1547 lines
No EOL
45 KiB
JSON
1547 lines
No EOL
45 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "1",
|
|
"date": "2017-09-11",
|
|
"extends_uuid": "",
|
|
"info": "M2M - Malspam 2017-09-11 \"Email Invoice Requested\"",
|
|
"publish_timestamp": "1505141141",
|
|
"published": true,
|
|
"threat_level_id": "3",
|
|
"timestamp": "1505141131",
|
|
"uuid": "59b6a0c8-ed80-4d1a-8693-4551950d210f",
|
|
"Orgc": {
|
|
"name": "CIRCL",
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#ffffff",
|
|
"name": "tlp:white"
|
|
},
|
|
{
|
|
"colour": "#0088cc",
|
|
"name": "misp-galaxy:ransomware=\"Locky\""
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "Artifacts dropped",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140936",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "59b6a0c8-4d1c-4095-8d53-4d84950d210f",
|
|
"value": "d4b05d9ecb82761df4b1e997c225c216"
|
|
},
|
|
{
|
|
"category": "Artifacts dropped",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140936",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "59b6a0c8-31c4-4cfe-8ac9-4e50950d210f",
|
|
"value": "6a9181b6e3cb369bdca58c1b98353fa7"
|
|
},
|
|
{
|
|
"category": "Artifacts dropped",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140937",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "59b6a0c9-4330-4e20-be0d-4251950d210f",
|
|
"value": "fb349ce628eadfd3e56f0bc8f8db6947"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140937",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0c9-14f4-4295-8453-420b950d210f",
|
|
"value": "http://1.babybrain.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140937",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0c9-ecf8-444f-95ef-4433950d210f",
|
|
"value": "1.babybrain.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "1.babybrain.ru",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140938",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0ca-30c8-4356-ab1b-4e98950d210f",
|
|
"value": "81.177.139.92"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140938",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0ca-e1cc-4527-a3e3-4133950d210f",
|
|
"value": "http://ar777.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140938",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0ca-0324-4a60-b382-4d35950d210f",
|
|
"value": "ar777.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "ar777.ru",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140938",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0ca-f8a0-4aaf-89ef-4f8b950d210f",
|
|
"value": "151.248.118.201"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140938",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0ca-777c-4991-8c6c-455a950d210f",
|
|
"value": "http://atm-digital.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140939",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0cb-60c8-4f86-8431-48da950d210f",
|
|
"value": "atm-digital.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "atm-digital.ru",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140939",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0cb-bfa0-46c6-b073-4732950d210f",
|
|
"value": "188.225.77.99"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140939",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0cb-2614-4ff0-be35-45ba950d210f",
|
|
"value": "http://avtomir2.rbs62.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140940",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0cc-8c68-4fe6-8340-4630950d210f",
|
|
"value": "avtomir2.rbs62.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140940",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0cc-dfd0-4134-bad7-fc5a950d210f",
|
|
"value": "http://bestclines.1234max.com/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140941",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0cd-1604-41c5-b644-4856950d210f",
|
|
"value": "bestclines.1234max.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "bestclines.1234max.com",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140941",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0cd-de90-4961-a7bb-4f85950d210f",
|
|
"value": "5.189.167.10"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140941",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0cd-e25c-47ea-bb21-4634950d210f",
|
|
"value": "http://biohazard.net-live.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140941",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0cd-e230-470f-8245-4df3950d210f",
|
|
"value": "biohazard.net-live.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "biohazard.net-live.ru",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140942",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0ce-5bc8-4564-83c5-4921950d210f",
|
|
"value": "188.244.34.63"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140942",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0ce-3348-4d6f-afab-4751950d210f",
|
|
"value": "http://bip32.1234max.com/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140942",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0ce-b48c-4612-aa7c-4aa5950d210f",
|
|
"value": "bip32.1234max.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140943",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0cf-094c-4e99-afbd-4cee950d210f",
|
|
"value": "http://civ.net-live.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140943",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0cf-4e14-44d9-9fbb-fc5a950d210f",
|
|
"value": "civ.net-live.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140943",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0cf-ade8-4e24-86fc-4ab6950d210f",
|
|
"value": "http://cyberline-tech.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140943",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0cf-1798-4e79-b4d6-40d3950d210f",
|
|
"value": "cyberline-tech.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140944",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d0-0fe4-4e59-81a2-4399950d210f",
|
|
"value": "http://dice.1234max.com/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140944",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d0-a41c-444f-ad94-4b2e950d210f",
|
|
"value": "dice.1234max.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140944",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d0-2010-4efd-a111-4df1950d210f",
|
|
"value": "http://ecers.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140945",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d1-b184-4081-a883-4e01950d210f",
|
|
"value": "ecers.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "ecers.ru",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140945",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0d1-6488-48cd-b879-4dd4950d210f",
|
|
"value": "78.110.50.125"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140945",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d1-504c-4ef1-8a3b-46f6950d210f",
|
|
"value": "http://edtrend.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140945",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d1-6e68-41eb-837d-4543950d210f",
|
|
"value": "edtrend.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140946",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d2-ca20-4b80-b51d-437d950d210f",
|
|
"value": "http://edu.ecers.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140946",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d2-cea0-4524-ad2f-468c950d210f",
|
|
"value": "edu.ecers.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140946",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d2-aac8-4ac2-a78c-4c7a950d210f",
|
|
"value": "http://fil.rbs62.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140947",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d3-27b0-478a-9b34-4938950d210f",
|
|
"value": "fil.rbs62.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140947",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d3-1844-477e-960c-4d9e950d210f",
|
|
"value": "http://holdtime.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140947",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d3-4768-4a4c-bc34-4661950d210f",
|
|
"value": "holdtime.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140947",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d3-3e28-4bf8-b59a-478b950d210f",
|
|
"value": "http://isp.mgpu.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140948",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d4-c908-4c9b-8269-4996950d210f",
|
|
"value": "isp.mgpu.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140949",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d5-a2f8-49e2-9d44-4f5d950d210f",
|
|
"value": "http://k1000.rbs62.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140949",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d5-996c-4d96-9187-4446950d210f",
|
|
"value": "k1000.rbs62.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140949",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d5-179c-43ce-8b15-4925950d210f",
|
|
"value": "http://kancmarkt.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140949",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d5-ea8c-4e72-a592-497b950d210f",
|
|
"value": "kancmarkt.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140950",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d6-4a00-4421-a69a-4900950d210f",
|
|
"value": "http://lum0s.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140950",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d6-d464-47ad-8528-4a17950d210f",
|
|
"value": "lum0s.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "lum0s.ru",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140950",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0d7-4118-46e4-b6d8-450c950d210f",
|
|
"value": "81.177.141.172"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140951",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d7-dcb4-40c1-8bb5-45d1950d210f",
|
|
"value": "http://mama.holdtime.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140951",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d7-840c-4206-9d05-4373950d210f",
|
|
"value": "mama.holdtime.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140951",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d7-ffb4-446e-a3db-4804950d210f",
|
|
"value": "http://martinagebhardt.hu/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140951",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d7-a91c-4b57-b40f-43d7950d210f",
|
|
"value": "martinagebhardt.hu"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "martinagebhardt.hu",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140952",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0d8-44c0-46db-96c7-47e0950d210f",
|
|
"value": "95.85.29.52"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140952",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d8-313c-4379-85d1-449e950d210f",
|
|
"value": "http://molapple.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140952",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d8-f374-4112-ae52-4db0950d210f",
|
|
"value": "molapple.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "molapple.ru",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140952",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0d8-0d14-49df-9398-457c950d210f",
|
|
"value": "77.108.83.244"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140953",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d9-c9ec-4db2-8fe4-43bc950d210f",
|
|
"value": "http://old.tsg-upravdom.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140953",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d9-4a08-4ed3-8d3d-49d7950d210f",
|
|
"value": "old.tsg-upravdom.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "old.tsg-upravdom.ru",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140953",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0d9-f21c-4f54-ba95-4801950d210f",
|
|
"value": "81.177.141.82"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140953",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0d9-5800-49b8-a329-47fc950d210f",
|
|
"value": "http://portal.rbs62.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140953",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0d9-25f0-4b07-94fb-4f8d950d210f",
|
|
"value": "portal.rbs62.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140954",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0da-ece4-46a9-bee9-4567950d210f",
|
|
"value": "http://proxy.tor4.biz/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140954",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0da-218c-4dd0-a37c-4467950d210f",
|
|
"value": "proxy.tor4.biz"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140954",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0da-7224-40ba-a138-4101950d210f",
|
|
"value": "http://ptr-spb.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140955",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0db-f858-4efa-85c3-414a950d210f",
|
|
"value": "ptr-spb.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "ptr-spb.ru",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140955",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0db-24e0-4a1f-9c49-4dd1950d210f",
|
|
"value": "188.127.230.15"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140955",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0db-bb48-4fa0-b787-405c950d210f",
|
|
"value": "http://rbs62.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140955",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0db-aa78-4a68-8c2f-44ee950d210f",
|
|
"value": "rbs62.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140956",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0dc-8e58-4e24-82b1-4356950d210f",
|
|
"value": "http://reicon.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140956",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0dc-a0e0-4932-8ed0-4e51950d210f",
|
|
"value": "reicon.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "reicon.ru",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140956",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0dc-ec6c-43ea-bc9f-474b950d210f",
|
|
"value": "109.120.162.26"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140956",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0dc-d618-4f65-8155-4946950d210f",
|
|
"value": "http://renych.net-live.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140957",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0dd-8198-40fb-926e-fc5a950d210f",
|
|
"value": "renych.net-live.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140957",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0dd-789c-41e8-960d-452b950d210f",
|
|
"value": "http://rp.holdtime.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140957",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0dd-94c0-473e-b353-4115950d210f",
|
|
"value": "rp.holdtime.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140958",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0de-89a4-4ef4-aee9-4654950d210f",
|
|
"value": "http://scripts.tor4.biz/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140958",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0de-491c-4cef-bcd5-49c1950d210f",
|
|
"value": "scripts.tor4.biz"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140959",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0df-e08c-4675-af62-4dd9950d210f",
|
|
"value": "http://shtamp.rbs62.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140959",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0df-f4b8-4afc-9af1-fc5a950d210f",
|
|
"value": "shtamp.rbs62.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140959",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0df-b060-4fc5-bdf7-41fb950d210f",
|
|
"value": "http://sptorgsib.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140959",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0df-4e6c-4cf4-89e1-47eb950d210f",
|
|
"value": "sptorgsib.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140960",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0e0-bac0-40e0-896f-4310950d210f",
|
|
"value": "http://team.givati.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140960",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0e0-cf3c-4b2f-a9a0-4c76950d210f",
|
|
"value": "team.givati.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140960",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0e0-df78-4e27-aeff-4566950d210f",
|
|
"value": "http://test.holdtime.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140960",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0e0-578c-4f5c-b96b-4123950d210f",
|
|
"value": "test.holdtime.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140961",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0e1-3a3c-46f1-bbf6-47ad950d210f",
|
|
"value": "http://thenovelgroup.com/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140961",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0e1-352c-49c0-b4f2-4836950d210f",
|
|
"value": "thenovelgroup.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140962",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0e2-ad14-4539-8b8a-4926950d210f",
|
|
"value": "http://tor4.biz/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140962",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0e2-4194-4589-9e25-4309950d210f",
|
|
"value": "tor4.biz"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140962",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0e2-4314-4f08-b111-4378950d210f",
|
|
"value": "http://triumf.rbs62.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140962",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0e3-7d38-4f81-b69d-4efc950d210f",
|
|
"value": "triumf.rbs62.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140963",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0e3-8f50-4d86-9f27-4ee7950d210f",
|
|
"value": "http://umo.holdtime.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140963",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0e3-38b8-48a3-aaf3-409c950d210f",
|
|
"value": "umo.holdtime.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140963",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0e3-229c-4cae-9a37-49a2950d210f",
|
|
"value": "http://urstab.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140964",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0e4-6a64-40a8-bef9-4ec4950d210f",
|
|
"value": "urstab.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "urstab.ru",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140964",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0e4-ba90-4c39-8f0f-4fbd950d210f",
|
|
"value": "81.177.135.41"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140964",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0e4-361c-4c7b-881e-4f71950d210f",
|
|
"value": "http://visa-sport.ru/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140964",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0e4-5a2c-4651-b824-420a950d210f",
|
|
"value": "visa-sport.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140965",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0e5-2dd0-4983-8f0d-47e0950d210f",
|
|
"value": "http://webmail.tor4.biz/w/"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140965",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0e5-ec10-4f6c-958b-410b950d210f",
|
|
"value": "webmail.tor4.biz"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140965",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0e5-3da0-4036-9cfa-424c950d210f",
|
|
"value": "http://wittinhohemmo.net/load.php"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140966",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0e6-d2c0-44f8-9f1d-fc5a950d210f",
|
|
"value": "wittinhohemmo.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "wittinhohemmo.net",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140966",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0e6-3bb0-473e-801e-4d9e950d210f",
|
|
"value": "47.88.55.29"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140966",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0e6-b9c8-45b0-98c4-4077950d210f",
|
|
"value": "http://phuket-olivia-yoga.com/isklsvx.exe"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140967",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0e7-9dfc-43db-b96b-4961950d210f",
|
|
"value": "phuket-olivia-yoga.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "phuket-olivia-yoga.com",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140967",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0e7-444c-4a19-94f3-4004950d210f",
|
|
"value": "208.86.184.66"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140967",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0e7-f7fc-4ba2-acaa-40c2950d210f",
|
|
"value": "http://setincon.com/brpxsfr.exe"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140967",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0e7-0a90-43bb-b195-47ed950d210f",
|
|
"value": "setincon.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "setincon.com",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140968",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0e8-2b18-43c7-beec-49f9950d210f",
|
|
"value": "64.6.250.196"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140968",
|
|
"to_ids": false,
|
|
"type": "url",
|
|
"uuid": "59b6a0e8-df70-413c-bf5d-4038950d210f",
|
|
"value": "http://188.127.239.10/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140969",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0e9-b694-463b-982f-fc5a950d210f",
|
|
"value": "188.127.239.10"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140969",
|
|
"to_ids": false,
|
|
"type": "url",
|
|
"uuid": "59b6a0e9-faf0-47cd-8fce-408a950d210f",
|
|
"value": "http://185.67.2.156/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140969",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0e9-c660-46cf-ba0c-40c3950d210f",
|
|
"value": "185.67.2.156"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140969",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0e9-8a6c-4da4-8071-4776950d210f",
|
|
"value": "http://hcpedowpqrgw.biz/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140969",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0e9-1ae0-4629-a9ac-456e950d210f",
|
|
"value": "hcpedowpqrgw.biz"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140970",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0ea-d034-493e-9f02-43d2950d210f",
|
|
"value": "http://vkhwgkp.biz/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140970",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0ea-8b50-439f-b3dc-421a950d210f",
|
|
"value": "vkhwgkp.biz"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140970",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0ea-db5c-45e6-95e6-4fe9950d210f",
|
|
"value": "http://evruhqgfyyw.pl/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140970",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0ea-5360-4b1a-9c87-41be950d210f",
|
|
"value": "evruhqgfyyw.pl"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140971",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0eb-efe0-487a-89d8-477e950d210f",
|
|
"value": "http://ybtjrjdtkxeakbcre.biz/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140971",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0eb-e9e8-44ea-89dc-4e48950d210f",
|
|
"value": "ybtjrjdtkxeakbcre.biz"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140971",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0eb-0880-4327-baa2-40dc950d210f",
|
|
"value": "http://daohevtnaju.biz/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140971",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0eb-a70c-4a23-af70-432c950d210f",
|
|
"value": "daohevtnaju.biz"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140971",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0eb-9cec-4666-8785-4290950d210f",
|
|
"value": "http://giogbxgijr.pw/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140972",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0ec-03f0-493f-8daf-4ac2950d210f",
|
|
"value": "giogbxgijr.pw"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "giogbxgijr.pw",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140972",
|
|
"to_ids": false,
|
|
"type": "ip-dst",
|
|
"uuid": "59b6a0ec-769c-4be2-b54d-48c1950d210f",
|
|
"value": "141.8.226.58"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140972",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0ec-424c-407d-80ac-49a6950d210f",
|
|
"value": "http://dljyopb.org/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140972",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0ec-bcb0-40d8-af8b-461a950d210f",
|
|
"value": "dljyopb.org"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140972",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0ec-6cf4-451f-b949-43fa950d210f",
|
|
"value": "http://mdojgtygelmlfxmiu.work/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140973",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0ed-aa4c-4b1a-8729-4535950d210f",
|
|
"value": "mdojgtygelmlfxmiu.work"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140973",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0ed-67b4-48d3-9a61-4781950d210f",
|
|
"value": "http://cykyqrpomfks.ru/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140973",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0ed-3d3c-470e-accb-fc5a950d210f",
|
|
"value": "cykyqrpomfks.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140973",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0ed-c0c0-45a4-8dec-4a6b950d210f",
|
|
"value": "http://qjxyuqlikgmkagbns.info/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140974",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0ee-f498-4980-8420-4941950d210f",
|
|
"value": "qjxyuqlikgmkagbns.info"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140974",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0ee-043c-4aae-be8a-4f5d950d210f",
|
|
"value": "http://oxqtrmlafwhumnni.info/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140974",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0ee-a400-4701-a612-44a6950d210f",
|
|
"value": "oxqtrmlafwhumnni.info"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140975",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "59b6a0ef-0140-44c4-85bd-401f950d210f",
|
|
"value": "http://nxlrplajhv.biz/imageload.cgi"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1505140975",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "59b6a0ef-1634-4dc4-9471-42fa950d210f",
|
|
"value": "nxlrplajhv.biz"
|
|
}
|
|
]
|
|
}
|
|
} |