253 lines
No EOL
7.5 KiB
JSON
253 lines
No EOL
7.5 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "0",
|
|
"date": "2016-09-19",
|
|
"extends_uuid": "",
|
|
"info": "Malspam 2016-09-19 (.js in .zip) - campaign: \"Express Parcel service\"",
|
|
"publish_timestamp": "1474276825",
|
|
"published": true,
|
|
"threat_level_id": "3",
|
|
"timestamp": "1474276807",
|
|
"uuid": "57dfad33-41c0-4000-8d94-4149950d210f",
|
|
"Orgc": {
|
|
"name": "CIRCL",
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": "0",
|
|
"name": "tlp:white",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#3a7300",
|
|
"local": "0",
|
|
"name": "circl:incident-classification=\"malware\"",
|
|
"relationship_type": ""
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276803",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57dfadc3-e644-474a-9027-4db6950d210f",
|
|
"value": "178.212.131.10"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276803",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57dfadc3-7338-4d05-ae2c-42d8950d210f",
|
|
"value": "91.194.250.131"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276803",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57dfadc3-14f8-4c2b-b0a4-4541950d210f",
|
|
"value": "foveawaac.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276804",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc4-f14c-408e-a447-4027950d210f",
|
|
"value": "http://foveawaac.net/jdpoko"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276804",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc4-daa4-4bc4-83d3-49ca950d210f",
|
|
"value": "http://foveawaac.net/qq5dk"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276804",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc4-6760-4daa-a760-4e8d950d210f",
|
|
"value": "http://foveawaac.net/w2guf"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276804",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc4-bce4-488f-9bb3-4301950d210f",
|
|
"value": "http://foveawaac.net/wzwzjply"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276804",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc4-33b8-4391-899a-42b7950d210f",
|
|
"value": "http://foveawaac.net/yjmaazj"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276805",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc5-c690-4a44-adac-4695950d210f",
|
|
"value": "http://merofid.com/pitggs52"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276805",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc5-f1e4-4185-b4d0-4ae1950d210f",
|
|
"value": "http://merofid.com/rsyhqoz"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276805",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc5-41cc-403b-a70b-4d7c950d210f",
|
|
"value": "http://merofid.com/w5tnnf6s"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276805",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc5-5828-4520-ba6f-4c49950d210f",
|
|
"value": "http://merofid.com/z3zeg"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276805",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc5-5534-4c29-9e17-4ca2950d210f",
|
|
"value": "http://merofid.com/zn6mcj"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276806",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc6-83dc-4c3e-9c10-49f2950d210f",
|
|
"value": "http://roxieimshi.com/cpboa"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276806",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc6-336c-449f-81c3-47d7950d210f",
|
|
"value": "http://roxieimshi.com/eppmn"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276806",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc6-d368-43ff-b4e6-4cbb950d210f",
|
|
"value": "http://roxieimshi.com/f10h5fzg"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276806",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc6-84c8-45fb-a531-4038950d210f",
|
|
"value": "http://roxieimshi.com/w41x413"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276806",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57dfadc6-8cd8-4afd-a495-444f950d210f",
|
|
"value": "http://roxieimshi.com/y4lf1neg"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276807",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57dfadc7-3624-40f7-872e-4a7a950d210f",
|
|
"value": "merofid.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1474276807",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57dfadc7-21b0-427a-af27-41d6950d210f",
|
|
"value": "roxieimshi.com"
|
|
}
|
|
]
|
|
}
|
|
} |