adulau/misp-circl-feed
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Packages Wiki Activity Actions
misp-circl-feed/feeds/circl/misp/56af46bd-e4d0-4bf8-aa4a-4228950d210f.json

403 lines
No EOL
13 KiB
JSON
Raw Blame History

{
"Event": {
"analysis": "2",
"date": "2016-01-20",
"extends_uuid": "",
"info": "OSINT Threat Actors Use Sketchy Dating Website to Launch New Home Router Attacks by Damballa",
"publish_timestamp": "1454327855",
"published": true,
"threat_level_id": "1",
"timestamp": "1454339053",
"uuid": "56af46bd-e4d0-4bf8-aa4a-4228950d210f",
"Orgc": {
"name": "CthulhuSPRL.be",
"uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f"
},
"Tag": [
{
"colour": "#004646",
"name": "type:OSINT"
},
{
"colour": "#ffffff",
"name": "tlp:white"
}
],
"Attribute": [
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327523",
"to_ids": false,
"type": "link",
"uuid": "56af46e3-bdb4-465e-af63-4caf950d210f",
"value": "https://www.damballa.com/threat-actors-use-sketchy-dating-website-to-launch-new-home-router-attacks/"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327551",
"to_ids": true,
"type": "ip-dst",
"uuid": "56af46ff-c5b8-49c1-8fc1-4148950d210f",
"value": "176.103.48.34"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327565",
"to_ids": true,
"type": "domain",
"uuid": "56af470d-7d54-4c2a-a1f7-4956950d210f",
"value": "sexyworldtouralliance.com"
},
{
"category": "Network activity",
"comment": "Domains registered with same IP",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327651",
"to_ids": true,
"type": "domain",
"uuid": "56af4763-1e2c-4323-8edd-4841950d210f",
"value": "allinceofsexuality.com"
},
{
"category": "Network activity",
"comment": "Domains registered with same IP",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327651",
"to_ids": true,
"type": "domain",
"uuid": "56af4763-3fe4-4cdb-ac7d-4301950d210f",
"value": "anniversaryaliancesex.com"
},
{
"category": "Network activity",
"comment": "Domains registered with same IP",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327651",
"to_ids": true,
"type": "domain",
"uuid": "56af4763-0568-4df5-9e3c-4da1950d210f",
"value": "superadultnat.com"
},
{
"category": "Network activity",
"comment": "Domains registered with same IP",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327652",
"to_ids": true,
"type": "domain",
"uuid": "56af4764-0764-4ba6-bbe9-4b93950d210f",
"value": "violationcyberatack.com"
},
{
"category": "Attribution",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327706",
"to_ids": false,
"type": "whois-registrant-email",
"uuid": "56af479a-41d4-4775-bb13-46fa950d210f",
"value": "gordon_polo@yahoo.com"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327807",
"to_ids": true,
"type": "sha1",
"uuid": "56af47ff-5b08-42bf-98af-4312950d210f",
"value": "2b82c715c2f1480b57e59bd7c55ef32db312e008"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327807",
"to_ids": true,
"type": "sha1",
"uuid": "56af47ff-a02c-493a-be12-40b3950d210f",
"value": "c05bd53f91032f2c8cae509477d760537f014621"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327807",
"to_ids": true,
"type": "sha1",
"uuid": "56af47ff-c0bc-43aa-8408-41d8950d210f",
"value": "9b22373e8cd7c6b087ca62d1b154faa04d684549"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327808",
"to_ids": true,
"type": "sha1",
"uuid": "56af4800-58ec-4b70-bd88-417d950d210f",
"value": "7f168f8f17774feb5f3fe35d39c41564645afa24"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327808",
"to_ids": true,
"type": "sha1",
"uuid": "56af4800-c3b8-4287-8d93-4e87950d210f",
"value": "92632bd26fb2828ddf5a86687c837ca734d0fbbf"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327808",
"to_ids": true,
"type": "sha1",
"uuid": "56af4800-91ac-4bd5-b7c5-4b49950d210f",
"value": "9e61bb2da5e3b9760d992d052d824ffdd584e2ff"
},
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327809",
"to_ids": true,
"type": "sha1",
"uuid": "56af4801-5fbc-42f2-b045-4276950d210f",
"value": "ea24cded99b27ff44d2ed2688dea93e3ca0214c2"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454327834",
"to_ids": true,
"type": "ip-dst",
"uuid": "56af481a-d628-41a1-994d-4d5b950d210f",
"value": "176.103.49.34"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: 9e61bb2da5e3b9760d992d052d824ffdd584e2ff",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339054",
"to_ids": true,
"type": "sha256",
"uuid": "56af73ee-88bc-466b-9a0c-450c02de0b81",
"value": "c6a8c74711b1c6d38b7bb7b35772b80347f80cf16296e6439d21c877474ac2e6"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: 9e61bb2da5e3b9760d992d052d824ffdd584e2ff",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339054",
"to_ids": true,
"type": "md5",
"uuid": "56af73ee-afc0-46a9-b817-4d0d02de0b81",
"value": "ec7378a79eb9ffd88098932a505f53cc"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339054",
"to_ids": false,
"type": "link",
"uuid": "56af73ee-2a38-4a8e-b1c4-460802de0b81",
"value": "https://www.virustotal.com/file/c6a8c74711b1c6d38b7bb7b35772b80347f80cf16296e6439d21c877474ac2e6/analysis/1453383429/"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: 92632bd26fb2828ddf5a86687c837ca734d0fbbf",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339054",
"to_ids": true,
"type": "sha256",
"uuid": "56af73ee-2628-4579-8d87-424902de0b81",
"value": "a42786bec02b889675fdca7ebcc533dbc5f8d93609b6cf110d965b75dd22c971"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: 92632bd26fb2828ddf5a86687c837ca734d0fbbf",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339055",
"to_ids": true,
"type": "md5",
"uuid": "56af73ef-9200-469e-ba8b-4d6202de0b81",
"value": "d5c96a4f2e1e146a12f140f22b700333"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339055",
"to_ids": false,
"type": "link",
"uuid": "56af73ef-9d38-47c6-80ee-498902de0b81",
"value": "https://www.virustotal.com/file/a42786bec02b889675fdca7ebcc533dbc5f8d93609b6cf110d965b75dd22c971/analysis/1454058592/"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: 7f168f8f17774feb5f3fe35d39c41564645afa24",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339055",
"to_ids": true,
"type": "sha256",
"uuid": "56af73ef-95e0-4e21-894c-4b6a02de0b81",
"value": "794d07497f5b96efeb9428ac0fecd755878eaf906da6ffce14e940055fa7f17c"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: 7f168f8f17774feb5f3fe35d39c41564645afa24",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339055",
"to_ids": true,
"type": "md5",
"uuid": "56af73ef-4ac4-4873-b518-4ba402de0b81",
"value": "7b8b829fd94f2a070543cc2c6bfc4040"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339056",
"to_ids": false,
"type": "link",
"uuid": "56af73f0-9bf0-4865-a5c9-484402de0b81",
"value": "https://www.virustotal.com/file/794d07497f5b96efeb9428ac0fecd755878eaf906da6ffce14e940055fa7f17c/analysis/1453383400/"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: 9b22373e8cd7c6b087ca62d1b154faa04d684549",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339056",
"to_ids": true,
"type": "sha256",
"uuid": "56af73f0-91e8-4af7-bcc8-4cc002de0b81",
"value": "fdb4fc6c833353ea0202fd751900f3ac498db5209e8ca2b8de8f8bfca1fe1fdd"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: 9b22373e8cd7c6b087ca62d1b154faa04d684549",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339056",
"to_ids": true,
"type": "md5",
"uuid": "56af73f0-e09c-4b96-8611-464602de0b81",
"value": "bbf1327c1a5213b41a4d22c4b4806f7c"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339056",
"to_ids": false,
"type": "link",
"uuid": "56af73f0-cb58-4238-9992-40f202de0b81",
"value": "https://www.virustotal.com/file/fdb4fc6c833353ea0202fd751900f3ac498db5209e8ca2b8de8f8bfca1fe1fdd/analysis/1453383386/"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: c05bd53f91032f2c8cae509477d760537f014621",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339057",
"to_ids": true,
"type": "sha256",
"uuid": "56af73f1-15e4-47b3-adb7-413402de0b81",
"value": "f12b086eaf3a190e7882167638bfc418b438d0e95b846dc2c3c1e7a092b1596e"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: c05bd53f91032f2c8cae509477d760537f014621",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339057",
"to_ids": true,
"type": "md5",
"uuid": "56af73f1-d60c-4da3-81dc-400a02de0b81",
"value": "514b7da4b811da11fe7033aea155dba6"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339057",
"to_ids": false,
"type": "link",
"uuid": "56af73f1-b738-4032-b703-414202de0b81",
"value": "https://www.virustotal.com/file/f12b086eaf3a190e7882167638bfc418b438d0e95b846dc2c3c1e7a092b1596e/analysis/1454330041/"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: 2b82c715c2f1480b57e59bd7c55ef32db312e008",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339057",
"to_ids": true,
"type": "sha256",
"uuid": "56af73f1-2400-4eac-847e-495702de0b81",
"value": "cf1bbcaf1e6902c09da35ffe6f9b93081575e7e6e2e4754684f88eb7bb8ec478"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: 2b82c715c2f1480b57e59bd7c55ef32db312e008",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339058",
"to_ids": true,
"type": "md5",
"uuid": "56af73f2-0e8c-40a6-9355-478802de0b81",
"value": "c44f2d8ad37c18ea84a99db584d6992d"
},
{
"category": "External analysis",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1454339058",
"to_ids": false,
"type": "link",
"uuid": "56af73f2-a6ec-41a8-94ca-4ade02de0b81",
"value": "https://www.virustotal.com/file/cf1bbcaf1e6902c09da35ffe6f9b93081575e7e6e2e4754684f88eb7bb8ec478/analysis/1453894645/"
}
]
}
}
Reference in a new issue View git blame Copy permalink