adulau/misp-circl-feed
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Packages Wiki Activity Actions
misp-circl-feed/feeds/circl/misp/59d4b6f8-75b0-4cc8-9872-43de950d210f.json

490 lines
No EOL
14 KiB
JSON
Raw Blame History

{
"Event": {
"analysis": "1",
"date": "2017-10-04",
"extends_uuid": "",
"info": "M2M - Locky 2017-10-04 : Affid=3, offline, \".ykcol\" : \"Copy of invoice A1234567890...\" - \"InvoiceA1234567890.7z\"",
"publish_timestamp": "1508084680",
"published": true,
"threat_level_id": "3",
"timestamp": "1508084675",
"uuid": "59d4b6f8-75b0-4cc8-9872-43de950d210f",
"Orgc": {
"name": "CIRCL",
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
},
"Tag": [
{
"colour": "#ffffff",
"local": "0",
"name": "tlp:white",
"relationship_type": ""
},
{
"colour": "#006c6c",
"local": "0",
"name": "ecsirt:malicious-code=\"ransomware\"",
"relationship_type": ""
},
{
"colour": "#0088cc",
"local": "0",
"name": "misp-galaxy:ransomware=\"Locky\"",
"relationship_type": ""
}
],
"Attribute": [
{
"category": "Artifacts dropped",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084581",
"to_ids": true,
"type": "md5",
"uuid": "59d4b6f9-3d80-4cf9-9991-4246950d210f",
"value": "3ba59430e3a75cf5c6ec1b7fcc5dfe33"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084581",
"to_ids": true,
"type": "url",
"uuid": "59d4b6f9-36f8-4874-bb58-486a950d210f",
"value": "http://cutwell.ca/8etyfh3ni"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084581",
"to_ids": true,
"type": "hostname",
"uuid": "59d4b6f9-30a4-4d1d-9923-4b4b950d210f",
"value": "cutwell.ca"
},
{
"category": "Network activity",
"comment": "cutwell.ca",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084581",
"to_ids": false,
"type": "ip-dst",
"uuid": "59d4b6fa-7cc8-4f75-844c-43e0950d210f",
"value": "98.124.251.68"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084581",
"to_ids": true,
"type": "url",
"uuid": "59d4b6fa-bd90-43d5-a3b5-4af6950d210f",
"value": "http://ericweb.co.za/8etyfh3ni"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084581",
"to_ids": true,
"type": "hostname",
"uuid": "59d4b6fa-e374-4a41-874e-4f7c950d210f",
"value": "ericweb.co.za"
},
{
"category": "Network activity",
"comment": "ericweb.co.za",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": false,
"type": "ip-dst",
"uuid": "59d4b6fb-2660-4744-9664-4784950d210f",
"value": "196.25.211.127"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "url",
"uuid": "59d4b6fb-2438-444f-a035-4046950d210f",
"value": "http://pciholog.ru/8etyfh3ni"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "hostname",
"uuid": "59d4b6fb-cb84-477e-a9fd-434f950d210f",
"value": "pciholog.ru"
},
{
"category": "Network activity",
"comment": "pciholog.ru",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": false,
"type": "ip-dst",
"uuid": "59d4b6fc-ece4-4f26-b605-41d8950d210f",
"value": "89.253.235.118"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "url",
"uuid": "59d4b6fc-78a4-45a0-912d-4de0950d210f",
"value": "http://schoensigns.com/8etyfh3ni"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "hostname",
"uuid": "59d4b6fc-a674-4353-a990-493e950d210f",
"value": "schoensigns.com"
},
{
"category": "Network activity",
"comment": "schoensigns.com",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": false,
"type": "ip-dst",
"uuid": "59d4b6fd-765c-4fbe-8fc8-4596950d210f",
"value": "184.168.126.30"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "url",
"uuid": "59d4b6fd-7a8c-41f5-a711-40e9950d210f",
"value": "http://scouting-bvb.nl/8etyfh3ni"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "hostname",
"uuid": "59d4b6fd-e890-4dcb-9389-47b5950d210f",
"value": "scouting-bvb.nl"
},
{
"category": "Network activity",
"comment": "scouting-bvb.nl",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": false,
"type": "ip-dst",
"uuid": "59d4b6fe-f0f8-45ea-aa55-49e1950d210f",
"value": "46.235.44.76"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "url",
"uuid": "59d4b6fe-6830-4fa3-97f5-4903950d210f",
"value": "http://shopsshops.de/8etyfh3ni"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "hostname",
"uuid": "59d4b6fe-d410-4d5c-a5c0-4e0f950d210f",
"value": "shopsshops.de"
},
{
"category": "Network activity",
"comment": "shopsshops.de",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": false,
"type": "ip-dst",
"uuid": "59d4b6fe-412c-4c13-9dab-4b39950d210f",
"value": "62.75.132.67"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "url",
"uuid": "59d4b6ff-b5c4-4133-9fb0-4faa950d210f",
"value": "http://smarterbaby.com/8etyfh3ni"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "hostname",
"uuid": "59d4b6ff-be14-4eab-af50-418e950d210f",
"value": "smarterbaby.com"
},
{
"category": "Network activity",
"comment": "smarterbaby.com",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": false,
"type": "ip-dst",
"uuid": "59d4b6ff-3a08-4b7e-9468-469e950d210f",
"value": "98.124.251.75"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "url",
"uuid": "59d4b6ff-95e0-4958-97d5-44b8950d210f",
"value": "http://spazioireos.it/8etyfh3ni"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "hostname",
"uuid": "59d4b700-b654-4513-889a-4359950d210f",
"value": "spazioireos.it"
},
{
"category": "Network activity",
"comment": "spazioireos.it",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": false,
"type": "ip-dst",
"uuid": "59d4b700-986c-414b-924f-4a7e950d210f",
"value": "81.29.205.233"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "url",
"uuid": "59d4b700-c700-403b-b7fb-47e0950d210f",
"value": "http://tailer.it/8etyfh3ni"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "hostname",
"uuid": "59d4b701-fdb4-4ac8-b792-4d73950d210f",
"value": "tailer.it"
},
{
"category": "Network activity",
"comment": "tailer.it",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": false,
"type": "ip-dst",
"uuid": "59d4b701-5910-42d6-933c-4f2e950d210f",
"value": "89.96.90.14"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "url",
"uuid": "59d4b701-ae60-4154-b02c-4365950d210f",
"value": "http://tarimsalteknoloji.com/8etyfh3ni"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "hostname",
"uuid": "59d4b701-9184-43a4-b0f0-46f6950d210f",
"value": "tarimsalteknoloji.com"
},
{
"category": "Network activity",
"comment": "tarimsalteknoloji.com",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": false,
"type": "ip-dst",
"uuid": "59d4b702-b9dc-4cce-8fec-422d950d210f",
"value": "185.150.128.21"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "url",
"uuid": "59d4b702-4798-4528-8c37-44b3950d210f",
"value": "http://tecnigrafite.com/8etyfh3ni"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "hostname",
"uuid": "59d4b702-4d94-459f-a703-48b9950d210f",
"value": "tecnigrafite.com"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "url",
"uuid": "59d4b703-b98c-4639-aeb7-4d4a950d210f",
"value": "http://turfschiploge.nl/8etyfh3ni"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "hostname",
"uuid": "59d4b703-c2d0-4a18-8fdc-4e63950d210f",
"value": "turfschiploge.nl"
},
{
"category": "Network activity",
"comment": "turfschiploge.nl",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": false,
"type": "ip-dst",
"uuid": "59d4b703-9054-4cfa-b78b-45f1950d210f",
"value": "46.235.43.11"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "url",
"uuid": "59d4b704-a7ac-4c30-b320-4294950d210f",
"value": "http://derainlay.info/p66/8etyfh3ni"
},
{
"category": "Network activity",
"comment": "",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "hostname",
"uuid": "59d4b704-f0e4-4050-b34b-415a950d210f",
"value": "derainlay.info"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: 3ba59430e3a75cf5c6ec1b7fcc5dfe33",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "sha256",
"uuid": "59e38b66-c308-4adc-b7f8-883502de0b81",
"value": "7c88ec63f7ca11a22add9f77f47f7ac8f71e930b3dd24422940c28cc8fd22ac2"
},
{
"category": "Artifacts dropped",
"comment": "- Xchecked via VT: 3ba59430e3a75cf5c6ec1b7fcc5dfe33",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": true,
"type": "sha1",
"uuid": "59e38b66-0da0-4f85-9c43-883502de0b81",
"value": "b1813d2d4f22146817e0c5fd203b59f4fa88c2b5"
},
{
"category": "External analysis",
"comment": "- Xchecked via VT: 3ba59430e3a75cf5c6ec1b7fcc5dfe33",
"deleted": false,
"disable_correlation": false,
"timestamp": "1508084582",
"to_ids": false,
"type": "link",
"uuid": "59e38b66-af78-4754-98ca-883502de0b81",
"value": "https://www.virustotal.com/file/7c88ec63f7ca11a22add9f77f47f7ac8f71e930b3dd24422940c28cc8fd22ac2/analysis/1507772563/"
}
]
}
}
Reference in a new issue View git blame Copy permalink