8f9eba27a",
|
|
"value": "134fcd1e66219839a9cfeeda3ef03e1f7bc75bf89884accaa2de35cc60cb35f8"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "c51cea73-1779-4b29-a38b-15b41af58928",
|
|
"value": "69.61.38.157|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "dd6fd346-ea42-46cc-8b8f-df9722f673a8",
|
|
"value": "CN=moonshardd.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "2a0d3674-f031-4c09-ae42-eea3c135b299",
|
|
"value": "c8fd81d6d3c8cbb8256c470a613a7c7b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "59094cf2-fed4-49b5-9b75-c13920bc478e",
|
|
"value": "d281ff15fb8e3905e0721ef597834251532d32c5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "bd21f8c7-47de-4554-8db4-2f2f8419cdcb",
|
|
"value": "c69b94254d0f0e167beaaa6f83cd60aed8cd7c041056310eb20acdba7bcdc634"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993258",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "278af0b2-7880-446d-b4c0-6f0f47981885",
|
|
"value": "193.142.58.129|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "60951b9d-58d5-4d67-98dc-419d52e73fb9",
|
|
"value": "CN=zapored.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "d91d1a87-9c65-4eb5-871a-350e88d48c67",
|
|
"value": "5a22c3c8a0ed6482cad0e2b867c4c10c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "942994e9-2837-4838-a351-6d2498060da6",
|
|
"value": "8f5eefa6274888757db9e3df64c0f58d44d11b72"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "5ce6eacf-36a3-4cee-b428-e2239337a261",
|
|
"value": "c1e985ae6a4c689dce8314fe4dfa4b8a64ab71a78afd65927e2184c920b47d87"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "1568b954-f3a4-41ed-a269-05c9c3115847",
|
|
"value": "45.34.6.223|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "90911197-b866-47c8-b81b-c91aef1e1f4e",
|
|
"value": "CN=hurrypotter.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c9749630-6f3d-40d1-9595-c432426dd72e",
|
|
"value": "bf598ba46f47919c264514f10ce80e34"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "9b4d7ba7-0871-4992-b33d-fcea9c3d5706",
|
|
"value": "eac1357a85aeaf5317a59b37988ff8da4bdf7c7b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "2ff6bcfe-d157-49d4-9e0c-5d099e81a4e7",
|
|
"value": "222c65d6214b8aa693aca5f0dbff4393211c5bdb26469fe013c6b8b37d955895"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "a10c686e-b98e-4a85-9571-44b567cf1265",
|
|
"value": "107.173.58.179|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "a1ca0093-0776-4457-8df5-215d6e3d13b9",
|
|
"value": "CN=biliyilish.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "15c67482-f1dd-45f4-9995-09898ed3c99c",
|
|
"value": "1c8243e2787421373efcf98fc0975031"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "0a749948-423a-4902-bcde-34c92a592824",
|
|
"value": "24166dbbb60e838b2be0d4067c37e90609b2f81e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "21b7e0f5-176d-416f-88b0-d6f3f23eea78",
|
|
"value": "c20ff644e61e0d0c5cd6b3a06e719142134a87c591156b8137c55b136ec241eb"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "8c7a6911-cd29-43c2-9f6f-836486fb6e13",
|
|
"value": "45.34.6.222|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "424b514a-4d46-40e6-8ecf-e53ed1b7c4ec",
|
|
"value": "CN=daggerclip.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "142fccd8-a0c3-4307-b02e-2e0859a959d3",
|
|
"value": "576d65a68900b270155c2015ac4788bb"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "da02a56b-d3a7-4ca4-ba43-6225c3d92b7e",
|
|
"value": "4850ebcd907367c9ee7133a2c993b3b7c9861816"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "41b2d544-9a25-46d2-945a-4086ac6efa91",
|
|
"value": "4bcf0bae658af0c1600f8a46336997539fa731faf49471babe36f47fb114c0c2"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "8f522586-9b0b-4f8c-afbb-0d7bb4d71013",
|
|
"value": "107.173.58.180|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "d9ec2424-c3f5-432e-a23d-41db0e1a3612",
|
|
"value": "CN=blackhoall.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "ed18315d-0b5d-41f8-8024-0c28b0bd31c4",
|
|
"value": "69643e9b1528efc6ec9037b60498b94c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e83c02e6-80d7-46a6-bb46-ef4bfae477a8",
|
|
"value": "d7c0dbd92b64e88b9ea3920236ed8647fb69d090"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ad3ae248-415f-44c5-bb5d-dcb652f12581",
|
|
"value": "9292a9a0b4c189b2cdedd171a378df59f79a68845cbb7d2aa558aae307728133"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "d10fe2c4-aee3-4c65-9643-2513abce26fc",
|
|
"value": "107.173.58.182|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "a53d3ce9-85b1-4c64-9e08-3274926af67d",
|
|
"value": "CN=checkhunterr.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5a773668-2d2e-42eb-a846-459b94c819a1",
|
|
"value": "ca9b7e2fcfd35f19917184ad2f5e1ad3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "94f2bce0-a4a9-48b1-9766-ac8e929c50c2",
|
|
"value": "61814ecce812af2ab2721a4e3aa29f6f4007e049"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "a79bcf27-4361-4301-ab7a-d9c3f6886dee",
|
|
"value": "e2b5b101bb859da70976a0e0cebefe0fef7661468d557dd12a89bc0c4b1326b5"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "c88e77d8-750d-45df-9219-9d5fcb344001",
|
|
"value": "45.34.6.221|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "a16e084d-69a5-4b8a-af28-3242a219814f",
|
|
"value": "CN=check4list.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5018dd72-a0d6-4e0b-8ecb-cc786d9431ee",
|
|
"value": "e5e0f017b00af6f020a28b101a136bad"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e8090d0d-6b8d-4f4f-9398-6e6ea5bf323d",
|
|
"value": "27671b2a86f211ce561447e25a9f4995a4d5996e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "77926f10-6d14-47df-9239-30882fdaadcc",
|
|
"value": "812ec11429f518e8acd19e01ba7a4ea3fc04659d04208725cd7ab60283ce0aa7"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "8c66ec28-d3ac-4f41-887d-8d95d959839d",
|
|
"value": "213.252.244.62|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "1410a39b-b8b2-48fe-9a64-1791c77826e6",
|
|
"value": "CN=ayiyas.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "0dc76a9b-5449-4135-8ee1-8b71f76ba192",
|
|
"value": "8367a1407ae999644f25f665320a3899"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "8cccb91f-6340-4e21-94c6-6314d59d1892",
|
|
"value": "5bd0b15876004ce7af2218d46c86b8956638f279"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "4c887a69-301c-4598-a986-b99e854f11e4",
|
|
"value": "a80e9ee2fef673d2b0a861f6146c0b1621bfaecd969b4bfa529053c1888c71b5"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "4b1edf04-c147-45c8-91fe-b608b0576847",
|
|
"value": "185.25.50.167|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "1603b793-854c-49b0-bf22-a9c1d129afb3",
|
|
"value": "CN=chainnss.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "f006e272-c0c2-4834-8fa7-f23e467e760f",
|
|
"value": "34a78f1233e53010d29f2a4fa944c877"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "0df6cea0-6cee-4640-9fea-ca165c2c3464",
|
|
"value": "cb118484346b3268a16e58fb3b7da385bf0863d0"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "db26b29b-46b5-4ede-a827-30df27676f46",
|
|
"value": "ef0c51547367d21d4d3c255976be08c127c80c8ac542ab1a3b005fd9ef1f6454"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "2233fc39-2d52-4b76-b4af-f70ef20eda60",
|
|
"value": "88.119.171.75|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "a7aa0b1c-597a-427e-872c-2945310a7c36",
|
|
"value": "CN=martahzz.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "ce2c8cc4-9402-4e68-93bb-68c8e27a4118",
|
|
"value": "eaebbe5a3e3ea1d5992a4dfd4af7a749"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "832a24c1-de3c-40f8-b244-e3cd5ad38817",
|
|
"value": "ee92916b7e31852265eb1611c48f0a75c9051d4b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "4ad4e1dd-7dba-419a-b98c-b1a8c67051d5",
|
|
"value": "aa82203d08e8c4268aea33a0130691c46d6b877bac150cf89940031b8e30c297"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "4b6e869b-443f-4e8b-acaf-eb22b33f5178",
|
|
"value": "88.119.171.74|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "17caff3c-6246-408e-b1c1-54b6bdd3a979",
|
|
"value": "CN=jonsonsbabyy.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "fec03c15-542c-4c74-af45-f326c770a6d2",
|
|
"value": "adc8cd1285b7ae62045479ed39aa37f5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "6deb89bf-d428-4fc9-a0ef-bc2dcb88f4e1",
|
|
"value": "c8870ae156e2365cbe233e0762e3d63650aca3e3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "78379b8e-7895-42ea-8197-a8de8ad06660",
|
|
"value": "3da68b366ee4013d48c0b2e5712aa208970a92be918198950c1a5a6223b6c219"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "e7cf4e2c-08a9-44db-9f9f-e509712aa7e7",
|
|
"value": "88.119.171.55|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "3c74a814-4db5-4b77-87f9-f056d4dbbbbd",
|
|
"value": "CN=tiancaii.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "8ae5cf6a-df99-453c-ae46-8142abbbe3ed",
|
|
"value": "bfe1fd16cd4169076f3fbaab5afcbe12"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e2d35926-7cdc-40c9-bff9-2928941af9be",
|
|
"value": "f2b7653b132d60b7b2f9e461b6f1e60426af85fd"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d8e7ade4-2507-4069-bf00-1e360f176d7a",
|
|
"value": "d3f586b4e077e7d7b7abc0b287d1868c45d3bb51e59d9b672815131360787033"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "fe745970-772a-4e28-9004-d03b4a31c67d",
|
|
"value": "88.119.171.67|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "59494401-004c-4805-a6b4-d15efc3c6c74",
|
|
"value": "CN=cantliee.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "e2ba599e-07b7-4463-b541-516a2ae7fcd2",
|
|
"value": "c8a623eb355d172fc3e083763934a7f7"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "2460711b-3126-4a43-a42b-6abd08582509",
|
|
"value": "d9c47cbae48e0edb64272e0a3a434c15b15b5dde"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "137e47ee-b6cf-42bb-90e1-a8a99d10a92d",
|
|
"value": "dbf0a3b9b9b2a6b8b616574e40f29ad2a0e73ee40acdddd8db8c94f8e75b8d8e"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "86bc91a3-4c10-4178-aed4-61d930fc9cf9",
|
|
"value": "88.119.171.76|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "691c52f9-0fd6-4a73-ae40-aa868f40546b",
|
|
"value": "CN=realgamess.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "8ff9b4a2-a9cf-45c9-b0c2-933c1c009076",
|
|
"value": "0ac5659596008e64d4d0d90dfb6abe7c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "f886bce4-eacb-4e99-85de-8ebe88c38c2f",
|
|
"value": "4b240764f897fb1707e092e4abfcdbbe46dc883d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d799347d-02af-4fc9-a56f-582fed62d461",
|
|
"value": "ac083058a2fee2e716c7b373528707edb9a9a9e194201c8d5f74c363b1383d4a"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "58ea79db-b261-4528-9b7a-a62d85e27f84",
|
|
"value": "88.119.171.68|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "5a201d17-337b-4f7f-a0e6-2ef71d23da34",
|
|
"value": "CN=maybebaybe.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993259",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "d3ad1857-f39b-4218-a6e7-8d29a5338c04",
|
|
"value": "48003b6b638dc7e79e75a581c58f2d77"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "2cf3029e-255f-43ff-9c0c-6fda843404b7",
|
|
"value": "a0c9f25e1c9a6963118eea8f49fa65eacfb93973"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "17130833-f0d7-4fdf-8c61-b4faa58a9d61",
|
|
"value": "d3ab1f3333a7567cde89eb9436960c84f9bbc09722f81ef0e5d28f20e659a7bd"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "34ef788b-0327-4a40-9cc5-5b4c51369047",
|
|
"value": "88.119.171.69|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "14bc5943-41e8-42c8-832f-fb83a0030ef6",
|
|
"value": "CN=saynoforbubble.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "5c36a15d-1621-4d38-b6a6-ebd23ca29553",
|
|
"value": "5c75a6bbb7454a04b9ea26aa80dfbcba"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "594b00d4-c5b3-4086-a686-ec30ed2a1bb7",
|
|
"value": "d9cc74b3dba2703f75a215eb865a4e6e495ced06"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "916bfab6-a92b-45b2-a5bd-f16a66ba6214",
|
|
"value": "a7d14ac933639fe20d7b93df84f1292aa7492387e17260d72d6769c084235c08"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "3a34a18e-56c6-4a81-9d2e-50855ccffa64",
|
|
"value": "88.119.171.73|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "4bbed2dd-27bb-4ccb-a5bd-6b9a842f2e5b",
|
|
"value": "CN=chekingking.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "6669c0fc-7399-4baa-ad90-34708b0879c9",
|
|
"value": "e391c997b757424d8b2399cba4733a60"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "abad086f-7325-435f-aa41-6a88129b3e22",
|
|
"value": "b374522b6396b1f568457d369e9d8e304ac036a7"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "bb2e642d-5444-4959-890f-37e4c80be6d5",
|
|
"value": "e509385983e26519aaa400f7b06179c54b6917e3664c9ebfdb56bc01a70ab868"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "3751124b-7bc7-4838-9851-bf78f022ffc2",
|
|
"value": "88.119.171.77|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "4f291207-3c62-4e7c-86e6-556d6edc099f",
|
|
"value": "CN=wondergodst.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "4f11c69c-e5af-44d2-9d46-044287d446f2",
|
|
"value": "035697cac0ee92bb4d743470206bfe9a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "83536038-c83f-4051-9ca8-ee3567162879",
|
|
"value": "1cd42195ad924216fcce3863e026f4a87b4aaee2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ad09fb43-3c66-44f8-b672-437949d266c3",
|
|
"value": "9bbb72518c024edc55b270fe0816db1f0fd86191cc878f7be9486c2e66cc03c2"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "bddb87b0-441d-4686-9231-ef41f3b40949",
|
|
"value": "88.119.171.78|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "3f00db76-6c96-4a6b-9993-bae585317444",
|
|
"value": "CN=zetrexx.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "078ca1d3-de14-4396-91b8-085498866d05",
|
|
"value": "fc133bed713608f78f9f112ed7498f32"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "ed4b8afa-556a-4046-98bc-912372d56f63",
|
|
"value": "87dd4a608135596ecaffcfb96f1a8a4aed026119"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "9088f1af-33be-4deb-8200-e85aca01fa55",
|
|
"value": "da5061433685ad7ac4ea986a82209010a6b2dae8566df43f015361e8f275a5a5"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "da7a6336-01a8-45f9-93a4-6429089fd567",
|
|
"value": "213.252.244.38|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "e4f1775b-fc7c-43ed-9c44-ed84c191d861",
|
|
"value": "CN=mountasd.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c853633b-8979-4117-bfef-d1d0c419f676",
|
|
"value": "8ead6021e2a5b9191577c115d4e68911"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "09dca847-1743-40ca-9578-ae6e16f1de6e",
|
|
"value": "ed7e2bc094deda6faebae2277511c9d9d54d4c88"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "02bd54f6-4483-4ca6-8f66-1b9258569914",
|
|
"value": "1281fe55f97251df0420819582afebf63b4f080ab99a4a9e0242b0deb2d9d117"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "df5cc112-220b-4590-97f0-4c91b5108878",
|
|
"value": "107.173.58.184|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "5816bc97-9eb2-4043-9fd6-0e13d909e798",
|
|
"value": "CN=pudgeee.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "71d4a1b7-0b14-4513-80f9-da2363060bd0",
|
|
"value": "1c9949d20441df2df09d13778b751b65"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "f24181fc-9a9d-4929-ae05-5cdfff6a0506",
|
|
"value": "c7b0f4ffcce520791736473e6261d6a72eb1d304"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "074f4ca9-f3f6-45b9-baf3-e80f10e19049",
|
|
"value": "7f282468dedb29a3dddca65a717425bfe923e5de747c2814f8af82850945841d"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "38120356-e54e-4e44-8d7b-a6b1606ff57b",
|
|
"value": "88.119.174.109|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "0481b9f7-17c8-41c4-a73f-11beac10d856",
|
|
"value": "CN=loockfinderrs.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "e6a5323e-6a4d-40ff-b7d8-c0f2cb91801a",
|
|
"value": "c0ddfc954aa007885b467f8c4f70ad75"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "094865d0-79b5-42fc-a48d-4a079124b039",
|
|
"value": "75605cf169d66ec948340774e50d5f5ea13900c9"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "9105a326-b4e8-404a-8a8e-208b121ccd91",
|
|
"value": "042ee6d0b7ac46062ccd59630045ca12855a747f016526bf4a34ebe901fb67bb"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "7d264264-99c3-48fc-a5e3-82536e063356",
|
|
"value": "88.119.174.110|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "d648437d-3d48-4c22-b29f-b99f58d5dc26",
|
|
"value": "CN=puckhunterrr.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "b36f0881-cbf7-4d03-aa34-0ce9f372166f",
|
|
"value": "ee63098506cb82fc71a4e85043d4763f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "a6e7ba16-fe4c-4e99-ad2b-e1a4767b46ff",
|
|
"value": "0fd6ce3d7e779135cd0dbb8351ddb79db8b5f8a6"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "374e5eff-8741-4abb-908f-3d7c60a6dc81",
|
|
"value": "6e4a38ebaea3e6cec375dac16a73e86fa7d69c3be506770f8ce65b11d98383dc"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "396af692-dd97-4164-9ace-2d3134c9270d",
|
|
"value": "88.119.174.114|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "82019aa0-49c8-4117-bd46-18a888cfeb8d",
|
|
"value": "CN=voiddas.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "4f528873-a9d0-4822-90c0-7db6b4f77907",
|
|
"value": "422b020be24b346da826172e4a2cf1c1"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "7fce281c-b99b-4bd6-aedd-cc50f43a18e9",
|
|
"value": "f1c8c8a4c345abe865ea6ab7da51b686a2321689"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "e68278fa-3d7b-4a85-bcf7-6e6957806f5f",
|
|
"value": "1c2118797e02f339eb68a2c68b85c307f6f4fc2601c62e7b39a2e5c5a0141922"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "5b6ff600-0d89-4f41-abbf-eda687f651d5",
|
|
"value": "88.119.174.116|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "d5faeb05-85aa-4d95-8f26-a1b5025494de",
|
|
"value": "CN=sibalsakie.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "9d0e77ea-8e8f-4fcf-8ea9-ea5d994823ce",
|
|
"value": "8d8f046e963bcd008fe4bbed01bed4c8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "4817a2f1-d041-4ee9-88ce-b29331cc029f",
|
|
"value": "4a35689b505035a9318250ee82d9a36a5d4d2c2f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "e08d4c90-c83f-4c03-9612-53dcaa75ae43",
|
|
"value": "2acf1e46099656de27c404930fa366f608f635b8a3c5d492a6192b7ef38d6893"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "d347eb03-58ec-4f76-8eb4-11545fecc383",
|
|
"value": "88.119.174.117|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "c4f07a21-26a5-4d0f-9d41-6f400fe35f6e",
|
|
"value": "CN=rapirasa.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "69dfe4a0-15fc-4e24-b872-f2736dfeca69",
|
|
"value": "c381fb63e9cb6b0fc59dfaf6e8c40af3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "ec7535e5-e5d0-4853-9ba8-2c3a8e2ff1e1",
|
|
"value": "f763022f12ddb4fd218226612d3a02c7dc2fc959"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "deee1be5-93fc-476e-82c8-4bca3afd862e",
|
|
"value": "5ea854e96401acb31810be8969eb6aebc2d68dcfc0c4a2d1a954bfda0a9620f3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "c4553cd7-1c33-4905-8434-abba42d5c384",
|
|
"value": "88.119.174.118|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "bcab3f17-47db-4396-8576-97474ccef51e",
|
|
"value": "CN=raidbossa.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "73eb3a4b-6564-4c65-9313-6ed7ae14ed3f",
|
|
"value": "add6b742d0f992d56bede79888eef413"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "58a481b2-7a4f-4700-aefa-3e19917e7fcc",
|
|
"value": "24aced0224bf620f5c501409a30bf350e6bb0d35"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ca378a48-0034-4f20-bac0-f5eb34b106ec",
|
|
"value": "2f19e28869c1794fe45fc635c229f427db0ab1b8cf9f16624f2c512c99d084be"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "e99246f6-2e78-4695-ae86-659f2a48431e",
|
|
"value": "88.119.174.119|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "bf9e5427-d1a4-4e11-8306-3073094b5101",
|
|
"value": "CN=lindasak.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "7856838f-d0e2-4f5c-9dcb-22b1f139f5e3",
|
|
"value": "9bbd073033e34bfd80f658f0264f6fae"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993260",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "7561fbc3-b13d-4fa7-806d-3a14a23845a8",
|
|
"value": "38248f4c139c162018b5a64cbd98084436808549"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "423d1e97-8663-4cd2-9afc-765f0c26d025",
|
|
"value": "c92bfcf1e8f8e82d74ce33163a1160c1d3bca5cd9c9a99516735d4aad6cfa25e"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "2eed8679-8fc2-41f4-a5f3-62e312687fb0",
|
|
"value": "88.119.174.121|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "9b994693-ebb0-494b-b705-069459319aa1",
|
|
"value": "CN=bithunterr.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "ec22f7c7-2f8c-4ba7-aed6-cec3a2e59b78",
|
|
"value": "9afef617897e7089f59c19096b8436c8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "43abee99-b5d8-49f5-99a5-5adc6b5ac1d1",
|
|
"value": "5ff484b5af4bdba94ff7dd9cec25857039514770"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "9d644de9-e56b-4798-8564-9db5495fbc70",
|
|
"value": "f802c6617afba516a0bc125b73449485e83aa926ac9fdaa42877d9ee2547955f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "1716fb63-98f8-4f81-9e70-8354f62f4318",
|
|
"value": "88.119.174.120|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "55dc07f8-34b5-4d3c-82b6-62998c61f449",
|
|
"value": "CN=giveasees.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "659dafde-8390-4b76-893d-ea2e655d331e",
|
|
"value": "3f366e5f804515ff982c151a84f6a562"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "6f9f2a7e-a1f6-40f0-8e1d-983969f0a0cc",
|
|
"value": "9f3b1f1a0cbdd54d55e7b6b0bfde39e2aac5f5a5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ff2ad249-88ae-417e-b78c-cad68122c770",
|
|
"value": "36c41b0a3bf491e5d4e5278a4487f303c90ffaf6925d7a981e48f14fca09b60f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "19cc65e9-5c7a-423b-94c9-587ae68c45ff",
|
|
"value": "88.119.174.107|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "cf57bac3-8437-4892-8723-6b5291f142bb",
|
|
"value": "CN=shabihere.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "346af9de-fb47-4afc-a53b-5cd6096a2d17",
|
|
"value": "c2f99054e0b42363be915237cb4c950b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "2fc60d7d-326b-46a6-a600-f2d9900d3bba",
|
|
"value": "d3b80a6b3c045ec6662c5f39b01fa9dd7cd4d603"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "c5183af6-b043-46cd-bc5f-392b4bbfda3c",
|
|
"value": "96cc2b6ba1cb8c6dee3d27d8b2e4a9ac81d05c2068f8a357b9225b6227068950"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "4dc6696f-9f55-4837-9944-405eddb6ceed",
|
|
"value": "88.119.174.125|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "473016f8-1dae-4891-9c27-524f3e026f1a",
|
|
"value": "CN=tarhungangster.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "3524d0ca-32b9-4cac-ba24-5ed8a89e28d7",
|
|
"value": "4ac8ac12f1763277e35da08d8b9ea394"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "bf76ee6b-79e6-4d5c-9d7c-27a5f9661e8d",
|
|
"value": "14ed7ae76a621f6aaf5110ab747857670f440783"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "715defbb-81bf-4cae-870f-251d9787b0db",
|
|
"value": "4e3259151e9d03f81c8364a62ac804d7fe62b905fae04fc52ad9e696d9d5421c"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "651c3e9c-f885-431a-a976-abdac17ec305",
|
|
"value": "88.119.174.126|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "fa864cc6-84c7-4172-9dbc-65e745543f7c",
|
|
"value": "CN=imagodd.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "eace9a4c-6187-46d4-bc09-6ff98619e625",
|
|
"value": "7080547306dceb90d809cb9866ed033c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "f30e0ac8-6d4a-4d20-a0e0-80cca57ea302",
|
|
"value": "efae6b58763a9d58d884d6ee9232eff55d4e302a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "7ce7a2ec-7dc2-4453-be08-74ee4fdedb85",
|
|
"value": "b37e2c3d5f8e8c3e794c393a776d756c4af53134d4dd8c0fa1beb7def345b72e"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "081b1df1-63f1-4dd7-9b1b-b56fda01d7aa",
|
|
"value": "88.119.174.127|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "f01661a4-d293-4a07-b47f-765403708cf0",
|
|
"value": "CN=raaidboss.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "204bf892-a89e-4fd8-be71-47454ccebeb5",
|
|
"value": "03037dff61500d52a37efd4b4f520518"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "453403e6-dec8-4509-bcb8-d9bd337e5767",
|
|
"value": "1a646c21146b9104e8e7e178b4ef147961ef59f7"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "7d63e63d-2004-4522-99ec-97c49d4abdeb",
|
|
"value": "ca7cd832286322c4de026cc26a4c2b465c08f94415145f7eecb7e9b7338e1370"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "d822b308-d00e-4a17-badd-15b12543640c",
|
|
"value": "88.119.174.128|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "b64988fe-d0ed-4aa8-bdcd-d303b62a8f9e",
|
|
"value": "CN=sunofgodd.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "991128d8-98b3-4d53-9235-388caeea47b2",
|
|
"value": "959bed7a2662d7274b303f3b120fddea"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e7c3c49c-e35d-47cf-b9a9-05546b4d70d3",
|
|
"value": "b1f5a40ef9aa7180101b2e05af43871df777f840"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d37df7aa-34c3-4556-90d5-518517f6a03b",
|
|
"value": "bdd26225c1268a7bfa274fea43df895308d3c8c8b67e6e5f602577a4035bb5c1"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "1a176844-25b5-45f3-b33e-71d7d007a46e",
|
|
"value": "213.252.244.126|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "73add41b-cdc4-4f4c-bb8a-bc8d96820003",
|
|
"value": "CN=hungrrybaby.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "7d2f9e5b-e330-4fe8-acc8-029a407f0cfe",
|
|
"value": "1d28556cc80df9627c20316358b625d6"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "cfdd50f4-b2c8-417b-b94d-630e8c20c6eb",
|
|
"value": "12aebbd99d54286c77ceb2256546b50c2256110f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "1c455b52-f9cb-42b0-a889-27a7c5387530",
|
|
"value": "81a840fb6ddec8875e4e3049af252dadda5962c476d8f8138af93796f9441c6b"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "23735464-e737-41cb-9ee4-3e7e0016163f",
|
|
"value": "213.252.244.170|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "eb5dd8bf-ccb0-46c3-ba7e-9a4a4477ed7a",
|
|
"value": "CN=loxliver.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "f290572d-ed9d-4bef-969b-d23615919a1d",
|
|
"value": "85e65803443046f921b9a0a9b8cc277c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "f78188cd-db76-4496-b9e9-fd62b29fcd93",
|
|
"value": "1e469db70c11e4df8084609f3793ab04389e6e05"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "e686e9ec-4fc1-4a16-af71-03658e39e680",
|
|
"value": "7b988f9b38a6c581fe1e36599f2dcaa40ec2706e1718dacce64032b9d25740db"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "0e9fa37d-53a7-46da-a3f0-e7735b5c59cd",
|
|
"value": "213.252.246.154|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "44df2d3c-0933-4135-b3b8-06cb457dfdbb",
|
|
"value": "CN=servicegungster.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "f34398d9-1ee3-4ccc-a384-79bb1021ec90",
|
|
"value": "9df6ba82461aa0594ead03993c0e4c42"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "65b486c3-e2d8-4e3e-9db3-e7ddc2b97f09",
|
|
"value": "8b3683e97066f0cf2d36eab3f51f4834f1c55b57"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "e8330264-7dc6-4626-ab7b-af151fd09864",
|
|
"value": "28525ab38298c517f505adc83084672d2bb6050f4943c0f73594eace7630cd08"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "31751d1d-b3c4-497b-82ec-467c1acaf539",
|
|
"value": "5.2.64.113|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "eaaa620f-3d0b-43e4-968a-4bf3e26af0b9",
|
|
"value": "CN=qascker.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "8d204451-724c-4aba-bb11-a7dae13fc152",
|
|
"value": "18aadee1b82482c3cd5ebe32f3628f3f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "a75ec48b-6cbd-4dac-baf0-9d1e0d6eafc4",
|
|
"value": "8d493f4d4162073fd13faee3c1f5f27f6f6ed401"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "fcc62b2a-1029-4691-be31-8ca062fd7117",
|
|
"value": "a5458466789d90b4a4c95dc4765e357fe71d1815fbbc04b4f5aea7fecf320d61"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "9353295a-0d35-43d6-99bc-69aec5fac20c",
|
|
"value": "5.2.79.122|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "2dd90747-4d56-452b-8cbf-1171d2b5aad5",
|
|
"value": "CN=cheapshhot.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "666ba981-fa78-4251-ad5f-d74b062fc859",
|
|
"value": "94bc44bd438d2e290516d111782badde"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "1b313f50-fb51-42dd-82af-29a0be25f0f1",
|
|
"value": "1ac482a024ba540715ebbad9e7227c2b3a2b5088"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "6a12b651-7882-4e92-96fb-e76921172edf",
|
|
"value": "56d240302f4b28a81026650120840ba3643dffff2ca573d4c565e6a36ef0f035"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "cfa6413a-8819-4c2f-bfda-5b5423410a33",
|
|
"value": "88.119.171.94|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "90c0c67f-dabe-4101-b9a6-a169b1480cce",
|
|
"value": "CN=havemosts.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "1c8f26b6-d746-4d33-a10e-471507effc54",
|
|
"value": "f0ede92cb0899a9810a67d716cdbebe2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "5eb51362-d855-45fd-8318-03eb88d940b6",
|
|
"value": "2da9c240a576d7759acdf32e2439bd796c4fbcf4"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "4f1ed871-98b4-4bb4-9841-99b709729026",
|
|
"value": "6806dbda2c27cee9a9985bfbfd3d4be798c60c7c91295603d404d140fa94f97b"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "101715d9-c626-4b74-b86c-b2e6610c4d46",
|
|
"value": "5.2.64.133|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "232bee2f-44d6-4360-9845-c4fdca9ff9d3",
|
|
"value": "CN=mixunderax.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "ac215c5a-0d02-4417-a7e2-362e246ea86d",
|
|
"value": "e0f9efedd11d22a5a08ffb9c4c2cbb5a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "563c40d7-0243-4126-9239-9a94fd5a3b92",
|
|
"value": "98d52f82bb0d70bb87b1c139ccba51496f887d25"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "dce4ec6c-6c27-401e-b36c-6eb476727524",
|
|
"value": "18ecb205501b4e0d80cbc0cbb862be8d1e6eed49a7f0eba1862ab30f1fbf2940"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "53c5eb1d-77d0-445e-9cec-b36a463399ab",
|
|
"value": "5.2.64.135|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "db10e884-4af3-4c35-918b-240d5d779c51",
|
|
"value": "CN=bugsbunnyy.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993261",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "15f88af0-84f5-4073-bdea-f6a29b07bc8d",
|
|
"value": "4aa2acabeb3ff38e39ed1d840124f108"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "de7e8750-89ea-45f4-aae9-fe213eacad5a",
|
|
"value": "ddce9c2b6dd06b94f6188e63b259026f880df88f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "2bf845f6-35f3-40ad-8067-98fbddf1ee2a",
|
|
"value": "de0a60f67fa05ff0885fc23e6814618f9632837ea30e14f9eb2db3b512e6533c"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "c40c1146-e62d-472a-9a3c-f28bd39836ed",
|
|
"value": "5.2.72.202|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "bd125b41-a433-4666-be4a-a5fc58400777",
|
|
"value": "CN=sweetmonsterr.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c0121496-01ed-4c90-a827-7d7b35a812e8",
|
|
"value": "c04034b78012cca7dcc4a0fb5d7bb551"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "12c8056e-610a-4d47-8666-a9558bc3236e",
|
|
"value": "43909ed10169d23fb94549e0a9eb46ff987c8651"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "60e3e725-a65e-49cd-a610-291f9a436457",
|
|
"value": "fc9804f6d67f9a7259d99e08fa119faee843fba57b081bda1eb1140ecb5a025b"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "78371961-fcf3-4bb2-ba3e-10e579852978",
|
|
"value": "88.119.175.153|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "80abe23a-84fe-4d74-8575-21f21c7e3c16",
|
|
"value": "CN=zhameharden.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "2d42ac0d-4a37-4dd0-9770-905fd6dc489c",
|
|
"value": "2670bf08c43d995c74b4b83383af6a69"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "1e546e3a-9a3b-4d44-8138-07c29463c0e1",
|
|
"value": "97ebe2d432bb5be91298f78187548fa7874ef114"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "c0c07d30-5645-4495-9c54-9c2d4e996058",
|
|
"value": "a6ee5c5609f2b24680d34ccdffcbfd7f19427310a56acebf3ee544ef4b39f41c"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "9a827bfa-4c3a-421d-991b-c5d51a5190d4",
|
|
"value": "213.252.245.71|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "86ccd931-1620-4660-b5b6-dc8ca36c9ddd",
|
|
"value": "CN=serviceboosterr.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "667c1b81-2fc4-4c7f-a63e-d66df83f6818",
|
|
"value": "127cc347b711610c3bcee434eb8bf822"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "5fbea045-a8cf-4a36-bd51-6ca90e344123",
|
|
"value": "6af76b92e0e0db69d1024bb66eaa9bc9c5c7947e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "30e6ea20-95a6-4a2d-88b8-6caad185973f",
|
|
"value": "7f7dbb5bc8f71aaa72668b0c10e19564cbb4923fda9cadffa6face516fb6118e"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "28187ddf-21ae-455d-bf2a-3d2fe4ee24c1",
|
|
"value": "213.252.246.144|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "d39d042a-112a-41c5-80ba-817726d07e5d",
|
|
"value": "CN=servicewikii.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "e1bfd63d-7aa9-43fc-a8f4-54d336bed3a2",
|
|
"value": "b3e7ab478ffb0213017d57a88e7b2e3b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "d33df106-a467-4d77-b3ec-317b991f21a2",
|
|
"value": "34520ae25df006350a174c287e0d4b179fb148b7"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b99b4908-9f61-479b-a35f-efeb8242bd0e",
|
|
"value": "e4377215cf961dd74837d755ac315912c2c820cf5eceff2891138bf61b315a68"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "bc088d81-c1e5-421a-b531-62e91d9fcdf1",
|
|
"value": "5.2.64.149|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "1d058681-599e-41f0-bcec-e1368fab21b4",
|
|
"value": "CN=sobcase.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "931a7243-1929-42d0-9b29-df6e380e9ce2",
|
|
"value": "188f603570e7fa81b92906af7af177dc"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "cfb8fe87-bfb9-46fb-a781-b2175b79aeb1",
|
|
"value": "aeb22ee63fbf416a0a9bf6d855dde5a16a72f88f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "520a0a16-b44d-4750-a7d1-ab941604554c",
|
|
"value": "6447cab0fcd91a9087c2d60cc6d3b2b4f0f4d5e9418d7c6f4ec375d5f3b396d4"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "025f5a22-f099-43a5-bc92-1fcde0856cdc",
|
|
"value": "5.2.64.144|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "93b8e4c8-e232-4caa-88d9-f07241933d58",
|
|
"value": "CN=unlockwsa.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "6a70f787-fd3f-4450-917a-921a436f13fc",
|
|
"value": "22d7f35e624b7bcee7bb78ee85a7945c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "8c211bfc-260f-493d-ad46-5f99e745a6e1",
|
|
"value": "6bfb6904e052823fe00944f61532c15a0f1a35b3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "a9956620-4c2c-4f3e-9463-e7de943e709e",
|
|
"value": "aefdb31f6f03ad285ac53f0ef3abb6954f8dd866699f9442466e11e36849b2e4"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "29cb7525-70e3-4ea4-ae3d-8715617086b7",
|
|
"value": "88.119.174.139|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "e02b77a3-f9bf-460e-bae2-0036ac99b46f",
|
|
"value": "CN=serviceupdatter.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c0cb10b1-1cb8-450e-8f42-e2b53d18a602",
|
|
"value": "12c6e173fa3cc11cc6b09b01c5f71b0c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "d758e0ca-578c-4080-b412-bf8c4d7265d1",
|
|
"value": "fe561834be5dea2eb7b8047569187f0b43e02f9c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "33779627-a9bd-45b3-af49-c4786b0dd249",
|
|
"value": "8de5d415a3dad09bf3acce487b3395bdebc033bfd0cb7093dd22222b42ce8b72"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "fdd814fe-b941-4f96-b12b-f81288a1b9e2",
|
|
"value": "88.119.174.133|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "7f4a7731-40bb-4e5c-a605-5fe897a962bd",
|
|
"value": "CN=service-boosterr.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "559306d0-8bbe-45ed-91ed-97c94f062ba1",
|
|
"value": "28435684c76eb5f1c4b48b6bbc4b22af"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "0bbabe30-a13f-4eeb-aca7-180263a73d7a",
|
|
"value": "ad2bd386a7512001f552e4b28986cf6a6293b94a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d231608f-a3f2-4ff8-bc99-1e8bccceb430",
|
|
"value": "88f35280b7f17f156c331a92d7e608091908cea906b01a0ceba04f91302dac40"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "d7e2f2de-d3be-4fd8-817e-e80686513725",
|
|
"value": "88.119.175.214|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "d1519426-da7a-4649-bbfb-f12074cf7e5d",
|
|
"value": "CN=dotmaingame.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "eab394df-c70b-481a-a687-6e48d7a21729",
|
|
"value": "9c2d64cf4e8e58ef86d16e9f77873327"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e5b5aa67-b3d9-4c75-b400-52bd1fe70fdb",
|
|
"value": "a591832fb7bba5b787fd23f65b6ba4bdb1ba0beb"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "6d2b0d30-9ad1-4c4e-b52e-5e1c26baf9e0",
|
|
"value": "73275525d6cca5594d266a1be3c74fea4d2ff2e904092ba14b0ee368706d15cb"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "e1424895-44d3-436a-a4ea-70857fae375c",
|
|
"value": "5.2.72.200|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "94e129e6-a1a9-44f3-a24e-ccd1efb7b0cc",
|
|
"value": "CN=wodemayaa.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57b868b6-b386-4b11-b22c-1081f1fdff16",
|
|
"value": "f6f484baf1331abf55d06720de827190"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e3c3fb90-3dde-4eac-9559-6b9f4dc67746",
|
|
"value": "64816461d107afab763789d635bb9b2a507004a5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d39d3e6c-436e-4a60-aad9-74101a108c58",
|
|
"value": "6206e07df0d926b544a50b88f2b723e10b267eff04cfcb4976426c15ec1f5a58"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "98edfbbe-4652-4691-85ee-d2259dc5d05b",
|
|
"value": "5.2.79.10|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "e46d5a41-13be-431f-a5d8-f6a7df0375cc",
|
|
"value": "CN=hybriqdjs.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "832aafce-76c4-46a8-b53d-1b6f77e5d1a9",
|
|
"value": "d8eacda158594331aec3ad5e42656e35"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "2a333f2d-e86b-4276-8458-8012b339bec2",
|
|
"value": "698adc9d76033dd8d67043076fc1e2c6775c7483"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "a528a32e-fbb9-450d-9f54-27cb8b768107",
|
|
"value": "6f71b53a68558751400af357b7abe50adc12d4e6cab41c5d929b71059e02dfac"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "f7331170-da7c-4c3a-9786-cf12b4758881",
|
|
"value": "5.2.79.12|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "cfa1786e-82d0-4458-b699-e016124d92ca",
|
|
"value": "CN=gunsdrag.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "64e55761-de06-4d51-9743-3554247bc1f9",
|
|
"value": "29032dd12ea17fc37ffff1ee94cc5ba8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "a2151919-a80b-474b-8c7a-85e2f746a08d",
|
|
"value": "b618ac106c2e3c419fe06383f8db441e1eacb7a1"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ec4357c1-7861-4638-939c-aa33338fc838",
|
|
"value": "6cf10b3123c11e21859dffdc123cd0f1c307b95dd1c60cbcc50e0f68fa39ca78"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "c1d32eca-f002-4fb1-80e8-52c5a90f6144",
|
|
"value": "5.2.79.121|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993262",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "663e3c6d-9934-4d10-8fd5-f6ecddeece05",
|
|
"value": "CN=gungameon.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "1ff43d5e-3bfa-4470-9cd3-9d0c401b0607",
|
|
"value": "eaf32b1c2e31e4e7b6d5c3e6ed6bff3d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "cd709162-817c-4ed1-aeca-c83ae8e8fd38",
|
|
"value": "03e0687898cb57961c1d41189078d03217e256ac"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "60680557-853b-4b45-bb62-d3469d75e1e2",
|
|
"value": "7de1284a9be8f2f1325299793fc69ad789fdd371dcb80e60d83d8c814ad50d11"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "793fc384-8ea0-4908-9e1a-9c1795c29115",
|
|
"value": "5.2.64.174|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "6edf6335-57a1-45d1-82df-bbc722fe58cd",
|
|
"value": "CN=quwasd.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "6674dc55-11e2-47e8-b618-6b92cac35b2c",
|
|
"value": "442680006c191692fcc3df64ec60d8fa"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "01f134ff-93a6-4dd1-9d47-46e625abf86c",
|
|
"value": "36d568f9be2a34e1763d8978e5624dfcae0297ad"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "40b84471-a00d-4df3-8964-2733b8933c19",
|
|
"value": "2e4e93621b9764c2b909945b8264ec05b891f6dbe307fe2006f06d340598af3d"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "ed5ad7cb-661f-4d61-9ab4-80c297897393",
|
|
"value": "5.2.64.172|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "8f81b80b-c8b5-4c8a-ab20-591e3183b0d2",
|
|
"value": "CN=remotessa.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "61b0b444-6db4-456d-bde3-603499b0845b",
|
|
"value": "0593cbf6b3a3736a17cd64170e02a78d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "fe37311d-9d49-48e7-ba13-877e35e4f79f",
|
|
"value": "e05c9d8da4609a7d8ce53f41c2e823b3b0094302"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "678d51a4-3762-4c71-84f4-2672199284e0",
|
|
"value": "2cb978669ed68235ddab4652450fdf542ec22814907ce402cfa22111c3fbd492"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "4459df64-34ea-4f8a-bf6b-b1b99186667f",
|
|
"value": "5.2.64.167|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "550f9a96-da90-4818-a434-283d73cb4d93",
|
|
"value": "CN=secondlivve.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "444d1992-bf21-4c47-bc82-a95588e60b5d",
|
|
"value": "38df81824bd8cded4a8fa7ad9e4d1f67"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "66a91d3f-c8f3-4c27-a906-74520bf768d3",
|
|
"value": "b7639e6b87924d40aff0757ab549a85beb285dd0"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "05e52def-b366-4197-8598-470cfdef08f4",
|
|
"value": "d7d1829b73982a6a5f08527a061a81119db1e8addf36f88753038af2c44beedd"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "805256df-acb9-40ee-a2d6-62cd59be403a",
|
|
"value": "5.2.64.182|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "f50776ed-df1e-4fb9-bbe9-da708ee0b367",
|
|
"value": "CN=luckyhunterrs.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "bb77aca1-57ba-4554-a7d9-c02113a86848",
|
|
"value": "99dbe71ca7b9d4a1d9f722c733b3f405"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "a78d3912-f892-434e-bb04-f5c8e20badd4",
|
|
"value": "4c19c288d9813c02e9f6b15e623e340f35954303"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "9e50b8d3-955f-4951-9760-c88c20702b92",
|
|
"value": "99389dfbebf0e923ac0546e646be703fcd19a03a6425be7c60fd8a69ff9933a6"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "6821bca8-87a6-4416-83bf-e8d2a36839f7",
|
|
"value": "88.119.171.97|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "b4eb713f-4ee7-4fd1-a44a-21a8832b5827",
|
|
"value": "CN=servicesupdater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "768cb876-c400-4ac0-88a7-8c604ad72cf9",
|
|
"value": "7d7199ffa40c50b6e5b025b8cb2661b2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "4b77aa0a-33fe-46e8-973b-0590c964d75c",
|
|
"value": "b0bed02bc27674ce57b489ccd13ffad341afc844"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "bd2707fc-6913-4ef6-aa60-1bbd9edf8f47",
|
|
"value": "5d8439709508c63cd40d92a136e875d163d7a74f0d9bca5e576377b1f6d48492"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "7c8d94be-76d8-4cc4-b338-74e28ec2fbb7",
|
|
"value": "88.119.171.96|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "5994f579-8694-45c4-a294-b58fe80ac1ac",
|
|
"value": "CN=servicemount.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "27e7ba1a-4ea5-4ad4-80f3-3a25e0bd06b3",
|
|
"value": "f433d25a0dad0def0510cd9f95886fdb"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "eba5f8c4-7e80-466b-8de9-9c352d6739a8",
|
|
"value": "8c6d0ab3f99997ee0bf7e6d9b2cb120508bd1799"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "8dcb8ad8-786f-4581-950c-f2806a2c6b64",
|
|
"value": "38b66ff18a5398257a6b755ba5f526f35a359d99b43ab49dfcf74dc8e1db766d"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "b23ffdfd-6974-42f5-8508-17e4283a4fd7",
|
|
"value": "96.9.209.217|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "cb499764-a7fb-48c2-896a-ea28decb87f2",
|
|
"value": "CN=fastbloodhunter.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "bd9f489d-127d-480d-a30f-3f7235c65487",
|
|
"value": "e84c7aa593233250efac903c19f3f589"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "ed7889b2-5cfa-44c3-b210-1c4be9c775f1",
|
|
"value": "f8d88c2d967938c0efaf05863d1ef12b6d3ff5f7"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "0de3b2c9-f535-4b26-88fc-8e307c8d557b",
|
|
"value": "62c79edba47054f47a50f7b798592ab1868894d9e65a3bcfbaf6485f4a7c81a8"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "1161d3ca-9e47-4ef8-9b18-8eb4a8de8870",
|
|
"value": "69.61.38.132|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "11689be3-7298-4c4b-8351-b665b8617d68",
|
|
"value": "CN=kungfupandasa.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "7d679d15-0ecd-4b22-a75e-f01f239e2ee5",
|
|
"value": "e6e80f6eb5cbfc73cde40819007dcc53"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "2a23420d-0f31-421a-8d79-2cd13cbfeec9",
|
|
"value": "80afd1bea19a98076f51864b1649d295ef020207"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d42c54ca-ce56-4434-8084-160986c9a052",
|
|
"value": "44ede733c69a20e525da028d34c0d9f9473c89b03d7c2b9fad26be852303c53a"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "7da3c695-697b-433a-b0bc-203d47ff5244",
|
|
"value": "45.147.230.131|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "f68b2b92-3aee-4e5f-a254-242496f659f1",
|
|
"value": "CN=bakcup-monster.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "b21f3008-ae7f-4902-9a57-6cbc0a24e764",
|
|
"value": "4fdeab3dad077589d52684d35a9ea4ab"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "fb736483-f6e8-4681-8c13-76a380f984c5",
|
|
"value": "2d9fb5761f3c2a369e1b65250b3b6230d91b8547"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "16ba4692-c233-4342-82d5-1f229dd79dd9",
|
|
"value": "e669b3f2a00ea72d4c906992eaaca3b783d23f0e26331fae6560f63ecbc61862"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "51faf74d-e069-43fb-8c3f-395e339fe27c",
|
|
"value": "45.147.229.92|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "57fe0a24-c828-49b9-9ea8-6baa6a4244db",
|
|
"value": "CN=bakcup-checker.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "0c10771a-832f-4350-bfb8-2e4962bdacf8",
|
|
"value": "b70cdb49b26e6e9ba7d0c42d5f3ed3cb"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "11a9b038-021d-456c-9116-e35391361bb6",
|
|
"value": "ac09ea878a88f06cf078e9d3a132ef88f63c4b09"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "16642aa3-ceec-4052-92b4-262d87a58b8f",
|
|
"value": "e7ed522920c8936004be2ca95165806166e16261c9da7065fb39958d80520e15"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "f58ee338-6577-44d8-b8fd-98aec4709acf",
|
|
"value": "45.147.229.68|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "df7b626b-e544-498f-8853-1dfc285e30da",
|
|
"value": "CN=backup-simple.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "45b24f50-9640-4124-a2e1-69e844bdfd21",
|
|
"value": "57024c1fe5c4acaf30434ba1f58f9144"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "d43e4eb8-db39-4aa8-80c1-0173aafda6d9",
|
|
"value": "565aa00a706366498c9af1a211c5e9f52effe678"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "c2cdfd44-c0c7-4529-8faa-bbb4f3c491f4",
|
|
"value": "fa11ed80a804a669bd0f854cfb0ff337825961793e5abc5b949215e0b23a0558"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "f94b4117-de69-4ea9-adf2-cbadaeaf0f2c",
|
|
"value": "45.147.229.52|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "91e5ee30-b498-4531-a7e6-71aeaab14a39",
|
|
"value": "CN=backup-leader.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "d324a5b3-a3e9-4786-bc0f-13b55c8f5587",
|
|
"value": "ec5496048f1962494d239d377e53db0c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "52e91e2c-e944-4539-88bd-c358c4f03a28",
|
|
"value": "7b6bd2c94ef805fee0d6a6f417e6b88b92bb1012"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d5c088a0-ad0d-436e-a92d-22deee1fde0f",
|
|
"value": "c232fc65c77c94f6af478f330ed9f98faa7842fa9ce4e82be0f1b71cc5e0720c"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "e53e2ade-4a97-4548-bdf2-4bae3dac3339",
|
|
"value": "45.147.229.44|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "211e31d1-8b79-4c19-bca9-9ba1fdcf8542",
|
|
"value": "CN=backup-helper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "623c7b2e-65d0-4198-99c2-acdfdc0d9874",
|
|
"value": "938593ac1c8bdb2c5256540d7c8476c8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "139b93a6-778a-43aa-993b-49f1501cca87",
|
|
"value": "65c5b0e792026eaca6fd998a4b00afba6654cced"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "fe97bbce-5f25-4f41-bfe1-3cbe4fc6a314",
|
|
"value": "654ddee8c55c6403f0d50270d453f4b6e0474fe74c96117e92284b7c806fea90"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "58bd644d-7194-477b-9869-3b69f0b99783",
|
|
"value": "45.147.230.87|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993263",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "47d9c81b-8e50-42e0-95e8-d203670f533f",
|
|
"value": "CN=nasmastrservice.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "46f354af-ef38-481b-a012-ea02daa38a36",
|
|
"value": "cced46e0a9b6c382a97607beb95f68ab"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "90e80484-ffd2-41e1-a714-af55bd8f72ce",
|
|
"value": "ff8f86c05021e1d2916f197b41d306714ede841e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "fc34e69a-35a2-4dc1-a362-416b919fa1e6",
|
|
"value": "f30f070f597bae9f9dee6e29e43ba2338a76c474da7df418b091b246d555f5cf"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "0454d2fc-d7fc-47ad-b003-104ecf362a60",
|
|
"value": "45.147.230.159|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "a6a9e0ca-eecc-4ef5-bdd1-70aa0bb23797",
|
|
"value": "CN=service-leader.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "813d655d-2f68-463d-8db2-aeda7ea2795f",
|
|
"value": "e912980fc8e9ec1e570e209ebb163f65"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "4d59a0a3-fd1e-45c1-b180-eeb976d36128",
|
|
"value": "d4540e2ac36c9b9e8626b9355dbbf91883d785f3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "1f3e1045-6c03-44fd-ab75-3d22eda1fc84",
|
|
"value": "a2be61e19be5e288891f6c12c509873adb67beb44fb6f2ad5f81c489b7d346cc"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "7deab300-5889-44d4-b620-430d601567cc",
|
|
"value": "45.147.230.141|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "afe60a98-4a2a-4207-8970-af078d50b75f",
|
|
"value": "CN=service-checker.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "4c643159-f961-44c7-8bbf-14a56d759948",
|
|
"value": "39d7160ce331a157d3ecb2a9f8a66f12"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "685f83db-0664-4dd1-a602-f878e18194d7",
|
|
"value": "e3af9548f3a4bccb879ab864983b0e2d8097c353"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "cdbd3d20-0679-4611-88de-bf91124e2b0e",
|
|
"value": "50727d5e12b31d35a5fbdb40df7dffdda2ace9d17d6b951107be493a5ceb2da5"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "41031aea-16de-48b3-8c5c-1f50dc642e1a",
|
|
"value": "45.147.230.140|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "6d2af61e-9fa2-4050-8b1f-eac471b1cf76",
|
|
"value": "CN=nas-simple-helper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "929e40b1-189a-48b6-8c67-e836d69f0d51",
|
|
"value": "d9ca73fe10d52eef6952325d102f0138"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "7d70b840-9c70-4e75-9fdb-9ea40ed05272",
|
|
"value": "035b77b955c237cbfb594599e8f8865bce869c04"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "a3e75f42-94a3-4b95-973a-d35a629bdd09",
|
|
"value": "9794cb52b8514493dabab57be55e147d0db63cbcd3726c730548a12bb64d6714"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "0d473ad5-15a0-4fea-adb6-66da7578a996",
|
|
"value": "45.147.230.133|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "0e1e9fb7-c770-4de0-b2c0-778adbcc9c8b",
|
|
"value": "CN=nas-leader.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "8071f7cc-8b24-4e2c-b0bd-7a91e8c800a5",
|
|
"value": "920d04330a165882c8076c07b00e1d93"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "621bab0a-96bb-4c5d-a75a-dd35f8d930e1",
|
|
"value": "aa03e0ec47c6717563ac7ea45f9cbc0a424408d7"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "5fb279df-a515-42cc-a983-cf085d3d5c64",
|
|
"value": "94599b273e38f7230040058576433d35a06e057911afb03d6d95d7ef930bc467"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "a52d5a50-846b-45f5-91bb-e2b384e0fd12",
|
|
"value": "45.147.230.132|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "a8a8510c-702f-490c-8c8a-0fc9d2c2b9a8",
|
|
"value": "CN=boost-servicess.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "2ef05e4b-25c8-4b9d-8922-cdbcdf1fbacb",
|
|
"value": "771463611a43ee35a0ce0631ef244dee"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "9873e412-a2a0-4816-9e37-a90e7fe5fcea",
|
|
"value": "5d25382d406638de66b8abeb072d1307dd98ee68"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ca4d2f60-91e8-443a-bc6e-2627ff23388c",
|
|
"value": "4658adb012b0c05a46f2edb90dca32b458d19d54b73e6b3c9bed0419d1ebde47"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "8e08713f-eb38-42f3-a3bd-67da99181af6",
|
|
"value": "45.147.229.180|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "47d2b586-c5f7-4c25-b099-79f90f61643c",
|
|
"value": "CN=elephantdrrive.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "e4f48e4d-6ba4-4bb0-8308-df32c5afbb37",
|
|
"value": "1e4a794da7d3c6d0677f7169fbe3b526"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "fb3a4788-6618-4370-9940-6b0371e676bb",
|
|
"value": "4603dbbe68be8fd4f06abd99d429076ce2c98130"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "869cdf27-8d7a-42c0-a98a-4eecec2189ee",
|
|
"value": "623b157e68f9a66db8b5419e2f23428ee69b03a887832e8cac7969b4d256d844"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "adf03e03-9e26-4b8f-87f5-462d7f6e77f3",
|
|
"value": "9c7fe10135f6ad96ded28fac51b79dfd"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "305681b7-1593-4cce-b6c1-956b09f958a4",
|
|
"value": "1defc2d0c521ce8fb2bef02bed7b8cd07f592474"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d52f96a5-03a7-44d2-8dfa-619e6b12cb19",
|
|
"value": "e5967281faea70483ace0161c86f8d92478910644f0815d4112bfa90ee6ee0bb"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "f3bb6b21-1b96-4d6f-b38d-1fe6240e8442",
|
|
"value": "a78c0e2920e421667ae734d923dd5ca6"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "731a9ba4-2b4a-4e59-825f-2911ca9e4eba",
|
|
"value": "0122ff19ef0c200e2f1603f691b0cb8cbff088db"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "63d9e819-3b93-44a5-8586-e84e5ad4e803",
|
|
"value": "1b61d74f07ff9ccd33df2b5766ec50d77a0b30210735e78760c895a344bd7e23"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "52c74372-adca-4dd2-896a-2b84038305c4",
|
|
"value": "45.138.172.95|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ac96ab98-6f8d-4f8a-b5f4-762e8df25f42",
|
|
"value": "CN=service-hellper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "6f1822e5-5bd4-4e66-8a21-85ef764532a4",
|
|
"value": "a0b2378ceae498f46401aadeb278fb31"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "4474ad30-50f4-4d45-8a51-5998c3c15024",
|
|
"value": "06f9ea54ba622a035bb63a18222299d3d5f8ae2c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "7d8c2ce5-be2b-41bc-84d6-91bf2aed1049",
|
|
"value": "9e8428180ace243e73120bfd93de74e160fa5ce5631e6c9fd4e03f4a7a5eeab7"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "ce6e827f-b74c-485c-ab5e-682410722989",
|
|
"value": "108.62.12.119|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "0081421f-0c69-4698-ac65-e2215221a186",
|
|
"value": "CN=top-backuphelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "d0d161d3-6f52-4944-9a17-a43cab7019b2",
|
|
"value": "e95bb7804e3add830496bd36664ed339"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "99c8fc4c-0ec2-44c2-b274-7df9679bea42",
|
|
"value": "f51c4146472c292b1939b598c322a75668cfe786"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "7f8c3cf6-2ea4-44c1-83ef-600249d3b787",
|
|
"value": "aadbf21768605e7370e480ce1aa9c90f6fd025cad63a116c079845e9570c8c7f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "3d7b6419-aa38-48df-9de1-c42874bb8a64",
|
|
"value": "108.62.12.105|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "052a8642-bedd-4a68-a476-834f8a378483",
|
|
"value": "CN=best-nas.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "2c508a6d-820b-4933-b3c5-7664dd523c03",
|
|
"value": "8d5dc95b3bd4d16a3434b991a09bf77e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "58202576-999c-4e08-a66e-ca9467307584",
|
|
"value": "71a5634a6fdffea2dc8292288014a7ed1bcb14d8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "664001c0-fcdb-4e7e-ada7-7f7a18cc7972",
|
|
"value": "f66f5d1673e5df7dc74b91f3e63e6bc76c6bda3d0d7bf5764f92f773965dacc1"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "c73261cd-9b36-40bc-8287-5f8cf2df9815",
|
|
"value": "108.62.12.114|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ab2cf133-c668-4d6f-b9c5-4b6b46af071e",
|
|
"value": "CN=top-backupservice.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "73079bfc-43b2-4537-a5c8-6801186612a3",
|
|
"value": "d5de2f5d2ca29da1724735cdb8fbc63f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "7e02e77f-d4bb-490c-97af-9e74dc58602e",
|
|
"value": "2523b1c2d8564fed65cae16061a8d943babd68f2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "9a9d4570-23d5-44a4-9a83-3add35e82b56",
|
|
"value": "7c9afb57d287cfbab8af378bb20e633285449ecbc61e63e9dc7832023fab8668"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "de815eca-692b-4413-8e34-6b2ed8180554",
|
|
"value": "108.62.12.116|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "588feee7-3239-47da-9784-3eb05b890e49",
|
|
"value": "CN=bestservicehelper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "bfdf020c-cb8f-43f0-805c-6908186914a7",
|
|
"value": "9c7396ecd107ee8f8bf5521afabb0084"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "139c2fbe-6d07-411c-bcc6-d2d2a4fb8f7c",
|
|
"value": "96c5bc5546a69891a7cd15de6ca08e47fae3e147"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "9a86735b-a173-4922-8bb8-24885c4d1d0b",
|
|
"value": "a9f1ab8286af316313ab85f03edab36e65f64c881f615fc10a37fcb9f449f7cb"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "722ef40a-180a-412f-80be-70e9637a661f",
|
|
"value": "1134a6f276f4297a083fc2a605e24f70"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "4c277352-eef6-4e19-ba47-3b0c2129d526",
|
|
"value": "eced1d24ad47b2ec4f8289cdcf2d2fb2d261ab99"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "cb7ecadd-9371-4d57-a3e9-ccea587b782d",
|
|
"value": "265c9a2fcaf7c0d71cf5c6f0d60e3997527a9b72ae70465071a0ca429db3f661"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "2cf9fd1f-16d2-4dfb-b4c4-8f9dfba14fa7",
|
|
"value": "2150045f476508f89d9a322561b28ff9"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "55bce62b-7e0c-4095-8391-feb345129b08",
|
|
"value": "c485f3e426c0bf825b6b4c5fdff4c63d654480a3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "80513541-1b45-476d-b682-5f4963b4263f",
|
|
"value": "ab7edccb4b138f2123c3f3d678176d1bc71dfa542710d9da5b17534c4f3eab2c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "b58e4c05-e6ce-4b85-9536-803c1e82ac3f",
|
|
"value": "f4ddc4562e5001ac8fdf0b7de079b344"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "c5f48c44-0303-441a-829a-23d4e3f0e5b2",
|
|
"value": "16de49c36cadc539c421397477d04fb24b7f5a62"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "91018f68-ef2d-4136-9fc4-bd57281bb3a6",
|
|
"value": "97f3b5d51748df88be4f4e5ffacad5ea604dd3ed74f54821e2d629d600fcaaa3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "426bdded-810c-4b10-9d9f-56ad31d748d5",
|
|
"value": "74.118.138.137|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ed7d60ac-b0da-4bd9-bc0c-109e0cd84ee1",
|
|
"value": "CN=top3-services.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993264",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "074ca386-1168-4e23-bafb-1bc9efbec0e2",
|
|
"value": "75fb6789ec03961c869b52336fa4e085"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "ab89fafe-ca23-48c9-9961-38c174eba684",
|
|
"value": "a653de6f532cba378bcbb4165cd76cd2ae4a79e3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "48b6fc2e-b0a7-49e1-a11d-488cfac3fc45",
|
|
"value": "1f796d6aef9100d63e0e2da0c730380f2c524f0befa4cb957942eb5be9b03300"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "7fe5630a-629b-437a-bb3b-33ad45d7b32d",
|
|
"value": "74.118.138.115|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "486aca7d-ac21-4652-93f9-03a0c81055b9",
|
|
"value": "CN=simple-backupbooster.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "a081a9b0-d467-4ab1-8725-8e37a8b59d03",
|
|
"value": "9f5e845091015b533b59fe5e8536a435"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "feddd7b3-40ac-4b06-b67c-4e9341ab59ed",
|
|
"value": "1e62c973054518a75881dc36aad42fc60cc9be62"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "7293d7b9-dbdb-4036-be85-52c7fee10971",
|
|
"value": "fcdf6099ec3c3775a78b3d1f6789bbaad8ee00896e07e8019cb2b4cd19710f33"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "2f0e5e21-40aa-46e7-b900-67d9e69ef6b0",
|
|
"value": "108.177.235.53|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "94650e50-9b96-4450-94c2-bb26de0e6475",
|
|
"value": "CN=best-backup.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "1e8c3f16-fa58-4367-a5bb-717c4bcf77b1",
|
|
"value": "4b78eaa4f2748df27ebf6655ea8a7fe9"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "f252d915-9a9e-4ec2-97b7-74210f4ee35b",
|
|
"value": "3c10031ed4ab6e61cc3fd5ef0357858fd5f40c45"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d1a5d389-4af3-4e9e-b82e-beb22ef99166",
|
|
"value": "e76c58979c426f7c66c95a205c1272f87ccd7b1761745b08edbfe6d8d195e4b7"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "5c46689e-6ca9-44ae-a3d9-9ea673d5b59c",
|
|
"value": "74.118.138.138|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "48a2bb33-1526-44e5-9729-e74947c89adb",
|
|
"value": "CN=topbackup-helper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "dda29bde-875d-4df8-8680-bf92ac3358c3",
|
|
"value": "bcccda483753c82e62482c55bc743c16"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "a02d0951-857d-4c9c-a85b-b27afa1a326c",
|
|
"value": "e3962ee4bd9c1f7eaab284e09f00d2307890ebe6"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "4f903db3-1e9b-4ea8-8347-1d31e0630941",
|
|
"value": "bb2ec3f66df61241a953484d0701477b46b876f4a4dc9eb94d8eab567406ecad"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "e9baebdf-b8f1-48e2-a404-6fb716504d55",
|
|
"value": "45.153.241.1|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "3714cca2-bb06-468c-bd6c-e378c9c4838a",
|
|
"value": "CN=backup1helper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "a5adc2d2-3a10-4c5c-a09e-0c7c256cb346",
|
|
"value": "672c66dd4bb62047bb836bd89d2e1a65"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "4547bd10-4f52-4041-97dc-3f9e74b31e8d",
|
|
"value": "24cba6ef0db402fdcf94dc216b0b2a6d933e871f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "e063315b-c74e-4691-a0eb-eb43b27bff7d",
|
|
"value": "cfd1174ba0371c9703b6494fd04e6355acfaf73fca04b9b755aa745ce0d12bc0"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "1d196404-c795-428b-884e-42f9c05a7a6d",
|
|
"value": "45.153.240.240|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ead7fd4b-462b-43a9-ac33-44d497382616",
|
|
"value": "CN=checktodrivers.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "b1c65932-9b13-4ac7-81ca-430808b2b40c",
|
|
"value": "6825409698a326cc319ca40cd85a602e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e96b6509-4a80-4bc5-8d10-8f3a363f5ef9",
|
|
"value": "ac67f2b1b05abdf49f23980ea98cfd8c0f56b258"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "956c6821-f28b-4c6e-9f0b-ae9a38a79b58",
|
|
"value": "39c98d118e2c2c350c2e2eb3300a5251c0b830a04bb71b37e485e6911b1450d0"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "aee65842-ce85-4b31-b1ec-688f85f1ddb6",
|
|
"value": "45.153.240.194|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "872c25e6-3cb9-4b9e-bf25-95f58e227965",
|
|
"value": "CN=driver1master.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "0c6fc4fc-9187-4f1b-9715-f2abdd57b208",
|
|
"value": "7f9be0302da88e0d322e5701d52d4128"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "37cc168d-1788-455f-a8c1-7e17568a4fa6",
|
|
"value": "43ec2f1882b93adee3a54ce216ab72223cbb6a49"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d8376f7a-b4da-4c5d-a3fb-962a96339881",
|
|
"value": "6beafdc4a4e1c35195e1540f487888941f76f1214be2c793217523bb2cb39cd9"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "90446a0d-a2d6-46e8-971a-62a6055b07f2",
|
|
"value": "45.153.240.138|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "a5c3d4e8-d8c0-494a-a144-77c7b37972a4",
|
|
"value": "CN=boost-yourservice.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "9cdc7015-a55d-4334-8c32-c598a22ab438",
|
|
"value": "2c6a0856d1a75b303337ac0807429e88"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "9660fc9f-e33f-44e3-94f3-22f04abe0666",
|
|
"value": "499825372396aa5075e3d56c28bdf7049bb2343c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "c0a2f21f-7352-4ea1-838a-e606f7605d0b",
|
|
"value": "35312294a5f9d42b3dd4d975ce0bb7bbf986ce84638d42f0270b0c26e564b68b"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "a52c45bd-c5eb-43ba-9d2d-84ba9ddd51c3",
|
|
"value": "45.153.240.136|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "27c74fb0-4aee-43b1-9252-133028a1345d",
|
|
"value": "CN=backup1master.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "0c64147b-9619-47d0-bca6-c90e5a6580fd",
|
|
"value": "6559dbf8c47383b7b493500d7ed76f6a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "acbefccc-a528-4992-bb70-9e9b821c4ed7",
|
|
"value": "abaa76f2a65001fc0d965fc86e82a875015538b8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "1a92a0da-0120-40fc-9332-d59ead20b69d",
|
|
"value": "20fa63aebac31cd6e505c4757f3c73ca97ff9b35a5d28c7264023aad03e19b93"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "684f29c3-752c-4b24-ba77-512f39c8fb14",
|
|
"value": "45.153.240.157|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "979484b6-b79d-4685-80cc-cdd261feff30",
|
|
"value": "CN=driver1updater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "d549affc-71e5-48aa-b70f-7efbfa7275b7",
|
|
"value": "7bd044e0a6689ef29ce23e3ccb0736a3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "45a67e07-00aa-4f91-9fb9-da75fcc5c84d",
|
|
"value": "2d0a25a29c198728dbec4aff3955c5bd167169da"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "204d52a7-4d7c-4006-9486-cbd2ee80e7e0",
|
|
"value": "939a72e9e0241a5c88793ad0be8a3aae8f953c1b4a02e4432f3d8646d6be986e"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "6d89de36-14a5-4575-aa46-fc2ed48586a2",
|
|
"value": "45.153.240.178|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "be9f1ffb-ebec-4518-a10e-c4d39b08aec8",
|
|
"value": "CN=service1updater.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c4fd06f0-507b-4cb4-a847-a2f62b36b5e4",
|
|
"value": "9859a8336d097bc30e6e5c7a8279f18e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "b1ca6ad5-1621-459e-8bbd-56dc8cb35884",
|
|
"value": "f98e21f2ca04f13adc55eedefdf900f1754088ea"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b44d768b-f18e-4863-bc1a-7bb691603ecb",
|
|
"value": "e87bdd2f0fa84bd5a93897076eabb896a538955a01366ca62d12e38f3aebfc21"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "071d3271-d1e3-44c7-a225-5b65d58a6121",
|
|
"value": "45.153.240.220|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "b215cdda-6e59-45fc-a809-9f31885e2c85",
|
|
"value": "CN=driverdwl.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "e9acee9b-73ce-4edc-b87d-dbfb868983e7",
|
|
"value": "43fb2c153b59bf46cf6f67e0ddd6ef51"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "8303e380-a3e6-41a2-9a5c-3d8eb323d5c4",
|
|
"value": "c0ae10b3c7399c1fd5de4bebbeda6669830fd765"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "70b269e6-7f30-4f3a-97dc-9ff6b280bc71",
|
|
"value": "d9e9d42c64fb754d85800399e9a291f47451ec7a0d7bb1995b3c28e1ba9cfa8f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "fd2bc81e-9e75-4368-94d0-f6a911df5646",
|
|
"value": "45.153.240.222|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "810021c8-7eb2-421d-9350-a6f48a72c0ec",
|
|
"value": "CN=viewdrivers.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "1cd8c137-70a9-4348-9cdc-abfc35a38fda",
|
|
"value": "22bafb30cc3adaa84fef747d589ab235"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "71c61c1c-3dc2-4eeb-aaab-46d2c1073983",
|
|
"value": "6c97fb036d52fc9ec2e19e492e605174609d4b1f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "f92b9bdf-c6e8-4c91-9421-3c5e69aed1f5",
|
|
"value": "0fe22c1303accd5a26eeb0ea38cd78094422bc0ace0551c475663e4eff76a619"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "788ae963-f7f0-4f37-b74d-ff477b5bccc7",
|
|
"value": "45.153.241.134|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "1a4903b0-74a4-4823-976a-133ba9f07568",
|
|
"value": "CN=backups1helper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "b87c2a0e-abaa-41c7-8c0c-bbcaacc74786",
|
|
"value": "31e87ba0c90bb38b986af297e4905e00"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "3cb0f50f-ff4b-4018-985b-93b9267d8e14",
|
|
"value": "56acd9159f4d96f632d26b5af16efb72e79fb585"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "5446a3b9-7d9d-4e88-a443-4c88c94033d9",
|
|
"value": "f9b32b774b3985fca2c2f9fd6f0101146374d826b99294670dc9f4593d35ebf9"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "bbf84a52-57e7-4110-82bc-9bd5af261b80",
|
|
"value": "45.153.241.138|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "1b272ad8-393f-4c34-a0cd-c1dab386dd8e",
|
|
"value": "CN=driver1downloads.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "d9d77028-6481-4b3b-88c0-b827912be67d",
|
|
"value": "f8a14846b7da416b14303bced5a6418f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "d755ef2d-818c-45ee-b562-2b590512c54c",
|
|
"value": "e01884017c886a8608aa4fea7b1daf8662f0ac40"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "8f522b81-e503-40c5-9007-ad3236921f7e",
|
|
"value": "3b87be2164a5fe005097d87c4acb0ece1b658e46c2ef935c86f67706e23bca95"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "5f7a7f21-7e96-4977-af40-d93e55a3f2bc",
|
|
"value": "45.153.241.146|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993265",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "e539415b-f106-4a80-a7a1-69c3e4a2cdc0",
|
|
"value": "CN=servicehel.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "f0ed8a46-b2cc-4913-8603-d1416e3124c8",
|
|
"value": "01abdaf870d859f9c1fd76f0b0328a2b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "38d4d672-9247-4486-9e30-005a3fcf5c83",
|
|
"value": "3edd7f727ce24ddadcc0012a702ead599c9099d9"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ce67d736-5284-4bba-bb2f-ba944d9de34f",
|
|
"value": "9db7cf85796ea75534deaff38fd39492addacdf120592ef689d7cd32963ea386"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "6ad4c824-c912-4ded-8ac2-8de044be5820",
|
|
"value": "45.153.241.153|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "f0ff5e0b-b91b-4457-be9a-d58ad59dbc52",
|
|
"value": "CN=service-hel.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c2d3d3a7-bea6-4764-8a8a-4cc76e978eb9",
|
|
"value": "c2eaf144e21f3aef5fe4b1502d318ba6"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "006539e9-b7ff-4b2a-b532-434c54beab20",
|
|
"value": "67915ea68637b47e78953b1867523a2c0435d81d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "097a14f3-d53e-4bd5-a7c2-22e4890c01ac",
|
|
"value": "0cf8e1c365491c78f5b17b22e695b79ebcd696ba0aa6aa4dbcaed75acccd59c2"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "615dd3fc-1b96-458e-a12c-37eb89913f37",
|
|
"value": "45.153.241.158|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "da33c833-7ac9-4026-9c42-10f9f39d1f01",
|
|
"value": "CN=servicereader.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "b6dbe99e-e47c-46bf-84c2-0c0eb0abb5d4",
|
|
"value": "de54af391602f3deea19cd5e1e912316"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "f110959e-280f-4745-a4d0-b0362515a6b2",
|
|
"value": "d157e01e740f7b72dbe63d92c1e057553c898a13"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "7d8d7c43-7326-4c80-9be4-bb9a18f3b9e6",
|
|
"value": "8f882e7280ce0c9c921bc1fde6be66899c486ead02f799d7c4903d4117376792"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "f91b7daa-8c3e-4b48-8ff0-44e2aeefa5e2",
|
|
"value": "45.153.241.167|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "517cc8a1-99a3-4f89-8958-261ff1ee8444",
|
|
"value": "CN=view-backup.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "f5e38e41-a7d6-454a-a3b4-e9c270bd93b3",
|
|
"value": "5f6fa19ffe5735ff81b0e7981a864dc8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "6e4088fa-ffd0-4d53-a5a4-3c4173ea4e53",
|
|
"value": "d20b29d9cf3706cb461724e544e25c6f78e6c54e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "a7cf579c-9188-42bf-bbb5-0ae04286b233",
|
|
"value": "ea1feab48765f14af16a70bd8c3832dda4212bbd335ddef721977e7218366b94"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "fb9915a1-7185-404e-85ce-b0abbe9ea5b6",
|
|
"value": "45.147.231.222|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "1b1ec922-bb6c-4281-9fab-b7e6a9c6e105",
|
|
"value": "CN=top3servicebooster.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "a720adea-68e4-4180-810c-90c32b5c9805",
|
|
"value": "ff54a7e6f51a850ef1d744d06d8e6caa"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "3b305e06-332c-483b-8cb9-75d5b007a6c5",
|
|
"value": "b7d641e402090f1151d865294263f5aab986ec59"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d4adf3c4-5544-40cf-af65-9cc0fbae427d",
|
|
"value": "82e88fc92a2f7f85e29b7078ffc8af2f058c4218a4d558f22adce4179ec49a29"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "23d2f92b-bffd-43c5-9a29-fdb881e668d9",
|
|
"value": "45.153.241.141|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "cb1dba3a-c318-48d9-a5f0-672a6142483a",
|
|
"value": "CN=service1view.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "1eb8fda3-af70-4d2d-ba2c-ce43b33076cf",
|
|
"value": "4cda9d0bece4f6156a80967298455bd5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "89ba2364-c018-43c3-b3d6-9465373608a5",
|
|
"value": "3720e6b4f1d1e9eeeb15e49d81f2b15f5febc796"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "aba7b7ac-aaf2-40df-b3ba-ebb8459dc139",
|
|
"value": "d2ad732871935d34dbdeb658745929f2b473f17c894fc991efb5725d5c93e351"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "06b2d2d1-1a44-4035-8a23-7c07e2c069dc",
|
|
"value": "74.118.138.139|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "91b5acd0-5276-4a80-91af-64eda21f1c69",
|
|
"value": "CN=topbackupintheworld.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "e4f5a765-1071-4188-8f14-d77164af4ffd",
|
|
"value": "e317485d700bf5e8cb8eea1ec6a72a1a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "b6f071b4-9faa-48c0-a4d5-c8b198c41035",
|
|
"value": "9fcc5c1e8ec32f56e975ba43c923dbfa16a8f946"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b002b075-acd1-4a69-98fb-7ea6c452c605",
|
|
"value": "549c910be817cebef4f1a91548b75168b2a9d9148406d4ff55a71125e0af63a2"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "b73a6d09-88c8-4e05-b821-ef37909ddf73",
|
|
"value": "108.62.12.12|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ba125c9e-2ff5-45aa-82ce-b6d841780c48",
|
|
"value": "CN=topservice-masters.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "1d2783d6-186d-4569-80ca-2aff7570543a",
|
|
"value": "e0022cbf0dd5aa597fee73e79d2b5023"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "0f72624f-9488-40e1-9a43-eee994a678ff",
|
|
"value": "e270b5107aed00bce3977d3bf46eab7a26f12296"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "de50941b-591e-40a7-845d-943d2e3b8d08",
|
|
"value": "c745f58328ead88c4994c321d4c88e11c0e76b3ff2fb0990a94929d17cf34ccc"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "89137238-d259-4cf0-a745-5a651a889542",
|
|
"value": "108.62.12.121|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "88d23225-bc49-451a-b176-608b8fc566b3",
|
|
"value": "CN=topservicebooster.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "de5daa9d-c9f6-4318-8e35-ade0ce398691",
|
|
"value": "44e7347a522b22cdf5de658a4237ce58"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "b7778c33-9f80-4f40-a2b9-cf99dc974fb6",
|
|
"value": "35ef11c8a52cb944371bcffd2750793169f7daa9"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "08ae595d-d17d-4db6-8496-fe3e0d20116b",
|
|
"value": "690130e5c2ba0ad872ca9dde83a10686c1e7a6d3a1849427269c8d9a97de0061"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "884e9310-3073-49af-a701-0c6b010c87b7",
|
|
"value": "172.241.27.65|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "f4ed2826-e5b6-4382-96fe-44e036874b0b",
|
|
"value": "CN=backup1services.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "a318beeb-76c8-4c0e-9eae-df7f0398121c",
|
|
"value": "cd3e51ee538610879d6fa77fa281bc6f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "475f2fed-6801-4c84-b832-61a8c68b738a",
|
|
"value": "a8087000b8b8c629650c18739fd63bc9d71df8c4"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "e5235d09-17d7-43ce-a59c-fa5a890416e7",
|
|
"value": "bb6a64e2940400ad1658d36c1c9b5ac74fe3e2b667306ae3c13454ac1c1056bd"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "17ed1135-39e9-46ab-bda6-bcff74bd0a93",
|
|
"value": "172.241.27.68|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "bbc57c77-b47d-4b94-a26a-c2e9d5c39bff",
|
|
"value": "CN=backupmaster-service.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "17630d26-07e3-446d-972f-6364fade7538",
|
|
"value": "04b6aec529b3656040a68e17afdabfa4"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "e9bdcd88-80c6-4be6-b303-00c2868e059a",
|
|
"value": "05cdadc410865fc446645997c493fcc3f25fd86a"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "c008bef0-3ddc-4e63-a932-fb8b5b9bd01d",
|
|
"value": "069f142509ad4c2ec6ab0481c43985ca05c037861aadfba104a9e4c36ca46efa"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "6d2775d6-eac4-41dd-8517-caafa5ea7658",
|
|
"value": "172.241.27.70|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "b76e3f38-baaf-4c6a-bfed-404f7e2b7435",
|
|
"value": "CN=backupmasterservice.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "4eeeaf29-d8ae-4359-bd3f-048c9a29b5c6",
|
|
"value": "200c25c2b93203392e1acf5d975d6544"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "fd28b251-9ded-4bab-9745-2d20a739960a",
|
|
"value": "d0c7fc7ea6eb9503de76237dd67fd0184d5a26b3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "985fd7df-7571-4143-8cbf-2d0536db86a1",
|
|
"value": "4121d66a273aec3c74e9973824831353dfc1af1f41857596fbfff09397d377ea"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "c49284f2-1a76-4645-8dc2-6aff5cc9d63e",
|
|
"value": "45.153.241.139|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "ca15d6f8-5f1d-4db2-a17f-19926f39e98f",
|
|
"value": "CN=driver-boosters.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "208c86ec-a91c-4dbe-bee7-9652e6835732",
|
|
"value": "9d7c52c79f3825baf97d1318bae3ebe2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "dbc7dd18-3326-41ea-982c-f0d416a21255",
|
|
"value": "9b1d8026272248f73cc945348ab6f253ebbed17f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "28b5e5a7-2ac2-4861-977b-ed1c0dcc2da3",
|
|
"value": "869bae71a3aff8ad127f276fe6088ea6244f121994018be294f0555742781d0f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "7b04c799-8570-4bab-a74c-c1dffcfe37a7",
|
|
"value": "45.153.241.14|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "4ca690b1-7419-49a8-a65f-dd6072251f2a",
|
|
"value": "CN=service1update.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "644f81bb-e2a7-4137-a30c-437bcecd1f0f",
|
|
"value": "5bae28b0d0e969af2c0eda21abe91f35"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "7c70fd92-f5e2-4613-8824-ed74a48c9d8f",
|
|
"value": "63dd4ce7db0621e4def994f9dc4836cdfcff5836"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "d0f26fce-0dd4-4a0c-99a4-10618fa2b26f",
|
|
"value": "b1db6c3fc7d9c2d53c77ccf3cbb949f6d7916ad5f1a1c19176c349239f7ae463"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "bfc33296-68d5-4eb6-beb9-1d865e234025",
|
|
"value": "190.211.254.154|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "f51685b9-a489-4993-9613-de2d03bd6816",
|
|
"value": "CN=driverjumper.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "8c7bdd36-0627-4c37-a435-1fbbf1162f2c",
|
|
"value": "a1e62e7e547532831d0dd07832f61f54"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "a2d2fcb5-6b34-4d54-8b04-9fabbfbd6149",
|
|
"value": "4af071235fb4879ec3952df5070a091073dfed92"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ed3c68c2-6d19-4049-9961-12d2599897e2",
|
|
"value": "a0a423de844296f280c4b37ac88aec7fd180c4143ff4af5930b1708cb7030e3d"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "6e441a81-ee31-4860-8a81-d4b08f22dceb",
|
|
"value": "81.17.28.70|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "762f10f7-3971-457b-940c-83c1d1193fe0",
|
|
"value": "CN=service1boost.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993266",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "e8dc8ee5-0d45-407f-8551-3d963069b21e",
|
|
"value": "67c7c75d396988ba7d6cd36f35def3e4"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "28463522-cc81-4449-99b4-b551fafde025",
|
|
"value": "c850dc97812008b72496bdebb3ddf87a6360673b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "f59f1505-0121-40cd-898a-1f8d427c58ca",
|
|
"value": "a6d4dbd50a454dc3f039259e48a0030b5f6590342c0b1097cf8997e248a1f2f3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "aacb93bb-f016-48b8-805a-215071b79d8d",
|
|
"value": "81.17.28.105|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "24a78a46-c62f-4db7-bc51-da3ecb63c132",
|
|
"value": "CN=idrivehepler.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "e4eb8cac-c559-423a-b7f0-fe8bf8a1c968",
|
|
"value": "880e59b44e7175e62d75128accedb221"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "30491460-8f38-4f08-b3af-f7ad2ccad22b",
|
|
"value": "b7c178761a1401d225defa5826d0131b38d3a7c2"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "efca9c88-5f11-4476-b077-cb88e4bcf439",
|
|
"value": "7b6f6a1ed5d5d69bc8921c30f827b975588957befda59d8cc016aab4d5631cd2"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "89061fc6-d6df-40e6-b42a-fe331aae7846",
|
|
"value": "179.43.160.205|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "464c0dd4-8f73-49d4-bbc0-668530c591ed",
|
|
"value": "CN=idrivedownload.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "d5637cfd-be56-45ec-b7aa-9347dafced9f",
|
|
"value": "cdea09a43bef7f1679e9cd1bbeb4b657"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "2632774a-ab58-4721-8b13-cf3a60dd94bd",
|
|
"value": "0c17226e56d5f69aefdc14e811a6ad033500b712"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "1c79a06a-341f-40ac-a4ec-4ce038e5c570",
|
|
"value": "e83ea3a0255edee75b6322bd36fda31b4f2dcb4375ac6ea0edc28270c7a5362f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "a53054a6-89f8-4669-9171-a515c953bf2c",
|
|
"value": "179.43.158.171|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "730fc1ff-d3fd-4d2c-918c-81651fe73cad",
|
|
"value": "CN=idrivefinder.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "c0defbe9-cbad-45dd-b69a-181cf2c087a1",
|
|
"value": "512c6e39bf03a4240f5a2d32ee710ce5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "ee26e7cf-6cad-49b1-9398-15821cfd3b44",
|
|
"value": "2b352b15f2783988d6be7dd6397dcdd3cf58733b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "9554c946-5cac-4141-ab97-b21ae9f655bd",
|
|
"value": "ea5a7b096f1b02e60d1429c50dde63c597c45fda3548bb24e10f34c9352543f3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "1ed074ca-aae2-48a1-bd4a-f5f8786a3797",
|
|
"value": "179.43.133.44|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "344c98db-e12f-4be7-b188-d6b3f7c69558",
|
|
"value": "CN=idrivedwn.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "4ef74f12-ea35-411b-9c17-3c38ee3a9579",
|
|
"value": "87f3698c743f8a1296babf9fbebafa9f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "05ace2a0-9143-405e-beb4-95d7d857591f",
|
|
"value": "d8d92f1f012f6ee78b144e9771df1cdc146b5fe1"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "0d71ca35-32ae-4b97-9529-b9aa16b45d27",
|
|
"value": "c15fd2820f598dc5483c2c9218e5eeeb34c92e69b258966b2e48f99d97973f8f"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "a49de51a-acaa-4a89-bb36-f7621a927fa2",
|
|
"value": "179.43.128.5|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "872de921-cd8f-43ad-8a4c-53bc0c204b5c",
|
|
"value": "CN=idrivecheck.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "e2989b68-2f31-4e38-849d-872141c579cc",
|
|
"value": "6df66077378c5943453b36bd3a1ed105"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "424eb2a5-736f-4503-82c6-b535be0a4d33",
|
|
"value": "f3a2610a4329fbd96e585b5c7b76c44d7920e170"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "ea366536-2416-4c67-a8f8-3c901a3b2f0f",
|
|
"value": "20c976457f2e5a498a77b1bd58eb625f75213f036b2d3624cf32ff0c7c6075f8"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "a1e4d60d-d6a6-4359-822d-a913830e62b7",
|
|
"value": "179.43.128.3|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "8746ce89-fd0a-4eed-8b41-12dcd06fa9a1",
|
|
"value": "CN=idriveupdate.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "e9ab5eee-7afd-4d91-ad83-74c5cb9b8444",
|
|
"value": "9706fd787a32a7e94915f91124de3ad3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "c9cbbbc5-5131-477f-9f21-f3dfc7a1961e",
|
|
"value": "54e1c649c51b4b6dd49095a4d416619e3f712880"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "b4be06bc-9557-4d0d-b9dc-92b1453aead7",
|
|
"value": "f16a569552414694d2a97594cb86b4393005f05875c724327bd047651aa45c69"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "On port 443",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "ip-dst|port",
|
|
"uuid": "0f305a79-9076-481c-b53e-046fa99b73e4",
|
|
"value": "81.17.28.122|443"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "5244a2eb-71c3-4569-a641-37e0a3ff7de7",
|
|
"value": "CN=idriveview.com"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "cda11a3e-1cc4-4154-8412-7b400f00a65d",
|
|
"value": "0e1b0266de2b5eaf427f5915086b4d7c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "1ed4b8a2-1cd0-4a94-9c2f-c7f970f79f01",
|
|
"value": "1a36672ac35caa0537d300ab151f534e663ae709"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993267",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "5943b137-bdb9-4f34-acd9-0d8511918c0d",
|
|
"value": "1ce83c5307b4a3ccab5dae62adaa5ea32d20ffd393e3a28bb1deefe26a4102e7"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1603993315",
|
|
"to_ids": false,
|
|
"type": "link",
|
|
"uuid": "d321245f-dae2-4499-8c18-c35002fffa36",
|
|
"value": "https://gist.githubusercontent.com/aaronst/6aa7f61246f53a8dd4befea86e832456/raw/f154d75de63d95925a6930d81cca99da0da85f32/unc1878_indicators.txt"
|
|
}
|
|
]
|
|
}
|
|
} |