1034 lines
No EOL
36 KiB
JSON
1034 lines
No EOL
36 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "2",
|
|
"date": "2016-08-10",
|
|
"extends_uuid": "",
|
|
"info": "OSINT EFF Report Operation Manul",
|
|
"publish_timestamp": "1471440553",
|
|
"published": true,
|
|
"threat_level_id": "2",
|
|
"timestamp": "1471440537",
|
|
"uuid": "57ab2b08-fcd8-48b2-ba43-4cf3950d210f",
|
|
"Orgc": {
|
|
"name": "CthulhuSPRL.be",
|
|
"uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": "0",
|
|
"name": "OSINT",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": "0",
|
|
"name": "tlp:white",
|
|
"relationship_type": ""
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835519",
|
|
"to_ids": false,
|
|
"type": "link",
|
|
"uuid": "57ab2b3f-9b80-49f5-99a5-4803950d210f",
|
|
"value": "https://www.eff.org/files/2016/08/03/i-got-a-letter-from-the-government.pdf"
|
|
},
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835519",
|
|
"to_ids": false,
|
|
"type": "link",
|
|
"uuid": "57ab2b3f-6aa4-42b7-aa4f-4fc6950d210f",
|
|
"value": "https://www.eff.org/wp/operation-manul"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835555",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ab2b63-0a20-413c-a455-4d0a950d210f",
|
|
"value": "axroot.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835556",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ab2b64-07dc-4cd3-8915-4b7a950d210f",
|
|
"value": "kaliex.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835556",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ab2b64-d810-46d4-95dd-460a950d210f",
|
|
"value": "adobeair.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835556",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ab2b64-7f58-44ba-9c62-439c950d210f",
|
|
"value": "mangoco.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835556",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ab2b64-8058-452e-bd87-4690950d210f",
|
|
"value": "orange2015.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835556",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ab2b64-8fb0-49df-adea-4af6950d210f",
|
|
"value": "accountslogin.services"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835557",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ab2b65-2794-43e1-88a1-408c950d210f",
|
|
"value": "adobeinstall.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835557",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ab2b65-5740-44d2-a60b-42d9950d210f",
|
|
"value": "dropboxonline.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835596",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "57ab2b8c-0824-456d-b8dc-41d2950d210f",
|
|
"value": "jaysonj.no-ip.biz"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835596",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "57ab2b8c-41f8-4064-8673-4ae3950d210f",
|
|
"value": "adobe-flashviewer.accountslogin.services"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835647",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bbf-cbdc-4d20-af0d-4197950d210f",
|
|
"value": "0491f4e55158d745fd1653950c89fcc9b37d3c1102680bd3ce67616a36bb2592"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835647",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bbf-fc34-48e7-b446-4916950d210f",
|
|
"value": "06529ac1d3388732ebca75b8ee0adf0bc7f45d4c448ec98223dd7a258a0f1f33"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835648",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc0-ee94-44d5-bce1-4870950d210f",
|
|
"value": "1192b5111f7c75417215a1285a20147f5ab085368fa95d74e7603d26736057ac"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835648",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc0-b8fc-4ec6-8e49-4037950d210f",
|
|
"value": "1e3966e77ad1cbf3e3ef76803fbf92300b2b88af39650a1208520e0cdc05645b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835649",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc1-dbec-4e0e-ad97-48a4950d210f",
|
|
"value": "2431ff8ba00923a9c115a57e541d9d20e0a68b6cb1b48b87e7797864cf07dfab"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835649",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc1-1bf4-465f-9e1a-4dd7950d210f",
|
|
"value": "345773dc4215c8c189d21536755614ca7b89082b96563239e363dd72c0cd8c68"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835650",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc2-c070-47ae-ae3e-453f950d210f",
|
|
"value": "373231f5be17e09e4ce94f76b35e5be57c961d6c8a9286b2e20e203d53b3c9dd"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835650",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc2-22d4-45dc-9512-4b94950d210f",
|
|
"value": "39802d53ae4a29c528626b0870872040dc5c994fb3b6b9e4a3b982144ad56e6c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835650",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc2-acc0-46e3-9f9b-42dd950d210f",
|
|
"value": "40d30bc2db27e2a8a12cdeb5aae19f04064e5a1775bd3e6cf61a7070b797d3b3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835651",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc3-065c-4d01-94ed-4f9f950d210f",
|
|
"value": "40e9c694901aeb27993a8cd81f872076ee430e151f64af06993eb79442103ef8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835652",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc4-2c8c-41ad-87d4-4e83950d210f",
|
|
"value": "4730c6033d8644c0aae46003bab3254e4beb62187573ffb5ba5bc95a28ddcd93"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835652",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc4-7608-4c6f-984d-4d5a950d210f",
|
|
"value": "4f1923485e8cdd052467d335a6384f93cd1d50b5d927aea471e56290be29ffa3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835653",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc5-82a4-4924-9a7d-4f0f950d210f",
|
|
"value": "576ca2b0c5fe1c756c245cb82d6a2ecce7f6976d5c3f3b338f686e06955032cb"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835653",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc5-25a4-4d2a-be3d-479f950d210f",
|
|
"value": "5e322d208d61dcbf17914e24103710c52878e8cf50957f3d336736f4a1851951"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835653",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc5-51d0-4100-8754-41b6950d210f",
|
|
"value": "652ec150db9a191942807ee5cf4772e75dfac562739477eacc6655fbec880ad7"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835654",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc6-fff0-49e8-847e-49ad950d210f",
|
|
"value": "65af112ce229ad888bf4bbba1e3dba701e0e68c9caf81543bb395a8b8192ba8e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835654",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc6-2810-48cd-bc71-4124950d210f",
|
|
"value": "6eea4a67305f67cc7c016256e93eb816de32b6e9ad700f75828be9f97c28c0e0"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835655",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc7-dbb4-4e2f-ade8-4eb8950d210f",
|
|
"value": "75ee00a36d324a89fc9ef4d7dbe606b885ec072388ef7b55d39112af7dbca665"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835655",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc7-4770-47df-b8b7-4e3d950d210f",
|
|
"value": "75f51845de4d0deae8aaab737a71bb8aed14bfa4919712bcdea212f62b70c07f"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835656",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc8-5118-40d4-8d66-4f9a950d210f",
|
|
"value": "778a01389b17a8ff20c445e0856b3704ac50844faa8d36c01e0ff02518e4c6d3"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835656",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc8-0d94-448d-a1e5-49aa950d210f",
|
|
"value": "8c33b645e6362ab7e8c8a9989715193b4c9655fd576812218f3957c3fff8c429"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835657",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc9-bd90-4e68-a68c-475a950d210f",
|
|
"value": "8d054753e0ed754398835bed794ba4fae64a2efb018f98d3c61064de8aaa231d"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835657",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bc9-7334-47c4-a504-42df950d210f",
|
|
"value": "91d251b11c59b5e25e0c1ae55421893fce8f180a97e2eef88122c61e8cdf1bae"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835658",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bca-1698-468f-8cd8-412e950d210f",
|
|
"value": "926a0196e4a72ed6eb20b51953cc17e8856ea9c0ef554681b7d7f0ecad870a2e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835658",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bca-afbc-41da-9db5-412c950d210f",
|
|
"value": "99e699e358be9e59cfad6124f44a96d3d1577edf9767afe17281adb37d901e22"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835659",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bcb-6730-4f2d-8530-46b5950d210f",
|
|
"value": "a91c2cad20935a85d6eed72ef663254396914811f043018732d29276424a9578"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835659",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bcb-e2c0-4630-a2c7-47b0950d210f",
|
|
"value": "ade5bd96bfba79051f8e8ed8fe973edd89e5f1ec6469393967c3ad7519a95650"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835659",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bcb-7280-4724-94ba-46e7950d210f",
|
|
"value": "b002e8b6406fbdf3de9bfcb3493e61c8a44b331f53125e8fed9daa351c49fd34"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835659",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bcb-20b4-4873-bded-4c9c950d210f",
|
|
"value": "d803c4d736bcb247d23735a7160b93c2f3d98de5d432680f5eaf9212f965248c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835659",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bcb-dc08-47f9-ab62-48ae950d210f",
|
|
"value": "e4381ad27b10d895ad8338ba399221d385653b83b8d5dbd5a32cb86a0c318d44"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835660",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bcc-4d10-4766-800c-420f950d210f",
|
|
"value": "eccb3d7d1e8a7cd27c7caf21885c95122eed28361651e8e47b8c02828b232c7e"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835660",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bcc-82b8-42ac-9abb-4deb950d210f",
|
|
"value": "f56c545a3157f1cf753de5ac56bb52e5af42bc6b8225d26aafdce3b430287f34"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835660",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bcc-7200-4fa2-84d7-4aa7950d210f",
|
|
"value": "fc49b37b879af6e675f223d324d32c894ba83952b2ee109d52bfa9bd8212e005"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470835661",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "57ab2bcd-c680-4c98-a8c7-4ee7950d210f",
|
|
"value": "f9dd8ebb062842798d53e78633ed9ca296f4a93dafb0fe60320a34a3d58d78d4"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 0491f4e55158d745fd1653950c89fcc9b37d3c1102680bd3ce67616a36bb2592)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837735",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57ab33e7-cd60-4c68-bd03-4231950d210f",
|
|
"value": "e5a5ecc04210ced0c5e7871bc5942518"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 1e3966e77ad1cbf3e3ef76803fbf92300b2b88af39650a1208520e0cdc05645b)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837741",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57ab33ed-0524-4a2e-aa35-41a3950d210f",
|
|
"value": "405dba47e2b03f53db2101444e6a925c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 345773dc4215c8c189d21536755614ca7b89082b96563239e363dd72c0cd8c68)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837744",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57ab33f0-5e9c-4352-8d4f-4c99950d210f",
|
|
"value": "34d19df50f7dc936b5e4e13bb29a74ac"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 373231f5be17e09e4ce94f76b35e5be57c961d6c8a9286b2e20e203d53b3c9dd)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837747",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57ab33f3-05f0-46cd-911d-4e03950d210f",
|
|
"value": "6a4df36f8f92b1b3c99949936e4407ed"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 4f1923485e8cdd052467d335a6384f93cd1d50b5d927aea471e56290be29ffa3)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837753",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57ab33f9-5dc4-4327-a516-47de950d210f",
|
|
"value": "f000ca9522aafa0c54b863528228a43b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 5e322d208d61dcbf17914e24103710c52878e8cf50957f3d336736f4a1851951)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837757",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57ab33fd-be4c-45ff-894b-4ef4950d210f",
|
|
"value": "748e0825e487071146fdf811d55e4cc5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 75ee00a36d324a89fc9ef4d7dbe606b885ec072388ef7b55d39112af7dbca665)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837762",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57ab3402-8cdc-4f2a-9228-4895950d210f",
|
|
"value": "d1bd6495636412713f10d5014cd32582"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 8d054753e0ed754398835bed794ba4fae64a2efb018f98d3c61064de8aaa231d)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837766",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57ab3406-c6c8-4c82-badd-4dd5950d210f",
|
|
"value": "55cc4f9e159a225709dba3b570a722c1"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 0491f4e55158d745fd1653950c89fcc9b37d3c1102680bd3ce67616a36bb2592)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837737",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57ab33e9-818c-4d59-8b33-478e950d210f",
|
|
"value": "7daa85fa02ee70bbd70c51affae4e6f835f1455c"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 1e3966e77ad1cbf3e3ef76803fbf92300b2b88af39650a1208520e0cdc05645b)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837741",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57ab33ed-53f8-4c93-83f2-4791950d210f",
|
|
"value": "ed769ff77f46730a9b58a111c52f9e498ec00838"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 345773dc4215c8c189d21536755614ca7b89082b96563239e363dd72c0cd8c68)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837745",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57ab33f1-b74c-4210-9d96-4e94950d210f",
|
|
"value": "65da12d59bf64f80f728c8dc9fa46e18f6ad08cb"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 373231f5be17e09e4ce94f76b35e5be57c961d6c8a9286b2e20e203d53b3c9dd)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837748",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57ab33f4-f790-4fb7-9a9a-4259950d210f",
|
|
"value": "43eeda0b33b97f18f1e4eb885e4211f1ae33bcc8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 4f1923485e8cdd052467d335a6384f93cd1d50b5d927aea471e56290be29ffa3)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837754",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57ab33fa-9b58-4ebf-ad7d-4038950d210f",
|
|
"value": "c636e88b9e8079ba086f5cdb132fa39e747d0f23"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 5e322d208d61dcbf17914e24103710c52878e8cf50957f3d336736f4a1851951)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837758",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57ab33fe-d04c-45f8-874b-49ea950d210f",
|
|
"value": "a5baf0d5cac512713ae3a6925d02b592a2bcbb1b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 75ee00a36d324a89fc9ef4d7dbe606b885ec072388ef7b55d39112af7dbca665)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837763",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57ab3403-c560-4d52-8c6b-466a950d210f",
|
|
"value": "100f40a5ae4e748e8e74f9dc01e692697bfbde33"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 91d251b11c59b5e25e0c1ae55421893fce8f180a97e2eef88122c61e8cdf1bae)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837768",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57ab3408-faf0-4902-ab37-40ec950d210f",
|
|
"value": "00dd12e8106d4679c580a3d5d5e33fb7"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via a91c2cad20935a85d6eed72ef663254396914811f043018732d29276424a9578)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837772",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57ab340c-b8e8-4a2b-926e-4300950d210f",
|
|
"value": "643b0db380149d220ce9074a29f83841"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via d803c4d736bcb247d23735a7160b93c2f3d98de5d432680f5eaf9212f965248c)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837776",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57ab3410-5980-457d-8178-488c950d210f",
|
|
"value": "4bbcc24d287d2d2dbca475047976d178"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via eccb3d7d1e8a7cd27c7caf21885c95122eed28361651e8e47b8c02828b232c7e)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837780",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57ab3414-bd98-4403-bd13-49a7950d210f",
|
|
"value": "ca6f9ce45b99751dc63d16a690390ce8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via fc49b37b879af6e675f223d324d32c894ba83952b2ee109d52bfa9bd8212e005)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837783",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "57ab3417-a908-4ab3-b4c0-49db950d210f",
|
|
"value": "274ba30d17c6b1ad63df9d03dce36be8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 8d054753e0ed754398835bed794ba4fae64a2efb018f98d3c61064de8aaa231d)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837767",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57ab3407-dc54-4d85-bfc3-4351950d210f",
|
|
"value": "adb7fc1cc9dd76725c1a81c5f17d03de64f73296"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via 91d251b11c59b5e25e0c1ae55421893fce8f180a97e2eef88122c61e8cdf1bae)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837769",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57ab3409-9f14-4e2b-8a7d-4f11950d210f",
|
|
"value": "4b584d44c2bbb1a54af07f4cf744010b769a8d07"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via a91c2cad20935a85d6eed72ef663254396914811f043018732d29276424a9578)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837773",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57ab340d-1048-406c-890c-482f950d210f",
|
|
"value": "8aff7278e29341030e4b4c3ff1ae644303fe896b"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via d803c4d736bcb247d23735a7160b93c2f3d98de5d432680f5eaf9212f965248c)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837777",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57ab3411-ff50-4ec1-99ca-47ef950d210f",
|
|
"value": "710733f641bfaccd1f8fe9949b7d7485be17a0dd"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via eccb3d7d1e8a7cd27c7caf21885c95122eed28361651e8e47b8c02828b232c7e)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837780",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57ab3414-8ab8-4f0d-ba4e-4c4b950d210f",
|
|
"value": "916df5b73b75f03e86c78fc3d19ef5d2dc1b7b92"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "Automatically added (via fc49b37b879af6e675f223d324d32c894ba83952b2ee109d52bfa9bd8212e005)",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1470837784",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "57ab3418-c8c4-4962-9300-431a950d210f",
|
|
"value": "7748a42d7db1ddd455c1ac9017f05c8b9620dd35"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440038",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b464a6-1154-4bb3-963b-47df950d210f",
|
|
"value": "111.90.150.70"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440038",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b464a6-6a34-4963-a8fd-4ec5950d210f",
|
|
"value": "111.90.150.221"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440039",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b464a7-532c-4578-9357-41d1950d210f",
|
|
"value": "184.168.221.61"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440040",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b464a8-18b0-4282-b046-4a5d950d210f",
|
|
"value": "50.63.202.94"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440041",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b464a9-5110-4784-b3bb-426c950d210f",
|
|
"value": "5.39.10.93"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440041",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b464a9-b154-4770-8861-4216950d210f",
|
|
"value": "176.32.230.24"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440042",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b464aa-e170-4336-8e9e-42c6950d210f",
|
|
"value": "65.19.141.204"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440042",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b464aa-445c-47e4-9558-4cab950d210f",
|
|
"value": "111.90.140.11"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440045",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b464ad-26bc-4a20-8ff7-4ccd950d210f",
|
|
"value": "50.63.197.10"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440046",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b464ae-f624-408c-a04b-42e0950d210f",
|
|
"value": "50.62.160.216"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440047",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b464af-cf08-41be-8983-46e5950d210f",
|
|
"value": "74.208.167.252"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440239",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b4656f-19c0-4631-83bb-4ab8950d210f",
|
|
"value": "64.202.189.170"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440240",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b46570-18fc-4b58-afd8-401d950d210f",
|
|
"value": "174.120.120.15"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440240",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b46570-79e0-4de9-a73d-49f3950d210f",
|
|
"value": "208.73.211.167"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440240",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b46570-8508-4c40-8810-478f950d210f",
|
|
"value": "208.73.210.29"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440240",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b46570-eb4c-4127-8640-4845950d210f",
|
|
"value": "209.99.40.220"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440240",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b46570-0ff8-43af-89ab-4ec0950d210f",
|
|
"value": "68.178.232.99"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440351",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b465df-13c0-4cf6-be76-4917950d210f",
|
|
"value": "209.99.40.225"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "Imported via the Freetext Import Tool",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1471440536",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57b46698-58c4-417b-bb33-4ee9950d210f",
|
|
"value": "209.99.40.224"
|
|
}
|
|
]
|
|
}
|
|
} |