adulau/misp-circl-feed
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Packages Wiki Activity Actions
misp-circl-feed/feeds/circl/misp/555dd7c9-2234-44d6-8604-a479950d210b.json

359 lines
No EOL
11 KiB
JSON
Raw Blame History

{
"Event": {
"analysis": "0",
"date": "2014-08-15",
"extends_uuid": "",
"info": "OSINT Attacks on East Asia using Google Code for Command and Control by Palo Alto Unit 42",
"publish_timestamp": "1432230458",
"published": true,
"threat_level_id": "1",
"timestamp": "1432213916",
"uuid": "555dd7c9-2234-44d6-8604-a479950d210b",
"Orgc": {
"name": "CthulhuSPRL.be",
"uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f"
},
"Tag": [
{
"colour": "#004646",
"name": "type:OSINT"
},
{
"colour": "#ffffff",
"name": "tlp:white"
}
],
"Attribute": [
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213465",
"to_ids": false,
"type": "link",
"uuid": "555dd7d9-112c-4809-8582-a479950d210b",
"value": "http://researchcenter.paloaltonetworks.com/2014/08/attacks-east-asia-using-google-code-command-control/"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213495",
"to_ids": false,
"type": "text",
"uuid": "555dd7f7-6660-42aa-a8a7-d8ba950d210b",
"value": "Poisoned Hurricane"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213495",
"to_ids": false,
"type": "text",
"uuid": "555dd7f7-1d58-4ad2-865c-d8ba950d210b",
"value": "Operation Poisoned Hurricane"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213545",
"to_ids": true,
"type": "ip-dst",
"uuid": "555dd829-b3cc-4645-8b2f-d8ba950d210b",
"value": "223.29.248.9"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213545",
"to_ids": true,
"type": "ip-dst",
"uuid": "555dd829-b248-4d57-9e70-d8ba950d210b",
"value": "202.181.133.237"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213545",
"to_ids": true,
"type": "ip-dst",
"uuid": "555dd829-1384-4c2f-b19b-d8ba950d210b",
"value": "61.78.34.179"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213545",
"to_ids": true,
"type": "ip-dst",
"uuid": "555dd82a-79d0-4f53-a659-d8ba950d210b",
"value": "211.233.89.182"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213546",
"to_ids": true,
"type": "ip-dst",
"uuid": "555dd82a-b164-4e34-a2f7-d8ba950d210b",
"value": "203.135.134.243"
},
{
"category": "Artifacts dropped",
"comment": "Linked to another campaign but had same CnC",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213588",
"to_ids": true,
"type": "md5",
"uuid": "555dd854-f334-42bf-a213-f22a950d210b",
"value": "ddd46ce5e5eaaa8e61ce11a121a79266"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213608",
"to_ids": true,
"type": "domain",
"uuid": "555dd868-daa4-44a2-81d8-177c950d210b",
"value": "qq7712409.3322.org"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213811",
"to_ids": true,
"type": "md5",
"uuid": "555dd933-b4f4-4917-9196-f87b950d210b",
"value": "50af349c69ae4dec74bc41c581b82459"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213811",
"to_ids": true,
"type": "md5",
"uuid": "555dd933-f1ac-4ea0-b5de-f87b950d210b",
"value": "59db9dc2bb3635a3bd94182ae68d31cb"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213811",
"to_ids": true,
"type": "md5",
"uuid": "555dd933-c0f8-4c6e-a161-f87b950d210b",
"value": "835a1e33a87941c7a1cc9a741d33a5a3"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213811",
"to_ids": true,
"type": "md5",
"uuid": "555dd933-963c-41f7-9fac-f87b950d210b",
"value": "a31fe2e6bd94e6df84a091d00d27ec28"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213811",
"to_ids": true,
"type": "md5",
"uuid": "555dd933-5cf0-4249-a0e0-f87b950d210b",
"value": "e2a4b96cce9de4fb126cfd5f5c73c3ed"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213811",
"to_ids": true,
"type": "md5",
"uuid": "555dd933-4e88-442b-9ecb-f87b950d210b",
"value": "e8277240392ce218f9ec9d4ec3d00655"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213811",
"to_ids": true,
"type": "md5",
"uuid": "555dd933-39a4-4860-9c2b-f87b950d210b",
"value": "f92e9e3e86856b5c0ee465f77a440abb"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213824",
"to_ids": true,
"type": "sha256",
"uuid": "555dd940-6e68-463d-9638-f22a950d210b",
"value": "136e709cc83cbda0cd8ca6e46fe9e57202bd2699ca063f9d1a51602394c06ef3"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213824",
"to_ids": true,
"type": "sha256",
"uuid": "555dd940-c550-4776-8181-f22a950d210b",
"value": "25a02434132c3977124dfaa7e7392a9af4d1617f3520bc04589d5e7e5aad0362"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213824",
"to_ids": true,
"type": "sha256",
"uuid": "555dd940-e598-431a-9cd4-f22a950d210b",
"value": "2ab4953d2e2b38a918e1a1c74741e1de6111b1ce59878a82768990a339318cd2"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213825",
"to_ids": true,
"type": "sha256",
"uuid": "555dd941-baf8-4b8a-9656-f22a950d210b",
"value": "4d894492c10ddaaae6924744cd21d8115e8b1d72bceb7df6393a8d2cf9130a49"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213825",
"to_ids": true,
"type": "sha256",
"uuid": "555dd941-f1e4-4cee-9d64-f22a950d210b",
"value": "6594912a0fe3d0380af1630aa8cb6c489f014af4b37f1c99f62fe4d2806907e5"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213825",
"to_ids": true,
"type": "sha256",
"uuid": "555dd941-54c8-4c34-b606-f22a950d210b",
"value": "935c9652a0d5427a0205062431fd1db9ccafa68d55313504f76206026b84b2f4"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213825",
"to_ids": true,
"type": "sha256",
"uuid": "555dd941-8574-429f-9f6b-f22a950d210b",
"value": "bbff6295b390e3098401a43f08d95d35745e807a0dcb19a2ea4a1596aca9ef31"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213878",
"to_ids": true,
"type": "ip-dst",
"uuid": "555dd976-bf14-427d-9d16-a479950d210b",
"value": "113.10.149.142"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213878",
"to_ids": true,
"type": "ip-dst",
"uuid": "555dd976-2714-4cb0-bb17-a479950d210b",
"value": "210.253.101.105"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213879",
"to_ids": true,
"type": "ip-dst",
"uuid": "555dd977-0d18-4784-857d-a479950d210b",
"value": "58.64.139.39"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213901",
"to_ids": true,
"type": "hostname",
"uuid": "555dd98d-2c14-457b-a149-f22a950d210b",
"value": "hk.jave-se.com"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213916",
"to_ids": true,
"type": "domain",
"uuid": "555dd99c-b004-444e-a9d9-44cf950d210b",
"value": "java-se.com"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1432213916",
"to_ids": true,
"type": "domain",
"uuid": "555dd99c-0664-42ec-8cf8-478c950d210b",
"value": "lthly.com"
}
]
}
}
Reference in a new issue View git blame Copy permalink