227 lines
No EOL
6.7 KiB
JSON
227 lines
No EOL
6.7 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "0",
|
|
"date": "2016-09-14",
|
|
"extends_uuid": "",
|
|
"info": "Malspam 2016-09-14 (.js in .zip) - campaign: \"Delivery Confirmation\"",
|
|
"publish_timestamp": "1473858375",
|
|
"published": true,
|
|
"threat_level_id": "3",
|
|
"timestamp": "1473858364",
|
|
"uuid": "57d94b0f-ffd4-4363-945d-45f0950d210f",
|
|
"Orgc": {
|
|
"name": "CIRCL",
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#ffffff",
|
|
"name": "tlp:white"
|
|
},
|
|
{
|
|
"colour": "#3b7500",
|
|
"name": "circl:incident-classification=\"malware\""
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858360",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57d94b38-6554-496c-8a8d-4a41950d210f",
|
|
"value": "112.213.94.125"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858361",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57d94b39-ad80-4b10-ae9a-4d27950d210f",
|
|
"value": "115.159.97.197"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858361",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57d94b39-60d4-492e-991d-4ce4950d210f",
|
|
"value": "123.30.208.178"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858361",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57d94b39-5d44-414c-8b53-41a2950d210f",
|
|
"value": "124.217.255.45"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858361",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57d94b39-a048-4e7b-8b36-4338950d210f",
|
|
"value": "74.220.202.49"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858361",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57d94b39-ef70-44ca-8767-4d2b950d210f",
|
|
"value": "88.198.138.107"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858362",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57d94b3a-5dac-409d-9bf1-47ec950d210f",
|
|
"value": "amaranthine-deerplacenta.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858362",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57d94b3a-dbb4-43af-8145-47bf950d210f",
|
|
"value": "dropsheep.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858362",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57d94b3a-d34c-43d1-92e0-45a5950d210f",
|
|
"value": "http://amaranthine-deerplacenta.com/hjy93JNBasdas"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858362",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57d94b3a-e504-4cbc-87c6-47c9950d210f",
|
|
"value": "http://dropsheep.com/hjy93JNBasdas"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858362",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57d94b3a-b85c-4d94-9c70-48c4950d210f",
|
|
"value": "http://janie-royce.com/hjy93JNBasdas"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858363",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57d94b3b-1504-4e54-9041-49d9950d210f",
|
|
"value": "http://thcsgoxoai.com/hjy93JNBasdas"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858363",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57d94b3b-8f8c-4f09-835d-4417950d210f",
|
|
"value": "http://vinaxanh.com/hjy93JNBasdas"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858363",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57d94b3b-1740-4675-8833-45c4950d210f",
|
|
"value": "http://ygc1688.com/hjy93JNBasdas"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858363",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57d94b3b-f63c-4e19-b6a7-443d950d210f",
|
|
"value": "janie-royce.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858364",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57d94b3c-fa8c-41a4-8f56-42a4950d210f",
|
|
"value": "thcsgoxoai.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858364",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57d94b3c-f778-4394-812c-44c1950d210f",
|
|
"value": "vinaxanh.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1473858364",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57d94b3c-d850-487b-8770-4bf8950d210f",
|
|
"value": "ygc1688.com"
|
|
}
|
|
]
|
|
}
|
|
} |