21524 lines
No EOL
876 KiB
JSON
21524 lines
No EOL
876 KiB
JSON
{
|
|
"type": "bundle",
|
|
"id": "bundle--54c60f43-b084-453a-a162-4e08950d210b",
|
|
"objects": [
|
|
{
|
|
"type": "identity",
|
|
"spec_version": "2.1",
|
|
"id": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2018-02-02T13:28:38.000Z",
|
|
"modified": "2018-02-02T13:28:38.000Z",
|
|
"name": "CthulhuSPRL.be",
|
|
"identity_class": "organization"
|
|
},
|
|
{
|
|
"type": "report",
|
|
"spec_version": "2.1",
|
|
"id": "report--54c60f43-b084-453a-a162-4e08950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2018-02-02T13:28:38.000Z",
|
|
"modified": "2018-02-02T13:28:38.000Z",
|
|
"name": "OSINT I Know You Want Me - Unplugging PlugX from Takahiro Haruyama & Hiroshi Suzuki Black Hat Asia 2014 presentation",
|
|
"published": "2018-02-02T13:34:54Z",
|
|
"object_refs": [
|
|
"observed-data--54c60f4e-eb88-44f4-b96d-46e0950d210b",
|
|
"url--54c60f4e-eb88-44f4-b96d-46e0950d210b",
|
|
"indicator--54c6123f-1cd8-45f8-b627-42c3950d210b",
|
|
"indicator--54c6123f-8f90-4790-8f61-4fb8950d210b",
|
|
"indicator--54c6123f-e730-4b0c-8a2a-42ec950d210b",
|
|
"indicator--54c6123f-8a5c-41a7-8e3e-4cb4950d210b",
|
|
"indicator--54c6123f-5e78-4591-b15c-4b91950d210b",
|
|
"indicator--54c6123f-8420-48dd-8dab-4f46950d210b",
|
|
"indicator--54c6123f-a0c8-4c73-a536-4c98950d210b",
|
|
"indicator--54c6123f-44a0-4425-9cff-4be5950d210b",
|
|
"indicator--54c61240-7358-4bdc-9ac0-4257950d210b",
|
|
"indicator--54c61240-b800-411c-a6d3-4317950d210b",
|
|
"indicator--54c61240-6308-49ab-9677-43f7950d210b",
|
|
"indicator--54c61240-1044-49aa-9dee-41c6950d210b",
|
|
"indicator--54c61240-c8f8-4c15-a094-4173950d210b",
|
|
"indicator--54c61240-b444-4563-acbc-41aa950d210b",
|
|
"indicator--54c61240-3a30-44ac-a641-47c6950d210b",
|
|
"indicator--54c61240-7d3c-4f9d-a54b-42b0950d210b",
|
|
"indicator--54c61240-eb2c-4422-866d-4845950d210b",
|
|
"indicator--54c61240-5fd4-414b-aa5a-4ab2950d210b",
|
|
"indicator--54c61240-0e88-4300-a874-43e8950d210b",
|
|
"indicator--54c61241-b14c-4543-8c7f-4c0b950d210b",
|
|
"indicator--54c61241-65c8-45ca-b316-45c0950d210b",
|
|
"indicator--54c61241-19b0-43c8-b5a9-4976950d210b",
|
|
"indicator--54c61241-4e30-463a-a54b-4715950d210b",
|
|
"indicator--54c61241-19b0-412a-9bdf-4978950d210b",
|
|
"indicator--54c61241-67b8-428e-9fc1-431e950d210b",
|
|
"indicator--54c61241-93a8-490d-9613-4f11950d210b",
|
|
"indicator--54c61241-13b4-4cd6-b52f-4dec950d210b",
|
|
"indicator--54c61241-2190-4b12-973f-495d950d210b",
|
|
"indicator--54c61241-77c8-436d-8436-4112950d210b",
|
|
"indicator--54c61241-2e1c-4448-8ec5-4c6d950d210b",
|
|
"indicator--54c61242-0fec-4d5e-84f3-4ed1950d210b",
|
|
"indicator--54c61242-e6d4-45b4-9154-4a47950d210b",
|
|
"indicator--54c61242-d36c-4e2e-9953-4777950d210b",
|
|
"indicator--54c61242-acfc-41f7-be65-48f7950d210b",
|
|
"indicator--54c61242-cac8-4ccc-9510-4a9d950d210b",
|
|
"indicator--54c61242-0fa8-4d14-8944-4bb2950d210b",
|
|
"indicator--54c61242-c130-4cc4-ac61-4991950d210b",
|
|
"indicator--54c61242-fcc8-455a-9d3e-486c950d210b",
|
|
"indicator--54c61242-33f0-4f45-ad9b-4cac950d210b",
|
|
"indicator--54c61242-2b34-4f01-bb35-4d2f950d210b",
|
|
"indicator--54c61242-80b8-4104-8fb5-4cf3950d210b",
|
|
"indicator--54c61242-a5d8-48ca-8a3d-4871950d210b",
|
|
"indicator--54c61243-0c58-4e1d-a088-4c93950d210b",
|
|
"indicator--54c61243-6d24-4faf-ab94-4672950d210b",
|
|
"indicator--54c61243-2c10-457a-bd42-42a3950d210b",
|
|
"indicator--54c61243-6f0c-4537-a418-4027950d210b",
|
|
"indicator--54c61243-e108-4b84-a5ae-43eb950d210b",
|
|
"indicator--54c61243-aa78-49a8-8af9-4285950d210b",
|
|
"indicator--54c61243-d524-4b70-bc66-4866950d210b",
|
|
"indicator--54c61243-2124-43d0-81e9-408e950d210b",
|
|
"indicator--54c61243-90c4-4910-8b96-4f05950d210b",
|
|
"indicator--54c61243-5548-4595-a03b-4ce3950d210b",
|
|
"indicator--54c61243-f8fc-4c36-9d61-490b950d210b",
|
|
"indicator--54c61244-5518-4001-b9ac-4dee950d210b",
|
|
"indicator--54c61244-e8a8-427c-80b3-4b35950d210b",
|
|
"indicator--54c61244-acbc-49ef-934f-405e950d210b",
|
|
"indicator--54c61244-b7a0-48b7-a34b-41de950d210b",
|
|
"indicator--54c61244-e298-435d-b308-4db2950d210b",
|
|
"indicator--54c61244-6b0c-44c7-8fea-4bce950d210b",
|
|
"indicator--54c61244-86f8-4547-8072-4115950d210b",
|
|
"indicator--54c61244-e2c0-45c7-b0f5-478d950d210b",
|
|
"indicator--54c61244-5454-41a8-a845-4529950d210b",
|
|
"indicator--54c61244-b7c8-4588-9d22-4489950d210b",
|
|
"indicator--54c61244-30c8-4542-a9a0-4c10950d210b",
|
|
"indicator--54c61245-2c5c-4389-a559-4806950d210b",
|
|
"indicator--54c61245-15d8-49d9-866a-4230950d210b",
|
|
"indicator--54c61245-b3e8-45ac-9c5c-42c7950d210b",
|
|
"indicator--54c61245-7a94-4779-afa2-4e07950d210b",
|
|
"indicator--54c61245-b170-4e2f-8549-4706950d210b",
|
|
"indicator--54c61245-1680-41db-bd4f-47f2950d210b",
|
|
"indicator--54c61245-d7fc-4d69-8311-488d950d210b",
|
|
"indicator--54c61245-4788-442f-be0c-43c9950d210b",
|
|
"indicator--54c61245-23fc-4820-ae62-4e95950d210b",
|
|
"indicator--54c61245-d9c8-4733-b4d4-426f950d210b",
|
|
"indicator--54c61245-932c-40ac-a7ff-4500950d210b",
|
|
"indicator--54c61246-0070-4cb9-af44-47a9950d210b",
|
|
"indicator--54c61246-c074-4b25-9e34-48cb950d210b",
|
|
"indicator--54c61246-9978-4ad7-a55f-4240950d210b",
|
|
"indicator--54c61246-c10c-42b0-9b3a-404f950d210b",
|
|
"indicator--54c61246-f17c-4a72-8756-4218950d210b",
|
|
"indicator--54c61246-c4c4-4602-9617-45d0950d210b",
|
|
"indicator--54c61246-014c-401f-a17a-4a3b950d210b",
|
|
"indicator--54c61246-20f0-43fc-9382-4ec4950d210b",
|
|
"indicator--54c61246-da7c-4bd4-8b5e-491d950d210b",
|
|
"indicator--54c61246-3d94-412b-ba85-486b950d210b",
|
|
"indicator--54c61246-facc-4500-bddd-4a01950d210b",
|
|
"indicator--54c61247-e368-4cc2-b491-461f950d210b",
|
|
"indicator--54c61247-9b30-4e38-8880-43d6950d210b",
|
|
"indicator--54c61247-7ef8-415a-b43a-479d950d210b",
|
|
"indicator--54c61247-49d0-460f-bc94-4db9950d210b",
|
|
"indicator--54c61247-9e64-4a14-9095-4f2e950d210b",
|
|
"indicator--54c61247-75f0-4002-88f2-4ff1950d210b",
|
|
"indicator--54c61247-4f08-429a-863b-401c950d210b",
|
|
"indicator--54c61247-73b4-4db6-b325-4137950d210b",
|
|
"indicator--54c61247-0140-44ee-a059-4554950d210b",
|
|
"indicator--54c61247-23d8-49b0-95b1-4651950d210b",
|
|
"indicator--54c61247-cad4-4530-b58c-4693950d210b",
|
|
"indicator--54c61248-08ac-455e-8feb-4ae8950d210b",
|
|
"indicator--54c61248-cc98-4fe7-9f3c-4994950d210b",
|
|
"indicator--54c61248-9a10-4033-8373-4686950d210b",
|
|
"indicator--54c61248-e7e0-4348-86ff-4ab4950d210b",
|
|
"indicator--54c61248-46a8-4cd2-8739-4118950d210b",
|
|
"indicator--54c61248-c58c-4f5a-bf3c-445b950d210b",
|
|
"indicator--54c61248-8568-4bbb-ad74-4dc2950d210b",
|
|
"indicator--54c61248-2e54-4321-8666-474c950d210b",
|
|
"indicator--54c61248-435c-4fd4-b313-4c5b950d210b",
|
|
"indicator--54c61248-1ef4-493d-a987-448c950d210b",
|
|
"indicator--54c61248-16ec-45ec-a5ad-4917950d210b",
|
|
"indicator--54c61249-c930-4c67-a1af-4f00950d210b",
|
|
"indicator--54c61249-dce0-4143-8657-4067950d210b",
|
|
"indicator--54c61249-1350-4005-87c1-4bfd950d210b",
|
|
"indicator--54c61249-4d5c-4eed-9dfa-4bb7950d210b",
|
|
"indicator--54c61249-9984-4c6b-953d-4901950d210b",
|
|
"indicator--54c61249-67dc-4596-bffe-4d87950d210b",
|
|
"indicator--54c61249-c8f8-46b4-bc20-43e8950d210b",
|
|
"indicator--54c61249-0ae4-44df-8415-4f8f950d210b",
|
|
"indicator--54c61249-a9d4-4022-94be-4fd3950d210b",
|
|
"indicator--54c61249-e034-40eb-975a-40e2950d210b",
|
|
"indicator--54c61249-1a90-46ee-8231-41db950d210b",
|
|
"indicator--54c6124a-f2fc-492c-8ada-4916950d210b",
|
|
"indicator--54c6124a-0c88-49fa-929d-43e8950d210b",
|
|
"indicator--54c6124a-fdfc-4d70-a7c7-494d950d210b",
|
|
"indicator--54c6124a-2828-419b-b234-4eb7950d210b",
|
|
"observed-data--54c6128e-f3ec-4652-96e2-0941950d210b",
|
|
"url--54c6128e-f3ec-4652-96e2-0941950d210b",
|
|
"observed-data--54c6128e-c328-49de-ae18-0941950d210b",
|
|
"url--54c6128e-c328-49de-ae18-0941950d210b",
|
|
"indicator--54c75e40-2214-40a7-99c8-4648950d210b",
|
|
"indicator--54c75e40-6964-40dd-9033-4953950d210b",
|
|
"indicator--54c75e41-0ad4-4169-91e6-4ef0950d210b",
|
|
"indicator--54c75e41-cdf8-46c6-baf6-444f950d210b",
|
|
"indicator--54c75e41-24fc-4616-a450-45b6950d210b",
|
|
"indicator--54c75e41-8d58-412d-9503-4ea6950d210b",
|
|
"indicator--54c75e41-a6f0-4e25-b1dd-4aa9950d210b",
|
|
"indicator--54c75e41-a4e4-4dde-b409-46e8950d210b",
|
|
"indicator--54c75e41-a024-4158-b224-4762950d210b",
|
|
"indicator--54c75e41-cb0c-4124-bfb8-4bda950d210b",
|
|
"indicator--54c75e41-9b14-4ed2-96b1-4959950d210b",
|
|
"indicator--54c75e41-8834-482a-9310-4027950d210b",
|
|
"indicator--54c75e41-a950-4cbb-966d-4cd9950d210b",
|
|
"indicator--54c75e42-8c24-4d05-8c1b-4de0950d210b",
|
|
"indicator--54c75e42-3f0c-4f31-8d20-414c950d210b",
|
|
"indicator--54c75e42-6b8c-4699-8a26-4ffb950d210b",
|
|
"indicator--54c75e42-0b14-4d72-99d7-4826950d210b",
|
|
"indicator--54c75e42-f02c-42a6-841e-4517950d210b",
|
|
"indicator--54c75e42-fbc0-4e5d-8f06-4759950d210b",
|
|
"indicator--54c75e42-c9cc-4355-acbf-4181950d210b",
|
|
"indicator--54c75e42-f744-4f23-ab2e-4aa5950d210b",
|
|
"indicator--54c75e42-55d4-4620-8c1a-463a950d210b",
|
|
"indicator--54c75e42-6554-42de-9370-4a06950d210b",
|
|
"indicator--54c75e42-eae8-4fdf-97a7-49d1950d210b",
|
|
"indicator--54c75e43-f338-4042-b816-447e950d210b",
|
|
"indicator--54c75e43-2fbc-41ef-b261-4d89950d210b",
|
|
"indicator--54c75e43-4fb0-485e-bad5-49b0950d210b",
|
|
"indicator--54c75e43-661c-44dd-8599-40d7950d210b",
|
|
"indicator--54c75e43-5da0-4559-b59c-411c950d210b",
|
|
"indicator--54c76127-b400-4a7f-8364-f80d950d210b",
|
|
"indicator--54c76127-d0ac-4713-ae8d-f80d950d210b",
|
|
"indicator--54c76127-0620-42cb-831e-f80d950d210b",
|
|
"indicator--54c76127-0f08-4396-ab08-f80d950d210b",
|
|
"indicator--54c76128-5ce4-458f-8905-f80d950d210b",
|
|
"indicator--54c76128-191c-4c63-a5aa-f80d950d210b",
|
|
"indicator--54c76128-a4a4-4a43-a80a-f80d950d210b",
|
|
"indicator--54c76128-64c4-45a9-9095-f80d950d210b",
|
|
"indicator--54c76128-e404-40d0-931d-f80d950d210b",
|
|
"indicator--54c76128-af68-4ef2-b393-f80d950d210b",
|
|
"indicator--54c76128-c0e0-42bd-9d45-f80d950d210b",
|
|
"indicator--54c76128-9ef4-45cd-ad15-f80d950d210b",
|
|
"indicator--54c76128-3008-4064-83ba-f80d950d210b",
|
|
"indicator--54c76128-3378-4112-9b0b-f80d950d210b",
|
|
"indicator--54c76128-2480-4270-ae92-f80d950d210b",
|
|
"indicator--54c76129-1720-4c88-bcbe-f80d950d210b",
|
|
"indicator--54c76129-fa7c-4c37-90b0-f80d950d210b",
|
|
"indicator--54c76129-5ad0-4029-ba83-f80d950d210b",
|
|
"indicator--54c76129-c024-4bb7-8308-f80d950d210b",
|
|
"indicator--54c76129-fd7c-4c72-adfa-f80d950d210b",
|
|
"indicator--54c76129-2980-4142-a856-f80d950d210b",
|
|
"indicator--54c76129-f944-4680-bf15-f80d950d210b",
|
|
"indicator--54c76129-4924-4198-9c9e-f80d950d210b",
|
|
"indicator--54c76129-d304-440f-86b5-f80d950d210b",
|
|
"indicator--54c76129-60a4-42a2-8423-f80d950d210b",
|
|
"indicator--54c76129-1094-45a2-8177-f80d950d210b",
|
|
"indicator--54c7612a-3f8c-4467-a780-f80d950d210b",
|
|
"indicator--54c7612a-1f24-4e29-b135-f80d950d210b",
|
|
"indicator--54c7612a-275c-4afc-b85b-f80d950d210b",
|
|
"indicator--54c7612a-25e8-42c1-8da9-f80d950d210b",
|
|
"indicator--54c7612a-f7cc-41f5-93ad-f80d950d210b",
|
|
"indicator--54c7612a-bbbc-4a02-a59c-f80d950d210b",
|
|
"indicator--54c7612a-8230-499a-8026-f80d950d210b",
|
|
"indicator--54c7612a-fd88-41f8-9161-f80d950d210b",
|
|
"indicator--54c7612a-f3e0-4957-96d3-f80d950d210b",
|
|
"indicator--54c7612a-49ac-47db-b70a-f80d950d210b",
|
|
"indicator--54c7612a-dbf4-4aca-b081-f80d950d210b",
|
|
"indicator--54c7612b-c4f4-4483-af60-f80d950d210b",
|
|
"indicator--54c7612b-e648-4b7d-aefa-f80d950d210b",
|
|
"indicator--54c7612b-39e4-4e46-adec-f80d950d210b",
|
|
"indicator--54c7612b-e934-4b60-b675-f80d950d210b",
|
|
"indicator--54c7612b-3048-47db-be74-f80d950d210b",
|
|
"indicator--54c7612b-635c-4c71-ab07-f80d950d210b",
|
|
"indicator--54c7612b-dc80-40cf-bffa-f80d950d210b",
|
|
"indicator--54c7612b-5b64-4984-924b-f80d950d210b",
|
|
"indicator--54c7612b-bee8-4dd2-bef8-f80d950d210b",
|
|
"indicator--54c7612b-9ec0-449d-8818-f80d950d210b",
|
|
"indicator--54c7612c-8818-4654-ad52-f80d950d210b",
|
|
"indicator--54c7612c-836c-4bc0-9d16-f80d950d210b",
|
|
"indicator--54c7612c-3400-4fd2-a47f-f80d950d210b",
|
|
"indicator--54c7612c-3868-4928-a001-f80d950d210b",
|
|
"indicator--54c7612c-1130-41c9-a92f-f80d950d210b",
|
|
"indicator--54c7612c-a2c4-4fc3-9592-f80d950d210b",
|
|
"indicator--54c7612c-53e0-477f-95b3-f80d950d210b",
|
|
"indicator--54c7612c-c6c4-44c8-9c1f-f80d950d210b",
|
|
"indicator--54c7612c-5fcc-43f3-8295-f80d950d210b",
|
|
"indicator--54c7612c-4608-48a6-802a-f80d950d210b",
|
|
"indicator--54c7612c-54a4-4834-a2fe-f80d950d210b",
|
|
"indicator--54c7612d-d768-4b4c-b76d-f80d950d210b",
|
|
"indicator--54c7612d-5f44-472a-813e-f80d950d210b",
|
|
"indicator--54c7612d-570c-49af-ab60-f80d950d210b",
|
|
"indicator--54c7612d-9668-4a64-83a1-f80d950d210b",
|
|
"indicator--54c7612d-548c-4603-87c4-f80d950d210b",
|
|
"indicator--54c7612d-a300-483f-aa2d-f80d950d210b",
|
|
"indicator--54c7612d-a0f8-412f-bd85-f80d950d210b",
|
|
"indicator--54c7612d-e058-484c-bdbb-f80d950d210b",
|
|
"indicator--54c7612d-a128-4544-99da-f80d950d210b",
|
|
"indicator--54c7612d-97dc-430e-ba79-f80d950d210b",
|
|
"indicator--54c7612d-de08-473f-a0d1-f80d950d210b",
|
|
"indicator--54c7612e-5e80-473a-a6d0-f80d950d210b",
|
|
"indicator--54c7612e-e948-4c26-8a22-f80d950d210b",
|
|
"indicator--54c7612e-5340-46c7-9ab2-f80d950d210b",
|
|
"indicator--54c7612e-9a38-4343-9b18-f80d950d210b",
|
|
"indicator--54c7612e-5da8-421a-9919-f80d950d210b",
|
|
"indicator--54c7612e-6698-484e-b8fc-f80d950d210b",
|
|
"indicator--54c7612e-f290-43f1-8092-f80d950d210b",
|
|
"indicator--54c7612e-9260-4157-a9c1-f80d950d210b",
|
|
"indicator--54c7612e-2e60-4fd6-aab8-f80d950d210b",
|
|
"indicator--54c7612e-a45c-46ae-952f-f80d950d210b",
|
|
"indicator--54c7612e-58c8-489b-ab9d-f80d950d210b",
|
|
"indicator--54c7612f-f20c-4ef7-9888-f80d950d210b",
|
|
"indicator--54c7612f-e050-4330-8885-f80d950d210b",
|
|
"indicator--54c7612f-6154-4e14-930f-f80d950d210b",
|
|
"indicator--54c7612f-dd50-4f72-80ec-f80d950d210b",
|
|
"indicator--54c7612f-51fc-439a-aa62-f80d950d210b",
|
|
"indicator--54c7612f-617c-4064-8f4d-f80d950d210b",
|
|
"indicator--54c7612f-4860-461d-999b-f80d950d210b",
|
|
"indicator--54c7612f-9cd4-4b8b-958d-f80d950d210b",
|
|
"indicator--54c7612f-6b3c-46c8-a98c-f80d950d210b",
|
|
"indicator--54c7612f-3ca8-4301-99ec-f80d950d210b",
|
|
"indicator--54c7612f-9d80-4ffd-a1e5-f80d950d210b",
|
|
"indicator--54c76130-18f4-4777-a305-f80d950d210b",
|
|
"indicator--54c76130-cf6c-4d6b-b551-f80d950d210b",
|
|
"indicator--54c76130-5984-4d40-9103-f80d950d210b",
|
|
"indicator--54c76130-b86c-41df-bd1f-f80d950d210b",
|
|
"indicator--54c76130-fa58-496e-8609-f80d950d210b",
|
|
"indicator--54c76130-bb8c-4d95-9bfe-f80d950d210b",
|
|
"indicator--54c76130-7e58-4380-b71f-f80d950d210b",
|
|
"indicator--54c76130-4b40-4001-94aa-f80d950d210b",
|
|
"indicator--54c76130-f6f4-4795-92b0-f80d950d210b",
|
|
"indicator--54c76130-4a60-4233-bcfc-f80d950d210b",
|
|
"indicator--54c76130-4490-4d55-b0e8-f80d950d210b",
|
|
"indicator--54c76131-04ac-4ee5-88f6-f80d950d210b",
|
|
"indicator--54c76131-8f8c-4db3-9db7-f80d950d210b",
|
|
"indicator--54c76131-8730-4e17-a6d6-f80d950d210b",
|
|
"indicator--54c76131-cb80-40f8-b123-f80d950d210b",
|
|
"indicator--54c76131-5ca8-4a19-b650-f80d950d210b",
|
|
"indicator--54c76131-89b4-4e4b-98bf-f80d950d210b",
|
|
"indicator--54c76131-4a6c-49fc-a15e-f80d950d210b",
|
|
"indicator--54c76131-4f98-47e9-b07b-f80d950d210b",
|
|
"indicator--54c76131-084c-4051-8b73-f80d950d210b",
|
|
"indicator--54c76131-5a6c-472c-bcc5-f80d950d210b",
|
|
"indicator--54c76131-450c-4456-b000-f80d950d210b",
|
|
"indicator--54c76132-8060-4db1-9ad7-f80d950d210b",
|
|
"indicator--54c76132-0870-4cdc-bae6-f80d950d210b",
|
|
"indicator--54c76132-a9ac-41ed-96b5-f80d950d210b",
|
|
"indicator--54c76132-4e80-4ab9-9274-f80d950d210b",
|
|
"indicator--54c76132-49c8-4a83-93d2-f80d950d210b",
|
|
"indicator--54c76132-0704-434c-9988-f80d950d210b",
|
|
"indicator--54c76132-3a30-40a3-8829-f80d950d210b",
|
|
"indicator--54c76132-166c-46b9-b55d-f80d950d210b",
|
|
"indicator--54c76132-6880-4295-944c-f80d950d210b",
|
|
"indicator--54c76132-9724-47e2-8abc-f80d950d210b",
|
|
"indicator--54c76132-3a80-41a8-b867-f80d950d210b",
|
|
"indicator--54c76133-0cc4-4e83-a96c-f80d950d210b",
|
|
"indicator--54c76133-4a54-45d6-ac8d-f80d950d210b",
|
|
"indicator--54c76133-750c-4bbc-8bc3-f80d950d210b",
|
|
"indicator--54c76133-3dd0-4bcc-a668-f80d950d210b",
|
|
"indicator--54c76133-ce28-461f-8b05-f80d950d210b",
|
|
"indicator--54c76133-aa98-4742-bc1a-f80d950d210b",
|
|
"indicator--54c76133-5e04-48ea-8d07-f80d950d210b",
|
|
"indicator--54c76133-5780-4f0a-95d9-f80d950d210b",
|
|
"indicator--54c76133-5380-447d-9781-f80d950d210b",
|
|
"indicator--54c76133-fd94-488f-a9e0-f80d950d210b",
|
|
"indicator--54c76133-1484-4ce0-9be6-f80d950d210b",
|
|
"indicator--54c76134-94dc-41bb-8e42-f80d950d210b",
|
|
"indicator--54c76134-04bc-4e4b-88de-f80d950d210b",
|
|
"indicator--54c76134-62ac-4214-96e2-f80d950d210b",
|
|
"indicator--54c76134-e680-457f-8e24-f80d950d210b",
|
|
"indicator--54c76134-8bc8-4488-a553-f80d950d210b",
|
|
"indicator--54c76134-8f7c-431c-aebc-f80d950d210b",
|
|
"indicator--54c76134-2e84-40b0-baa1-f80d950d210b",
|
|
"indicator--54c76134-8818-4e84-9b60-f80d950d210b",
|
|
"indicator--54c76134-73fc-4e67-9728-f80d950d210b",
|
|
"indicator--54c76134-1f2c-42d7-9e8c-f80d950d210b",
|
|
"indicator--54c76134-b8d0-47e7-9988-f80d950d210b",
|
|
"indicator--54c76135-d308-493a-a658-f80d950d210b",
|
|
"indicator--54c76135-97dc-497f-b837-f80d950d210b",
|
|
"indicator--54c76135-87b8-4eb6-a139-f80d950d210b",
|
|
"indicator--54c76135-0a04-45b3-9c4f-f80d950d210b",
|
|
"indicator--54c76135-f37c-4f5e-a964-f80d950d210b",
|
|
"indicator--54c76135-9d34-48c1-bd44-f80d950d210b",
|
|
"indicator--54c76135-5cf4-4638-a370-f80d950d210b",
|
|
"indicator--54c76135-187c-4a34-bca5-f80d950d210b",
|
|
"indicator--54c76135-dde0-487f-9fdf-f80d950d210b",
|
|
"indicator--54c76135-004c-441c-a176-f80d950d210b",
|
|
"indicator--54c76135-7f18-4b75-9302-f80d950d210b",
|
|
"indicator--54c76136-fd24-43af-94d7-f80d950d210b",
|
|
"indicator--54c76136-b970-4417-a768-f80d950d210b",
|
|
"indicator--54c767d3-e610-4e37-91cb-ff5e950d210b",
|
|
"indicator--54c767f3-4128-4d53-9e6c-41e7950d210b",
|
|
"x-misp-attribute--54c768d5-9028-4c2d-a28a-1e3a950d210b",
|
|
"indicator--54c769db-71e0-4c5e-a809-f80d950d210b",
|
|
"indicator--54c769db-7e60-453a-b7f1-f80d950d210b",
|
|
"indicator--54c769db-0cd0-497b-9f7d-f80d950d210b",
|
|
"indicator--54c769db-e1d0-4cb8-88f0-f80d950d210b",
|
|
"indicator--54c769dc-d760-438c-9221-f80d950d210b",
|
|
"indicator--54c769dc-75d8-4028-86fc-f80d950d210b",
|
|
"indicator--54c769dc-0268-4143-9738-f80d950d210b",
|
|
"indicator--54c769dc-56a8-40f7-903f-f80d950d210b",
|
|
"indicator--54c769dc-4dd4-4a94-b1ed-f80d950d210b",
|
|
"indicator--54c769dc-977c-4b9b-a56e-f80d950d210b",
|
|
"indicator--54c769dc-ce5c-4dd8-be46-f80d950d210b",
|
|
"indicator--54c769dc-09b4-4ff5-9b2c-f80d950d210b",
|
|
"indicator--54c769dc-507c-458a-8472-f80d950d210b",
|
|
"indicator--54c769dc-6964-4bba-9eae-f80d950d210b",
|
|
"indicator--54c769dc-ce78-4596-a8ca-f80d950d210b",
|
|
"indicator--54c769dc-872c-4d8e-83a6-f80d950d210b",
|
|
"indicator--54c769dd-6bb4-450f-8c0b-f80d950d210b",
|
|
"indicator--54c769dd-d7b0-425b-b8a6-f80d950d210b",
|
|
"indicator--54c769dd-5ae4-4b30-a765-f80d950d210b",
|
|
"indicator--54c769dd-19b4-4ddc-96ce-f80d950d210b",
|
|
"indicator--54c769dd-0eb8-49fd-a9ef-f80d950d210b",
|
|
"indicator--54c769dd-5e80-4c75-9878-f80d950d210b",
|
|
"indicator--54c769dd-3da8-409e-927b-f80d950d210b",
|
|
"indicator--54c769dd-91cc-4bb1-bd3c-f80d950d210b",
|
|
"indicator--54c769dd-fa2c-4846-a08e-f80d950d210b",
|
|
"indicator--54c769dd-4e10-4104-ae82-f80d950d210b",
|
|
"indicator--54c769dd-550c-42a7-a46e-f80d950d210b",
|
|
"indicator--54c769de-3e50-4fa9-aa76-f80d950d210b",
|
|
"indicator--54c769de-0ce4-4aa7-9fca-f80d950d210b",
|
|
"indicator--54c769de-34d0-4ce8-844c-f80d950d210b",
|
|
"indicator--54c769de-07b8-434b-94c8-f80d950d210b",
|
|
"indicator--54c769de-9714-4e81-a8bd-f80d950d210b",
|
|
"indicator--54c769de-33e4-431b-91aa-f80d950d210b",
|
|
"indicator--54c769de-866c-49fc-87ec-f80d950d210b",
|
|
"indicator--54c769de-a98c-4b97-a788-f80d950d210b",
|
|
"indicator--54c769de-db90-4d7c-bbdb-f80d950d210b",
|
|
"indicator--54c769de-2bec-40aa-bb99-f80d950d210b",
|
|
"indicator--54c769de-2b50-4bff-951c-f80d950d210b",
|
|
"indicator--54c769df-6cb0-455a-8776-f80d950d210b",
|
|
"indicator--54c769df-5774-416f-91be-f80d950d210b",
|
|
"indicator--54c769df-63bc-46d5-ba2a-f80d950d210b",
|
|
"indicator--54c769df-0da0-42b2-9012-f80d950d210b",
|
|
"indicator--54c769df-265c-4f78-b943-f80d950d210b",
|
|
"indicator--54c769df-1110-4be7-8aa9-f80d950d210b",
|
|
"indicator--54c769df-f8e4-4b6c-a9d7-f80d950d210b",
|
|
"indicator--54c769df-b13c-4236-b320-f80d950d210b",
|
|
"indicator--54c769df-0398-4d9e-9e8f-f80d950d210b",
|
|
"indicator--54c769df-e7d4-44bf-a761-f80d950d210b",
|
|
"indicator--54c769df-420c-4c85-9360-f80d950d210b",
|
|
"indicator--54c769e0-8268-4b94-8566-f80d950d210b",
|
|
"indicator--54c769e0-f280-4c8e-bfc9-f80d950d210b",
|
|
"indicator--54c769e0-6580-4244-9e13-f80d950d210b",
|
|
"indicator--54c769e0-deb8-43ce-a318-f80d950d210b",
|
|
"indicator--54c769e0-5d80-4422-8932-f80d950d210b",
|
|
"indicator--54c769e0-1cac-4f9c-abe4-f80d950d210b",
|
|
"indicator--54c769e0-50ec-417e-949a-f80d950d210b",
|
|
"indicator--54c769e0-7460-47d3-92b1-f80d950d210b",
|
|
"indicator--54c769e0-0c08-4959-acf2-f80d950d210b",
|
|
"indicator--54c769e0-1918-4773-843c-f80d950d210b",
|
|
"indicator--54c769e0-6c44-4946-8639-f80d950d210b",
|
|
"indicator--54c769e1-dc50-47d6-b37e-f80d950d210b",
|
|
"indicator--54c769e1-b738-4f20-a7ac-f80d950d210b",
|
|
"indicator--54c769e1-ff78-4087-8e28-f80d950d210b",
|
|
"indicator--54c769e1-4790-414c-99b5-f80d950d210b",
|
|
"indicator--54c769e1-a794-46d1-8a9b-f80d950d210b",
|
|
"indicator--54c769e1-3060-4091-be6d-f80d950d210b",
|
|
"indicator--54c769e1-a1a0-4301-b0ad-f80d950d210b",
|
|
"indicator--54c769e1-d848-4f84-864d-f80d950d210b",
|
|
"indicator--54c769e1-08e0-4983-9548-f80d950d210b",
|
|
"indicator--54c769e1-a5a0-40ec-af30-f80d950d210b",
|
|
"indicator--54c769e1-80c8-4e23-b7ca-f80d950d210b",
|
|
"indicator--54c769e1-cb68-462d-9444-f80d950d210b",
|
|
"indicator--54c769e2-9484-4868-8c7a-f80d950d210b",
|
|
"indicator--54c769e2-eba4-4b66-a4af-f80d950d210b",
|
|
"indicator--54c769e2-f798-4b0a-8582-f80d950d210b",
|
|
"indicator--54c76a79-2678-4c6c-b41d-0c58950d210b",
|
|
"x-misp-attribute--54c76b4d-2d44-477a-a1d7-4ec1950d210b",
|
|
"x-misp-attribute--54c76b4d-8444-4771-96fb-4828950d210b",
|
|
"x-misp-attribute--54c76b4d-3e98-4303-9c76-4111950d210b",
|
|
"x-misp-attribute--54c76b4d-3388-4d92-9873-4806950d210b",
|
|
"x-misp-attribute--54c76b4d-ea8c-4bb5-b922-4538950d210b",
|
|
"x-misp-attribute--54c76b4e-da54-4f54-b6c2-41a2950d210b",
|
|
"x-misp-attribute--54c76b4e-9e00-49fb-8dea-4edd950d210b",
|
|
"x-misp-attribute--54c76b4e-1c50-4744-8799-42da950d210b",
|
|
"x-misp-attribute--54c76b4e-2604-4c55-8fad-48d5950d210b",
|
|
"x-misp-attribute--54c76b4e-0584-45a2-86b9-49e6950d210b",
|
|
"x-misp-attribute--54c76b4e-c3cc-4b4e-bcbe-43ce950d210b",
|
|
"x-misp-attribute--54c76b4e-ade4-439e-afdc-40fe950d210b",
|
|
"x-misp-attribute--54c76b4e-1d9c-4785-b782-4ad0950d210b",
|
|
"x-misp-attribute--54c76b4e-17bc-4b80-bf6e-4af6950d210b",
|
|
"x-misp-attribute--54c76b4e-9b7c-426b-ab11-40b5950d210b",
|
|
"x-misp-attribute--54c76b4e-ea0c-40f9-9c5e-4c61950d210b",
|
|
"x-misp-attribute--54c76b4e-f254-46eb-bcb1-437a950d210b",
|
|
"x-misp-attribute--54c76b4f-214c-4e90-b5fc-46f9950d210b",
|
|
"x-misp-attribute--54c76b4f-6c10-4f73-820b-4118950d210b",
|
|
"x-misp-attribute--54c76b4f-69c4-4a67-af29-4169950d210b",
|
|
"x-misp-attribute--54c76b4f-4218-4b6c-bce3-4167950d210b",
|
|
"x-misp-attribute--54c76b4f-5f1c-4c57-9519-4e7a950d210b",
|
|
"x-misp-attribute--54c76b4f-3990-4d53-a149-4b74950d210b",
|
|
"x-misp-attribute--54c76b4f-8c38-4acf-8b06-4cdc950d210b",
|
|
"x-misp-attribute--54c76b4f-d338-4b52-a763-4815950d210b",
|
|
"x-misp-attribute--54c76b4f-651c-4f8b-af18-4343950d210b",
|
|
"x-misp-attribute--54c76b4f-1768-4220-9f48-4336950d210b",
|
|
"x-misp-attribute--54c76b4f-a524-4a80-9e3e-411a950d210b",
|
|
"x-misp-attribute--54c76b4f-cf08-4626-bcec-47ea950d210b",
|
|
"observed-data--54c76b77-12e8-4198-bb86-4b8b950d210b",
|
|
"email-message--54c76b77-12e8-4198-bb86-4b8b950d210b",
|
|
"email-addr--54c76b77-12e8-4198-bb86-4b8b950d210b",
|
|
"observed-data--54c76b77-3bcc-46ee-82ac-40ec950d210b",
|
|
"email-message--54c76b77-3bcc-46ee-82ac-40ec950d210b",
|
|
"email-addr--54c76b77-3bcc-46ee-82ac-40ec950d210b",
|
|
"observed-data--54c76b77-32c0-412c-997c-4711950d210b",
|
|
"email-message--54c76b77-32c0-412c-997c-4711950d210b",
|
|
"email-addr--54c76b77-32c0-412c-997c-4711950d210b",
|
|
"observed-data--54c76b77-1540-4989-84fd-4ee9950d210b",
|
|
"email-message--54c76b77-1540-4989-84fd-4ee9950d210b",
|
|
"email-addr--54c76b77-1540-4989-84fd-4ee9950d210b",
|
|
"observed-data--54c76b77-99e4-4626-b640-48d6950d210b",
|
|
"email-message--54c76b77-99e4-4626-b640-48d6950d210b",
|
|
"email-addr--54c76b77-99e4-4626-b640-48d6950d210b",
|
|
"observed-data--54c76b77-ce10-473c-ba88-4d02950d210b",
|
|
"email-message--54c76b77-ce10-473c-ba88-4d02950d210b",
|
|
"email-addr--54c76b77-ce10-473c-ba88-4d02950d210b",
|
|
"observed-data--54c76b77-e428-4d47-bd16-4982950d210b",
|
|
"email-message--54c76b77-e428-4d47-bd16-4982950d210b",
|
|
"email-addr--54c76b77-e428-4d47-bd16-4982950d210b",
|
|
"observed-data--54c76b78-a778-4e2b-88e3-4b2e950d210b",
|
|
"email-message--54c76b78-a778-4e2b-88e3-4b2e950d210b",
|
|
"email-addr--54c76b78-a778-4e2b-88e3-4b2e950d210b",
|
|
"observed-data--54c76b78-c68c-4a6d-9fe4-4a72950d210b",
|
|
"email-message--54c76b78-c68c-4a6d-9fe4-4a72950d210b",
|
|
"email-addr--54c76b78-c68c-4a6d-9fe4-4a72950d210b",
|
|
"observed-data--54c76b78-0758-4eef-8d4d-4965950d210b",
|
|
"email-message--54c76b78-0758-4eef-8d4d-4965950d210b",
|
|
"email-addr--54c76b78-0758-4eef-8d4d-4965950d210b",
|
|
"observed-data--54c76b78-9d70-4e22-8f77-47db950d210b",
|
|
"email-message--54c76b78-9d70-4e22-8f77-47db950d210b",
|
|
"email-addr--54c76b78-9d70-4e22-8f77-47db950d210b",
|
|
"observed-data--54c76b78-b760-4a14-a092-427f950d210b",
|
|
"email-message--54c76b78-b760-4a14-a092-427f950d210b",
|
|
"email-addr--54c76b78-b760-4a14-a092-427f950d210b",
|
|
"observed-data--54c76b78-f110-4236-9d8f-46d8950d210b",
|
|
"email-message--54c76b78-f110-4236-9d8f-46d8950d210b",
|
|
"email-addr--54c76b78-f110-4236-9d8f-46d8950d210b",
|
|
"observed-data--54c76b78-3830-44f9-935f-4414950d210b",
|
|
"email-message--54c76b78-3830-44f9-935f-4414950d210b",
|
|
"email-addr--54c76b78-3830-44f9-935f-4414950d210b",
|
|
"observed-data--54c76b78-6810-406e-86e6-4fad950d210b",
|
|
"email-message--54c76b78-6810-406e-86e6-4fad950d210b",
|
|
"email-addr--54c76b78-6810-406e-86e6-4fad950d210b",
|
|
"observed-data--54c76b78-9b68-49c6-9439-4a0b950d210b",
|
|
"email-message--54c76b78-9b68-49c6-9439-4a0b950d210b",
|
|
"email-addr--54c76b78-9b68-49c6-9439-4a0b950d210b",
|
|
"observed-data--54c76b78-d280-40a1-928a-4ce5950d210b",
|
|
"email-message--54c76b78-d280-40a1-928a-4ce5950d210b",
|
|
"email-addr--54c76b78-d280-40a1-928a-4ce5950d210b",
|
|
"observed-data--54c76b78-4204-4ca5-8932-4941950d210b",
|
|
"email-message--54c76b78-4204-4ca5-8932-4941950d210b",
|
|
"email-addr--54c76b78-4204-4ca5-8932-4941950d210b",
|
|
"observed-data--54c76b79-93fc-4c08-9b07-44e9950d210b",
|
|
"email-message--54c76b79-93fc-4c08-9b07-44e9950d210b",
|
|
"email-addr--54c76b79-93fc-4c08-9b07-44e9950d210b",
|
|
"observed-data--54c76b79-7c60-455a-9441-4162950d210b",
|
|
"email-message--54c76b79-7c60-455a-9441-4162950d210b",
|
|
"email-addr--54c76b79-7c60-455a-9441-4162950d210b",
|
|
"observed-data--54c76b79-8384-4f56-bf8e-439e950d210b",
|
|
"email-message--54c76b79-8384-4f56-bf8e-439e950d210b",
|
|
"email-addr--54c76b79-8384-4f56-bf8e-439e950d210b",
|
|
"observed-data--54c76b79-d03c-4b20-b973-4227950d210b",
|
|
"email-message--54c76b79-d03c-4b20-b973-4227950d210b",
|
|
"email-addr--54c76b79-d03c-4b20-b973-4227950d210b",
|
|
"observed-data--54c76b79-87a0-4754-9e36-47fa950d210b",
|
|
"email-message--54c76b79-87a0-4754-9e36-47fa950d210b",
|
|
"email-addr--54c76b79-87a0-4754-9e36-47fa950d210b",
|
|
"observed-data--54c76b79-6678-4d56-bc32-4c33950d210b",
|
|
"email-message--54c76b79-6678-4d56-bc32-4c33950d210b",
|
|
"email-addr--54c76b79-6678-4d56-bc32-4c33950d210b",
|
|
"observed-data--54c76b79-e478-45a2-b577-47f4950d210b",
|
|
"email-message--54c76b79-e478-45a2-b577-47f4950d210b",
|
|
"email-addr--54c76b79-e478-45a2-b577-47f4950d210b",
|
|
"observed-data--54c76b79-3b04-40f8-bcff-411a950d210b",
|
|
"email-message--54c76b79-3b04-40f8-bcff-411a950d210b",
|
|
"email-addr--54c76b79-3b04-40f8-bcff-411a950d210b",
|
|
"observed-data--54c76b79-4cc0-42de-a5ea-4482950d210b",
|
|
"email-message--54c76b79-4cc0-42de-a5ea-4482950d210b",
|
|
"email-addr--54c76b79-4cc0-42de-a5ea-4482950d210b",
|
|
"observed-data--54c76b79-a960-45a8-bd6a-48ff950d210b",
|
|
"email-message--54c76b79-a960-45a8-bd6a-48ff950d210b",
|
|
"email-addr--54c76b79-a960-45a8-bd6a-48ff950d210b",
|
|
"observed-data--54c76b79-a2c8-4c86-88c0-4532950d210b",
|
|
"email-message--54c76b79-a2c8-4c86-88c0-4532950d210b",
|
|
"email-addr--54c76b79-a2c8-4c86-88c0-4532950d210b",
|
|
"indicator--54c76c1a-4e60-41e9-95a4-481d950d210b",
|
|
"indicator--54c76c1b-47b0-445f-a349-4103950d210b",
|
|
"indicator--54c76c1b-71e4-484a-a9d0-4ee6950d210b",
|
|
"indicator--54c76c1b-67cc-475c-b22f-4eb2950d210b",
|
|
"indicator--54c76c1b-324c-43bf-9272-4d08950d210b",
|
|
"indicator--54c76c1b-1e00-45f7-80e5-4bad950d210b",
|
|
"indicator--54c76c1b-d600-4c59-9455-4dd9950d210b",
|
|
"indicator--54c76c1b-ae2c-43b7-be41-4ea0950d210b",
|
|
"indicator--54c76c1b-a610-4e18-b06d-497e950d210b",
|
|
"indicator--54c76c1b-ddd0-47e0-8cba-4d46950d210b",
|
|
"indicator--54c76c1b-3a30-4805-a4fc-476c950d210b",
|
|
"indicator--54c76c1b-f3f8-4ded-9f4f-42a1950d210b",
|
|
"indicator--54c76c1c-2854-4ddb-b84e-4744950d210b",
|
|
"indicator--54c76c1c-a030-4fcc-8795-4f7b950d210b",
|
|
"indicator--54c76c1c-d0f8-4108-9de1-4229950d210b",
|
|
"indicator--54c76c4b-39b4-486c-8be2-4b45950d210b",
|
|
"indicator--54c76c4b-2ac4-46df-a5ef-4fdf950d210b",
|
|
"indicator--54c76c4b-ad84-4986-8714-4eec950d210b",
|
|
"indicator--54c76c4b-e4dc-46c8-81ee-4a4c950d210b",
|
|
"indicator--54c76c4b-89c8-4d1d-8834-4e88950d210b",
|
|
"indicator--54c76c61-bb24-42ba-8113-4dc7950d210b",
|
|
"indicator--54c76c61-dd6c-43c2-98a9-443d950d210b",
|
|
"indicator--54c76c61-8304-4188-96dc-4d2e950d210b",
|
|
"indicator--54c76c61-8f10-4e51-80e3-4459950d210b",
|
|
"indicator--54c76c61-3df0-450b-be15-43a1950d210b",
|
|
"indicator--54c76c61-5da8-4b93-bb01-4b41950d210b",
|
|
"indicator--54c76c61-2020-41a6-b19c-4b1e950d210b",
|
|
"indicator--54c76c61-b284-48c9-a040-42bd950d210b",
|
|
"indicator--54c76c61-8d3c-477b-a576-4ad4950d210b",
|
|
"indicator--54c76c61-b874-4aba-8025-4906950d210b",
|
|
"indicator--54c76c62-8f10-46c7-97c9-4c4d950d210b",
|
|
"indicator--54c76c62-39f4-4da4-a0f4-4920950d210b",
|
|
"indicator--54c76c62-9468-4a2c-b39e-4959950d210b",
|
|
"indicator--54c76c62-408c-4934-b4e3-46fd950d210b",
|
|
"indicator--54c76c62-83d4-46ae-ad85-4e33950d210b",
|
|
"indicator--54c76c62-5c48-4f4c-a088-4289950d210b",
|
|
"indicator--54c76c62-3b04-4d1d-84b8-427a950d210b",
|
|
"indicator--54c76c62-1eb0-4d44-8fbf-4cd3950d210b",
|
|
"indicator--54c76c62-715c-48d3-be3e-4bf4950d210b",
|
|
"indicator--54c76c62-1e58-45a5-a411-47ae950d210b",
|
|
"indicator--54c76c62-dfdc-40ce-aabd-4c16950d210b",
|
|
"indicator--54c76c63-23bc-4328-8f0e-4795950d210b",
|
|
"indicator--54c76c63-dec8-4898-a8a3-426f950d210b",
|
|
"indicator--54c76c63-a3ac-463e-bda8-4113950d210b",
|
|
"indicator--54c76c63-d86c-4cd0-ad39-4e87950d210b",
|
|
"indicator--54c76c63-b98c-4ddc-87ff-471e950d210b",
|
|
"indicator--54c76c63-54f8-4623-a003-414f950d210b",
|
|
"indicator--54c76c63-59a0-41de-b92e-406f950d210b",
|
|
"indicator--54c76c63-2758-4e1b-97db-4a05950d210b",
|
|
"indicator--54c76c63-c5cc-4a4f-b749-4966950d210b",
|
|
"indicator--54c76c63-b6c8-4990-8d6e-4956950d210b",
|
|
"indicator--54c76c63-44fc-4aa0-9de1-4799950d210b",
|
|
"indicator--54c76c63-ca44-4c92-a1f1-450d950d210b",
|
|
"indicator--54c76c64-a3c8-4430-b5d3-4d10950d210b",
|
|
"indicator--54c76c64-1098-494a-afae-4365950d210b",
|
|
"indicator--54c76c64-58b0-485a-aaf0-4256950d210b",
|
|
"indicator--54c76c64-8ae8-4fb0-bde0-4595950d210b",
|
|
"indicator--54c76c64-7588-4b26-b25e-4f77950d210b",
|
|
"indicator--54c76c64-90d0-4537-9c4f-43e2950d210b",
|
|
"indicator--54c76c64-1df0-49fe-bb94-4101950d210b",
|
|
"indicator--54c76c64-b6b0-4ab1-a13e-4191950d210b",
|
|
"indicator--54c76c64-6794-4f2c-89ac-43bc950d210b",
|
|
"indicator--54c76c64-2f0c-4bd0-bb0e-4b6a950d210b",
|
|
"indicator--54c76c64-24b0-4c64-81ef-4690950d210b",
|
|
"indicator--54c76c64-2310-497d-a2c6-425b950d210b",
|
|
"indicator--54c76c65-1998-42b2-88bd-4bb9950d210b",
|
|
"indicator--54c76c65-449c-4f96-b205-4665950d210b",
|
|
"indicator--54c76c65-0db8-450e-bb50-4a9a950d210b",
|
|
"indicator--54c76c65-5c74-4849-8bd1-4727950d210b",
|
|
"indicator--54c76c65-c55c-4fa6-8140-490d950d210b",
|
|
"indicator--54c76c65-b344-4c80-8276-451d950d210b",
|
|
"indicator--54c76c65-8d24-4b62-9e71-4556950d210b",
|
|
"indicator--54c76c65-cb78-4312-b0d6-4f8b950d210b",
|
|
"indicator--54c76c65-aa58-407d-a45b-47f7950d210b",
|
|
"indicator--54c76c65-31f0-4546-8e44-4770950d210b",
|
|
"indicator--54c76c65-b1e0-4c03-92ae-4c0f950d210b",
|
|
"indicator--54c76c66-6784-4adc-b879-4b8b950d210b",
|
|
"indicator--54c76c66-1268-434a-8f9d-4689950d210b",
|
|
"indicator--54c76c66-523c-4592-b143-4ed1950d210b",
|
|
"indicator--54c76c66-7c1c-47bc-b3c7-4eed950d210b",
|
|
"indicator--54c76c66-7be4-4097-8c1a-47aa950d210b",
|
|
"indicator--54c76c66-b184-4456-9a3b-4497950d210b",
|
|
"indicator--54c76c66-e458-4199-a2c3-4986950d210b",
|
|
"indicator--54c76c66-1c5c-4810-b054-4db0950d210b",
|
|
"indicator--54c76c66-6114-4976-81eb-4a88950d210b",
|
|
"indicator--54c76c66-5e00-4d75-927f-4633950d210b",
|
|
"indicator--54c76c66-0738-4ace-b316-4a69950d210b",
|
|
"indicator--54c76c67-1c54-4211-9c6d-4b3b950d210b",
|
|
"indicator--54c76c67-d610-417a-bec4-4aa9950d210b",
|
|
"indicator--54c76c67-3fd4-4d6f-b675-4c6e950d210b",
|
|
"indicator--54c76c67-eac8-461b-9c81-49c5950d210b",
|
|
"indicator--54c76c67-fd28-4a6b-a151-4d3e950d210b",
|
|
"indicator--54c76c67-a0b0-4e9f-8948-4bf6950d210b",
|
|
"indicator--54c76c67-4d90-4184-9d46-470d950d210b",
|
|
"indicator--54c76c67-f1d8-476c-80f3-439d950d210b",
|
|
"indicator--54c76c67-fcb0-4771-8384-47bb950d210b",
|
|
"indicator--54c76c67-6074-4424-aee8-427d950d210b",
|
|
"indicator--54c76c67-1fac-4f96-ab86-45d1950d210b",
|
|
"indicator--54c76c67-c900-49d5-95ab-4936950d210b",
|
|
"indicator--54c76c68-4918-4d5a-8038-475a950d210b",
|
|
"indicator--54c76c68-e140-46ae-98e9-4930950d210b",
|
|
"indicator--54c76c68-5938-4f89-ac7f-43b2950d210b",
|
|
"indicator--54c76c68-9f60-4a52-b79e-43ce950d210b",
|
|
"indicator--54c76c68-c370-4418-b4f9-4fb7950d210b",
|
|
"indicator--54c76c68-5e88-467d-8ee4-4aca950d210b",
|
|
"indicator--54c76c68-a120-4358-ab69-41cf950d210b",
|
|
"indicator--54c76c68-4d44-4447-97a0-496d950d210b",
|
|
"indicator--54c76c68-a080-43ad-b89e-4620950d210b",
|
|
"indicator--54c76c68-3698-4a6b-bcae-435d950d210b",
|
|
"indicator--54c76c68-71cc-48a6-82ef-4e66950d210b",
|
|
"indicator--54c76c69-e690-438e-a5cd-4f38950d210b",
|
|
"indicator--54c76c69-f1c8-4b8a-9eac-442f950d210b",
|
|
"indicator--54c76c69-1c50-4021-a123-4035950d210b",
|
|
"indicator--54c76c69-bbc8-49e4-bc8b-4065950d210b",
|
|
"indicator--54c76c69-5098-42b8-9fa4-48bb950d210b",
|
|
"indicator--54c76c69-273c-4603-ad07-4fcd950d210b",
|
|
"indicator--54c76c69-0ffc-4f8a-a01f-46be950d210b",
|
|
"indicator--54c76c69-b7e0-4795-84d3-43cf950d210b",
|
|
"indicator--54c76c69-67ec-4732-9085-40cb950d210b",
|
|
"indicator--54c76c69-55c8-49c2-b2c8-49bc950d210b",
|
|
"indicator--54c76c69-ded4-40da-a1e0-4fa8950d210b",
|
|
"indicator--54c76c6a-5f14-4038-b17c-4462950d210b",
|
|
"indicator--54c76c6a-be28-40f2-aa67-4d7c950d210b",
|
|
"indicator--54c76c6a-df34-4cce-9d7e-4c76950d210b",
|
|
"indicator--54c76c6a-5afc-4077-ba89-4380950d210b",
|
|
"indicator--54c76c6a-fbbc-456b-850e-4747950d210b",
|
|
"indicator--54c76c6a-555c-4bcf-8334-41c7950d210b",
|
|
"indicator--54c76c6a-b904-4849-9346-4d24950d210b",
|
|
"indicator--54c76c6a-b6a0-4c05-8970-4cef950d210b",
|
|
"indicator--54c76c6a-033c-4d4f-ab96-4da7950d210b",
|
|
"indicator--54c76c6a-0d78-4fd1-ba53-473d950d210b",
|
|
"indicator--54c76c6a-ea00-4925-957a-40a8950d210b",
|
|
"indicator--54c76c6b-38d8-489a-90a2-4009950d210b",
|
|
"indicator--54c76c6b-690c-41ff-bb75-496a950d210b",
|
|
"indicator--54c76c6b-abd0-4c9b-8750-44e2950d210b",
|
|
"indicator--54c76c6b-1478-4179-9591-4560950d210b",
|
|
"indicator--54c76c6b-1aec-438a-8e47-44c3950d210b",
|
|
"indicator--54c76c6b-0034-4ddb-a780-4322950d210b",
|
|
"indicator--54c76c6b-d278-4a12-8936-4089950d210b",
|
|
"indicator--54c76c6b-45d0-4afc-8ae2-4da5950d210b",
|
|
"indicator--54c76c6b-9ab0-4486-a18a-4db4950d210b",
|
|
"indicator--54c76c6b-b368-4d6f-b237-4a09950d210b",
|
|
"indicator--54c76c6b-c4b8-4c1d-a8c8-47f6950d210b",
|
|
"indicator--54c76c6c-7460-4947-8a15-4503950d210b",
|
|
"indicator--54c76c6c-99a4-43f5-bf6b-4358950d210b",
|
|
"indicator--54c76c6c-375c-406d-b3ab-499d950d210b",
|
|
"indicator--54c76c6c-90a8-430e-9b47-441a950d210b",
|
|
"indicator--54c76c6c-3cd4-4b27-8816-4155950d210b",
|
|
"indicator--54c76c6c-ad74-47f6-8a00-4af4950d210b",
|
|
"indicator--54c76c6c-16a4-4f5d-8530-4485950d210b",
|
|
"indicator--54c76c6c-6be8-41da-8640-43e1950d210b",
|
|
"indicator--54c76c6c-a4bc-4a61-b332-4733950d210b",
|
|
"indicator--54c76c6c-b140-4756-a105-4e7c950d210b",
|
|
"indicator--54c76c6c-3694-4b8f-8a55-4c44950d210b",
|
|
"indicator--54c76c6c-6640-4b17-b117-4948950d210b",
|
|
"indicator--54c76c6d-c034-44ba-ada4-4366950d210b",
|
|
"indicator--54c76c6d-89b4-4f26-8312-4b5e950d210b",
|
|
"indicator--54c76c6d-6510-447a-a747-4344950d210b",
|
|
"indicator--54c76c6d-f050-4109-9aed-4392950d210b",
|
|
"indicator--54c76c6d-551c-4531-9bb4-4874950d210b",
|
|
"indicator--54c76c6d-7ea0-43e5-b36a-4eb5950d210b",
|
|
"indicator--54c76c6d-d9c4-4aa5-861c-48f9950d210b",
|
|
"indicator--54c76c6d-99d4-4fd3-a8a5-4f25950d210b",
|
|
"indicator--54c76c6d-3f14-4e1b-88fa-4db0950d210b",
|
|
"indicator--54c76c6d-0744-456c-b07a-4d10950d210b",
|
|
"indicator--54c76c6d-a19c-4159-82a1-4dc7950d210b",
|
|
"indicator--54c76c6e-5600-4891-b381-46c2950d210b",
|
|
"indicator--54c76c6e-bd3c-41e5-985e-4544950d210b",
|
|
"indicator--54c76c6e-a7d0-4b70-ab7b-42bc950d210b",
|
|
"indicator--54c76c6e-6aac-4ae5-8c21-4598950d210b",
|
|
"indicator--54c76c6e-a2dc-4bac-b358-4c95950d210b",
|
|
"indicator--54c76c6e-39e0-4ca8-b894-4822950d210b",
|
|
"indicator--54c76c6e-f958-4b27-babe-492f950d210b",
|
|
"indicator--54c76c6e-9b68-44a1-949c-48b1950d210b",
|
|
"indicator--54c76c6e-239c-4620-9bf6-4d7b950d210b",
|
|
"indicator--54c76c6e-3aec-4e0f-bf5f-4cc9950d210b",
|
|
"indicator--54c76c6e-2310-4394-9162-43f2950d210b",
|
|
"indicator--54c76c6f-2624-4e76-9121-4012950d210b",
|
|
"indicator--54c76c6f-d248-4dbe-b2f7-492b950d210b",
|
|
"indicator--54c76c6f-50bc-44b6-9035-41f0950d210b",
|
|
"indicator--54c76c6f-af40-4a73-8acb-4f11950d210b",
|
|
"indicator--54c76c6f-bd5c-462a-82fa-48d0950d210b",
|
|
"indicator--54c76c6f-4f8c-4cc5-a187-48ea950d210b",
|
|
"indicator--54c76c6f-5afc-4caa-85e6-4a28950d210b",
|
|
"indicator--54c76c6f-6d9c-492a-8fb4-43e9950d210b",
|
|
"indicator--54c76c6f-a11c-419b-9ef8-4eca950d210b",
|
|
"indicator--54c76c6f-773c-4274-b0ee-4af7950d210b",
|
|
"indicator--54c76c6f-c310-4dd9-84be-44ac950d210b",
|
|
"indicator--54c76c70-0348-45f2-8120-4ed6950d210b",
|
|
"indicator--54c76c70-7968-46c9-a324-4b72950d210b",
|
|
"indicator--54c76c70-99a0-4b0b-a36a-43e4950d210b",
|
|
"indicator--54c76c70-6e64-46ce-90df-43e1950d210b",
|
|
"indicator--54c76c70-af2c-49fa-9406-4941950d210b",
|
|
"indicator--54c76c70-5820-4cf7-805c-40ce950d210b",
|
|
"indicator--54c76c70-d830-4bf6-b8da-4e3c950d210b",
|
|
"indicator--54c76c70-4244-4717-ab7e-4a0c950d210b",
|
|
"indicator--54c76c70-0cd0-4e14-993e-47ec950d210b",
|
|
"indicator--54c76c70-93ac-49d7-962e-4d6b950d210b",
|
|
"indicator--54c76c70-23c0-41bf-a661-4ddd950d210b",
|
|
"indicator--54c76c71-f804-499b-b5b9-4e12950d210b",
|
|
"indicator--54c76c71-b730-4bb8-9093-4396950d210b",
|
|
"indicator--54c76c71-36e8-41db-b2d1-45d2950d210b",
|
|
"indicator--54c76c71-3f20-4b4f-a874-48b6950d210b",
|
|
"indicator--54c76c71-cae8-4ed1-b342-4c65950d210b",
|
|
"indicator--54c76c71-dc80-4a03-806a-4ec4950d210b",
|
|
"indicator--54c76c71-027c-4e6a-a167-44c3950d210b",
|
|
"indicator--54c76c71-e81c-4a81-b51e-4b6b950d210b",
|
|
"indicator--54c76c71-7b94-4370-a6d3-40e0950d210b",
|
|
"indicator--54c76c71-8bb4-4790-a90b-476c950d210b",
|
|
"indicator--54c76c71-ad04-4af3-8bd9-4749950d210b",
|
|
"indicator--54c76c72-eb38-4967-b1fa-4270950d210b",
|
|
"indicator--54c76c72-1010-4173-928e-471e950d210b",
|
|
"indicator--54c76c72-bbb4-412d-bfdf-4b1f950d210b",
|
|
"indicator--54c76c72-cfd0-4919-a88d-457a950d210b",
|
|
"indicator--54c76c72-ada0-40e1-a43f-49d8950d210b",
|
|
"indicator--54c76c72-3e10-4d6f-98a4-46b4950d210b",
|
|
"indicator--54c76c72-d58c-4307-b6b4-4ee5950d210b",
|
|
"indicator--54c76c72-0af8-4cbb-9727-43f7950d210b",
|
|
"indicator--54c76c72-d234-4f37-b21b-408d950d210b",
|
|
"indicator--54c76c72-8030-4eef-93de-4b8e950d210b",
|
|
"indicator--54c76c72-d8e8-4c50-8885-47f8950d210b",
|
|
"indicator--54c76c73-5b58-4069-ab1a-4719950d210b",
|
|
"indicator--54c76c73-e1fc-4243-9dc5-44a5950d210b",
|
|
"indicator--54c76c73-81c4-4fd2-98d0-440a950d210b",
|
|
"indicator--54c76c73-5858-4040-a1ff-42e0950d210b",
|
|
"indicator--54c76c73-9dc8-417c-8ad8-45da950d210b",
|
|
"indicator--54c76c73-00c8-4612-be2d-4581950d210b",
|
|
"indicator--54c76c73-083c-4566-8fff-42ec950d210b",
|
|
"indicator--54c76c73-6bdc-4e89-afa8-47f5950d210b",
|
|
"indicator--54c76c73-1040-499f-8160-4d35950d210b",
|
|
"indicator--54c76c73-71ec-4457-b9e3-459f950d210b",
|
|
"indicator--54c76c73-95ec-46df-9933-456f950d210b",
|
|
"indicator--54c76c74-1e48-407a-ad90-4a7b950d210b",
|
|
"indicator--54c76c74-e96c-47fc-8d53-4454950d210b",
|
|
"indicator--54c76c74-30e0-4101-965d-40a7950d210b",
|
|
"indicator--54c76c74-0f80-42f1-9c4a-4a42950d210b",
|
|
"indicator--54c76c74-2594-4281-933f-4601950d210b",
|
|
"indicator--54c76c74-c9ec-43d1-97e6-48a1950d210b",
|
|
"indicator--54c76c74-4c44-41ff-8211-4038950d210b",
|
|
"indicator--54c76c74-e1b4-4793-bdac-4eaa950d210b",
|
|
"indicator--54c76c74-8cd0-4ef4-9b14-4919950d210b",
|
|
"indicator--54c76c74-f804-43f7-b0dd-424b950d210b",
|
|
"indicator--54c76c74-3860-4a9d-bed9-41b0950d210b",
|
|
"indicator--54c76c75-54a4-4384-b89b-4312950d210b",
|
|
"indicator--54c76c75-748c-40f7-9898-4437950d210b",
|
|
"indicator--54c76c75-da2c-494f-b744-4cef950d210b",
|
|
"indicator--54c76c75-a394-4f06-989d-4f5c950d210b",
|
|
"indicator--54c76c75-302c-4850-adc8-4835950d210b",
|
|
"indicator--54c76c75-a974-4ac3-82d2-454b950d210b",
|
|
"indicator--54c76c75-0ce0-4b9a-82a2-4d6d950d210b",
|
|
"indicator--54c76c75-43dc-4b5a-90c3-42e7950d210b",
|
|
"indicator--54c76c75-86b8-451f-aa67-4e27950d210b",
|
|
"indicator--54c76c75-87e0-4370-92fe-42d9950d210b",
|
|
"indicator--54c76c75-1c80-4ecd-a0cd-43a1950d210b",
|
|
"indicator--54c76c76-2868-4528-8ec0-4f78950d210b",
|
|
"indicator--54c76c76-6c10-4694-9d95-4fa4950d210b",
|
|
"indicator--54c76c76-da60-4d90-8e1c-4a71950d210b",
|
|
"indicator--54c76c76-8224-4a73-90d0-4e5b950d210b",
|
|
"indicator--54c76c76-8a54-4143-8463-4443950d210b",
|
|
"indicator--54c76c76-07a4-4f9f-8230-44c3950d210b",
|
|
"indicator--54c76c76-4ccc-4299-ae93-4da8950d210b",
|
|
"indicator--54c76c76-a4e0-481c-9161-4892950d210b",
|
|
"indicator--54c76c76-bdb0-4b11-96b8-4600950d210b",
|
|
"indicator--54c76c76-1d0c-46e9-9147-4fce950d210b",
|
|
"indicator--54c76c76-e540-413b-b74f-4a86950d210b",
|
|
"indicator--54c76c77-81c4-4004-af60-4fc0950d210b",
|
|
"indicator--54c76c77-9114-43af-908c-44ec950d210b",
|
|
"indicator--54c76c77-06fc-4ff3-bfd9-42bf950d210b",
|
|
"indicator--54c76c77-bc50-4422-8022-4f85950d210b",
|
|
"indicator--54c76c77-62a4-42c7-8416-4382950d210b",
|
|
"indicator--54c76c77-24dc-44a5-84d6-4b7e950d210b",
|
|
"indicator--54c76c77-9fc8-49a9-81c9-4c6e950d210b",
|
|
"indicator--54c76c77-c904-48ad-9b09-4a3b950d210b",
|
|
"indicator--54c76c77-94f0-4bde-bed7-4b05950d210b",
|
|
"indicator--54c76c77-974c-4ac5-a49c-4b8a950d210b",
|
|
"indicator--54c76c77-674c-4ad8-b3af-45c4950d210b",
|
|
"indicator--54c76c78-33a8-49c8-b662-4558950d210b",
|
|
"indicator--54c76c78-91f4-4b07-a9a2-480f950d210b",
|
|
"indicator--54c76c78-3b54-4098-aac7-4e83950d210b",
|
|
"indicator--54c76c78-b4a0-4f85-a0c3-426d950d210b",
|
|
"indicator--54c76c78-a4bc-43d1-aafe-4150950d210b",
|
|
"indicator--54c76c78-60a0-4a58-9080-4bdc950d210b",
|
|
"indicator--54c76c78-fdd4-4340-a66c-43f1950d210b",
|
|
"indicator--54c76c78-be64-4645-9902-4706950d210b",
|
|
"indicator--54c76c78-4414-40bd-b9bc-498e950d210b",
|
|
"indicator--54c76c78-9070-4ff3-8841-42d8950d210b",
|
|
"indicator--54c76c78-8d68-4075-83f2-4d70950d210b",
|
|
"indicator--54c76c79-6918-46eb-a371-413a950d210b",
|
|
"indicator--54c76c79-c614-4c6f-94ac-4027950d210b",
|
|
"indicator--54c76c79-15dc-4828-80f2-42de950d210b",
|
|
"indicator--54c76c79-47f4-45d1-9bc3-40e5950d210b",
|
|
"indicator--54c76c79-2ffc-448a-86cf-4779950d210b",
|
|
"indicator--54c76c79-2060-4dd9-bb98-4733950d210b",
|
|
"indicator--54c76c79-94dc-43b5-8c21-4fac950d210b",
|
|
"indicator--54c76c79-9390-4f51-ae17-46b7950d210b",
|
|
"indicator--54c76c79-453c-4eab-b568-4b07950d210b",
|
|
"indicator--54c76c79-e324-4deb-ac94-4f43950d210b",
|
|
"indicator--54c76c79-1da0-4f82-a4fa-44f6950d210b",
|
|
"indicator--54c76c7a-22e4-44d2-aaf0-4053950d210b",
|
|
"indicator--54c76c7a-1e34-4507-9a3e-4784950d210b",
|
|
"indicator--54c76c7a-78ec-485e-ae64-4609950d210b",
|
|
"indicator--54c76c7a-8f9c-42e3-95cc-4475950d210b",
|
|
"indicator--54c76c7a-c8a8-4766-bf00-43ad950d210b",
|
|
"indicator--54c76c7a-db80-4d5d-a7fa-4d55950d210b",
|
|
"indicator--54c76c7a-6a88-4a7a-9d00-49d4950d210b",
|
|
"indicator--54c76c7a-cea4-4fd0-a80a-4f5d950d210b",
|
|
"indicator--54c76c7a-2a64-44d8-9487-4f0a950d210b",
|
|
"indicator--54c76c7a-6c40-4392-a703-4cf5950d210b",
|
|
"indicator--54c76c7a-e074-488b-9413-4077950d210b",
|
|
"indicator--54c76c7b-1aa8-40f5-b4af-442d950d210b",
|
|
"indicator--54c76c7b-e208-4b8c-9722-40c3950d210b",
|
|
"indicator--54c76c7b-e7fc-4e2a-b77c-4276950d210b",
|
|
"indicator--54c76c7b-41a0-4291-b749-4e7e950d210b",
|
|
"indicator--54c76c7b-08c4-4a5b-96a8-45c6950d210b",
|
|
"indicator--54c76c7b-ec18-419c-b2ce-437a950d210b",
|
|
"indicator--54c76c7b-3c30-44b8-9b2f-4ee8950d210b",
|
|
"indicator--54c76c7b-2c10-4e20-a4ca-4659950d210b",
|
|
"indicator--54c76c7b-8bac-4f7d-8f63-441a950d210b",
|
|
"indicator--54c76c7b-3b3c-4601-8c04-4a20950d210b",
|
|
"indicator--54c76c7b-d710-4c11-91f1-4e80950d210b",
|
|
"indicator--54c76c7c-60c0-4a09-bdef-4edf950d210b",
|
|
"indicator--54c76c7c-d870-4463-b8a8-452d950d210b",
|
|
"indicator--54c76c7c-caa4-47af-8088-4017950d210b",
|
|
"indicator--54c76c7c-8704-48be-acc4-4e72950d210b",
|
|
"indicator--54c76c7c-000c-4d0b-be46-45c7950d210b",
|
|
"indicator--54c76c7c-fd18-42fd-8579-45d9950d210b",
|
|
"indicator--54c76c7c-09e4-4856-87c9-43e0950d210b",
|
|
"indicator--54c76c7c-706c-4c3c-a9ac-4d03950d210b",
|
|
"indicator--54c76c7c-473c-4397-97bb-4eae950d210b",
|
|
"indicator--54c76c7c-9d98-402c-9600-442c950d210b",
|
|
"indicator--54c76c7c-8e8c-4fe3-970b-4234950d210b",
|
|
"indicator--54c76c7d-ec7c-4851-8939-4d89950d210b",
|
|
"indicator--54c76c7d-8fb0-40bb-b4a2-45f8950d210b",
|
|
"indicator--56c64d10-a2f4-4874-82de-599d950d210f",
|
|
"indicator--56c64d14-aed4-4582-b465-4a48950d210f",
|
|
"indicator--56c64d15-45ac-41d5-8ac2-c654950d210f",
|
|
"indicator--56c64d17-1f68-4239-b9c6-c652950d210f",
|
|
"indicator--56c64d19-0c48-478c-8656-46bc950d210f",
|
|
"indicator--56c64d1b-56c0-46bd-ae16-5f51950d210f",
|
|
"indicator--56c64d1d-ab18-4ebe-863e-599f950d210f",
|
|
"indicator--56c64d1f-ac70-468d-9397-599c950d210f",
|
|
"indicator--56c64d22-ebc8-4677-b868-4094950d210f",
|
|
"indicator--56c64d24-d140-4280-b154-599e950d210f",
|
|
"indicator--56c64d26-2c44-449b-a161-c651950d210f",
|
|
"indicator--56c64d27-dffc-45ed-bc8e-599e950d210f",
|
|
"indicator--56c64d2a-2f44-46ac-a396-5f51950d210f",
|
|
"indicator--56c64d2b-65cc-4b15-880d-59a1950d210f",
|
|
"indicator--56c64d2e-4404-49d0-b11d-c651950d210f",
|
|
"indicator--56c64d30-ebc0-4e02-8781-4c8d950d210f",
|
|
"indicator--56c64d32-8d78-48bd-81b7-59a4950d210f",
|
|
"indicator--56c64d34-4f84-4186-a080-5ca1950d210f",
|
|
"indicator--56c64d36-9dc8-4ecd-ad86-59a1950d210f",
|
|
"indicator--56c64d38-c0cc-4e86-9685-5f51950d210f",
|
|
"indicator--56c64d3a-b9bc-4ec5-8f2a-599c950d210f",
|
|
"indicator--56c64d3c-e670-4175-b0db-599f950d210f",
|
|
"indicator--56c64d3e-93d4-4f11-906f-599c950d210f",
|
|
"indicator--56c64d40-741c-4696-9d49-59a3950d210f",
|
|
"indicator--56c64d42-f9d8-4246-85a5-59a1950d210f",
|
|
"indicator--56c64d45-75b8-4d2e-8388-59a4950d210f",
|
|
"indicator--56c64d47-1d9c-45c8-876f-59a0950d210f",
|
|
"indicator--56c64d49-53ec-4069-bf30-c652950d210f",
|
|
"indicator--56c64d4b-5ed8-4456-8182-c651950d210f",
|
|
"indicator--56c64d4d-03c8-4f96-87eb-59a0950d210f",
|
|
"indicator--56c64d4f-8240-4949-aa38-5ca1950d210f",
|
|
"indicator--56c64d53-719c-4f90-ae57-5f51950d210f",
|
|
"indicator--56c64d55-5ad8-40fc-b370-599e950d210f",
|
|
"indicator--56c64d57-8e68-4d5f-917e-59a3950d210f",
|
|
"indicator--56c64d59-0664-40a1-9fc5-c651950d210f",
|
|
"indicator--56c64d5b-a3e8-48f6-a248-494b950d210f",
|
|
"indicator--56c64d5e-5184-41b7-98c9-59a3950d210f",
|
|
"indicator--56c64d60-5ed4-4aec-a32a-599e950d210f",
|
|
"indicator--56c64d61-6644-4bf8-a9e5-599c950d210f",
|
|
"indicator--56c64d64-ee78-4db2-891b-599e950d210f",
|
|
"indicator--56c64d66-a9f0-42bb-a7c4-44aa950d210f",
|
|
"indicator--56c64d68-fef4-40e2-8916-c651950d210f",
|
|
"indicator--56c64d6a-78ec-4e87-8de6-599e950d210f",
|
|
"indicator--56c64d6b-c0a0-4f44-ab0c-c652950d210f",
|
|
"indicator--56c64d6d-edac-4ebe-9ede-c650950d210f",
|
|
"indicator--56c64d6f-8800-46e8-b6d7-59a0950d210f",
|
|
"indicator--56c64d71-70a0-48c8-bc20-4970950d210f",
|
|
"indicator--56c64d74-cab8-49e4-820d-c652950d210f",
|
|
"indicator--56c64d77-3fe8-4701-9c90-4c77950d210f",
|
|
"indicator--56c64d0b-ddfc-481d-b562-c650950d210f",
|
|
"indicator--56c64d0d-a12c-4db3-b0ba-59a1950d210f",
|
|
"indicator--56c64d11-9f58-4ca7-add7-5f51950d210f",
|
|
"indicator--56c64d15-bc48-41bb-b271-471b950d210f",
|
|
"indicator--56c64d16-8d30-4f45-a249-599f950d210f",
|
|
"indicator--56c64d18-870c-41e6-847a-5ca1950d210f",
|
|
"indicator--56c64d1a-8e84-46c0-a8bf-c651950d210f",
|
|
"indicator--56c64d1c-b894-4b8a-9689-59a4950d210f",
|
|
"indicator--56c64d1e-4154-4352-96d9-4317950d210f",
|
|
"indicator--56c64d20-010c-4c1b-a086-59a1950d210f",
|
|
"indicator--56c64d23-3954-4853-bdcf-c652950d210f",
|
|
"indicator--56c64d25-0e2c-4d2e-8671-59a1950d210f",
|
|
"indicator--56c64d26-9d80-4051-bedc-59a2950d210f",
|
|
"indicator--56c64d28-26d8-4e56-a510-599f950d210f",
|
|
"indicator--56c64d2b-5a10-45db-82f0-599c950d210f",
|
|
"indicator--56c64d2c-1584-410d-a0a1-599f950d210f",
|
|
"indicator--56c64d2f-9fc0-4ced-8f7b-c652950d210f",
|
|
"indicator--56c64d31-9eb8-404c-8c71-599c950d210f",
|
|
"indicator--56c64d33-1184-491b-ae00-59a3950d210f",
|
|
"indicator--56c64d35-c4b8-4949-b9c1-599e950d210f",
|
|
"indicator--56c64d37-0224-4b54-839a-59a4950d210f",
|
|
"indicator--56c64d39-efd8-4e74-bc9f-59a3950d210f",
|
|
"indicator--56c64d3a-4d18-4ca8-b5ef-59a1950d210f",
|
|
"indicator--56c64d3d-ef80-45a4-9005-5ca1950d210f",
|
|
"indicator--56c64d3f-40a4-41d0-a10e-c651950d210f",
|
|
"indicator--56c64d41-ccfc-421b-86e8-4e4e950d210f",
|
|
"indicator--56c64d43-a4e0-470d-b727-c650950d210f",
|
|
"indicator--56c64d46-2668-4fdc-ac13-5f51950d210f",
|
|
"indicator--56c64d48-1ac0-493e-a890-59a2950d210f",
|
|
"indicator--56c64d4a-af4c-4089-bb27-599f950d210f",
|
|
"indicator--56c64d4c-9328-411e-be0e-c653950d210f",
|
|
"indicator--56c64d4e-c4c8-45f4-b92e-c654950d210f",
|
|
"indicator--56c64d50-6d18-4906-a73c-599c950d210f",
|
|
"indicator--56c64d53-f368-407e-a27f-4399950d210f",
|
|
"indicator--56c64d56-c30c-4f43-9034-c654950d210f",
|
|
"indicator--56c64d57-f2bc-41a0-8da8-5f51950d210f",
|
|
"indicator--56c64d5a-b904-4491-b18e-59a1950d210f",
|
|
"indicator--56c64d5b-ae20-4b17-8a8b-c652950d210f",
|
|
"indicator--56c64d5e-15cc-4fa0-beed-59a2950d210f",
|
|
"indicator--56c64d60-c2dc-4777-9714-59a0950d210f",
|
|
"indicator--56c64d62-e3ec-489d-a567-599f950d210f",
|
|
"indicator--56c64d64-3970-44d2-858a-59a4950d210f",
|
|
"indicator--56c64d67-0a38-4073-9388-c653950d210f",
|
|
"indicator--56c64d69-9698-4054-8248-c654950d210f",
|
|
"indicator--56c64d6a-f758-4785-93b6-5ca1950d210f",
|
|
"indicator--56c64d6c-5298-4d2d-8082-c654950d210f",
|
|
"indicator--56c64d6e-f1d4-46e6-8adc-5ca1950d210f",
|
|
"indicator--56c64d70-7838-4e3a-98d8-c651950d210f",
|
|
"indicator--56c64d72-e304-4ee0-94eb-c650950d210f",
|
|
"indicator--56c64d74-de04-43a2-82a6-c654950d210f",
|
|
"indicator--56c64d77-9ff4-411e-8f2e-5f51950d210f",
|
|
"indicator--56c64d0c-7164-4b02-8640-44c1950d210f",
|
|
"indicator--56c64d0e-662c-4805-933c-59a3950d210f"
|
|
],
|
|
"labels": [
|
|
"Threat-Report",
|
|
"misp:tool=\"MISP-STIX-Converter\"",
|
|
"type:OSINT"
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--34098fce-860f-48ae-8e50-ebd3cc5e41da",
|
|
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
|
|
]
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c60f4e-eb88-44f4-b96d-46e0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"url--54c60f4e-eb88-44f4-b96d-46e0950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"link\"",
|
|
"misp:category=\"External analysis\""
|
|
]
|
|
},
|
|
{
|
|
"type": "url",
|
|
"spec_version": "2.1",
|
|
"id": "url--54c60f4e-eb88-44f4-b96d-46e0950d210b",
|
|
"value": "https://www.blackhat.com/asia-14/archives.html#Haruyama"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c6123f-1cd8-45f8-b627-42c3950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '1d942ec52f42651139df13e837854c2cbd76880d12b513ad3d1550b4b6da8488']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c6123f-8f90-4790-8f61-4fb8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '1f19b9fcbc3b6d09f48a4764eeb7b9e52016ff038bc293ab90f8b34603333928']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c6123f-e730-4b0c-8a2a-42ec950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'b05ddea622e6a00c43ee9b20958cba2dc22f89b8a5ebece7f28443332c77196f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c6123f-8a5c-41a7-8e3e-4cb4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '1acd0212ee970abfea717c2eac9a73613787f86dab42298f1d74a06f79554f0f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c6123f-5e78-4591-b15c-4b91950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'f75ddb8104bd84b15c1bc9fae54d6a0da809ad001fc9e5c76ab2e733ccb684d0']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c6123f-8420-48dd-8dab-4f46950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '4aefdb49c2722358e0479fc91e6e1a45863cd560653f404b57f3176f3048c9d0']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c6123f-a0c8-4c73-a536-4c98950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'cc1ea63125f4564523af3803db42c981ce306fac5f1a187ffd3a86dbc1cca06f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c6123f-44a0-4425-9cff-4be5950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'bf630442adaced2410a6f1962d76f3f8948a5a810d92001bb11f09aa1d01f9ac']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61240-7358-4bdc-9ac0-4257950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'ab1e5e0c91d950cd07d71c17af746697b04dd1906b6f9137445a28670d5bbb76']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61240-b800-411c-a6d3-4317950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '22f9f267b6f5d608892a1bf8a95f8d5adf8172b31f1434b601406fce038211ba']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61240-6308-49ab-9677-43f7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '293058671940186b60ba1eebaeeb9ff2fdca824c93fee7a936f90698a993865d']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61240-1044-49aa-9dee-41c6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'a5db8938ef9627ced151ba32dda949cb7d08d38297e2595073b62db97e9f6b03']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61240-c8f8-4c15-a094-4173950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '70b3508af1602207bf6ed1f212b9758c422fa72dc25b2f000b1780b5f940044d']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61240-b444-4563-acbc-41aa950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '2aa4aee13f057e9f13be2aa25f6df662b447fdf10230ee013f7e734b9b8fbfbc']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61240-3a30-44ac-a641-47c6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'c5d23f066a4f51149211caecae50c6f602a520557bdb441e787bc4506217bb32']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61240-7d3c-4f9d-a54b-42b0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '71323668c2993892445e286e028db05ca3cdc582140c28d5d044aa7eccd9ac29']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61240-eb2c-4422-866d-4845950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '71f7a9da99b5e3c9520bc2cc73e520598d469be6539b3c243fb435fe02e44338']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61240-5fd4-414b-aa5a-4ab2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '8f638b1dee03064ce71eee889ce9adf55e9ce9c16f0694929d1d108fa0d30c11']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61240-0e88-4300-a874-43e8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '90a5c1c5dc2278063478fbc8f2ac072ccf0489d7b3f81a6ed35b7d712b4b7b84']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61241-b14c-4543-8c7f-4c0b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'e6940c142f3bed04eb532e78516da195b35f9fdd77b465a979b96a74c738da0b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61241-65c8-45ca-b316-45c0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '2a8d18a59cd648637deb830079b460008d81411681f0eb41dc327c3f447326f6']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61241-19b0-43c8-b5a9-4976950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '10e20e496b4ea73c3ac656304d6add6c234a045640eb0a54b88aeb68c6c08751']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61241-4e30-463a-a54b-4715950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '67c29f047285a0401afa8cd1167344031b375fa0b11a79ce746c0ca7fa1b8196']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61241-19b0-412a-9bdf-4978950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '61468e3775e2171c306d339dfd7a117405c13b4462399e8e286c3e86b8e1d3d9']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61241-67b8-428e-9fc1-431e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '66bca3f92841b7bffae4d27c3ddb5adbf8084ad40ee0edda1edc1d25f5e1b967']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61241-93a8-490d-9613-4f11950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '5dccc1a35857cb3ea2107fae171afd228c0c25da426c160c09b98c6686666966']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61241-13b4-4cd6-b52f-4dec950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'b05c3de04eb93a6e175222117eb63e6e5894517914a7b055dcb2416cc7f6c5a8']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61241-2190-4b12-973f-495d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '0576bc326b3ece524867e2c9b3feff1d0a4f02a36e375a3e7b0e11b2fafc5629']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61241-77c8-436d-8436-4112950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'f63808ddf0e0ee31c124f509a102a4624fdb919678e9186de67841a70fd5e509']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61241-2e1c-4448-8ec5-4c6d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'e1b91899c1233a933caaf62f17338677eda79522daba41856d1e23f2d0bd625d']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61242-0fec-4d5e-84f3-4ed1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '55db2171cdd76aec00af4f020cd099cd2dbf7afe738e75c80c94e26e9e774631']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61242-e6d4-45b4-9154-4a47950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '555952aa5bcca4fa5ad5a7269fece99b1a04816d104ecd8aefabaa1435f65fa5']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61242-d36c-4e2e-9953-4777950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '257023f2b2082f016265070291e1eb926f3107907e1528455cbc53c573d9cbb3']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61242-acfc-41f7-be65-48f7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'c6dffd8891d2f5fb843133e5716f330774b8ca48b4954dbff57e0d2a89406a59']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61242-cac8-4ccc-9510-4a9d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'cb9f92eab414dd2915be0f4122387dd3270c49d84e44a0de29d22e8aa176e046']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61242-0fa8-4d14-8944-4bb2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '2b484ef33d09b5b0fd69dca9ce1621ff70be87dcd144b3c85749daff232b51e3']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61242-c130-4cc4-ac61-4991950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '07d288df69d49f48d1ac38c29a45f1f229817c3889f352e766c66eea72d1942e']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61242-fcc8-455a-9d3e-486c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '803fe2bce423bf3100ed03c53cf71fbacba05d096db0dbcedce13f80bd58e6fc']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61242-33f0-4f45-ad9b-4cac950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '4956e7f345d1e235c7088c950fb5daf7936204ee443e74871e45360291b3343a']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61242-2b34-4f01-bb35-4d2f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '8865387f29f8603ef4e74d2ab25afb74f2725266b03991d2cc0e7d9316a460de']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61242-80b8-4104-8fb5-4cf3950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'b6999f03c228e11601d09055fccbd8513c0fb596ab24c10b0c7c33f7c60b7665']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61242-a5d8-48ca-8a3d-4871950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '9bfcaeb45cf9f1d661871013d4c387462186fff3447a63b3e653c0df70855e96']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61243-0c58-4e1d-a088-4c93950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '50d630d2f194c804bfd33130b895a4bba8241c1bbe9e6b4d8ec574c38923e724']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61243-6d24-4faf-ab94-4672950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '616ab9849512d35a9612e3c7f976a0517eaf18301650d977d4ea8a0c1d7b9ae9']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61243-2c10-457a-bd42-42a3950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '48742c093f566bea237ffe7e66f2dcafc7c27950e5e5e8a34ed2308e6e9213a5']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61243-6f0c-4537-a418-4027950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'a003c5353c9abb01ca9a243bca467b4e9f6067c88471924d5f800fc10b3dc59b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61243-e108-4b84-a5ae-43eb950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '4f7590d4268af785ccd289d634ff6074815e0835c9e6e45756d7b9f3c526b159']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61243-aa78-49a8-8af9-4285950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '8dd55b5878b65953cb1e0cd523f1aa3a826fbca16ff070a5459d0af563acbee5']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61243-d524-4b70-bc66-4866950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '08665a8838adf7e04c1154daf6ca4b9aaf7ad6f179288415c707b7566cc11ca6']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61243-2124-43d0-81e9-408e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '074960dcfe2307ffc245e756d461c84053ca4d5d4071623d39289bef5402587b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61243-90c4-4910-8b96-4f05950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '93447e5f1b1a58b191b9c5043e72222772c1992f7786191e71bfe4d60d6d6543']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61243-5548-4595-a03b-4ce3950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'c8a26b8c3367a6d08a88239ea01df9565f4b9bf6acc50eab3c806f5423be924e']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61243-f8fc-4c36-9d61-490b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'c729089055c1b2e0e13627878e9aaa319198c9f70fb247fc7d52e4071b4cd067']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61244-5518-4001-b9ac-4dee950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'c6b211edee54299aaaf234c9679932bd3b4836e010a0fbf46293fa7e2faf766d']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61244-e8a8-427c-80b3-4b35950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'a3c4cb110064086fd7491d9cf5ffd7552384916c92effca20c8b16dfc625f37b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61244-acbc-49ef-934f-405e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '32d234535e3a950eb89d83a4132f24f37490354dd4008f317df541febfdb516b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61244-b7a0-48b7-a34b-41de950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'c11ac6ecb48b37ff0afb2f1fdadd4e3905c2cfa98766084c470b74b33da51550']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61244-e298-435d-b308-4db2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'f88660de3151900ccf25bc11fc24de17e0d40128a1aff73c561c9cb4a559cac6']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61244-6b0c-44c7-8fea-4bce950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '166b489bea58e877a8f97eac6c9ef6d5db08dd5ff87392657f8400a608dda6b1']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61244-86f8-4547-8072-4115950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'd5852ea9026098196ae02c33280192e51a6c0d284ba07fb1578ad3e089b8ddab']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61244-e2c0-45c7-b0f5-478d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'df1f547cdc627d1651bcf52baa74f30455f94a2ae1d76e900eb3c8b84bb99383']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61244-5454-41a8-a845-4529950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'dfd13c1d72399bae6ce3910e269e45f9bc717de605e64dff326c86172c4d5a98']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61244-b7c8-4588-9d22-4489950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '64e257b7a6b22487a955180e0be313c61c385f54f4753fc81758c80b50c52bb0']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61244-30c8-4542-a9a0-4c10950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '96c577a5e2d09d297e8527b3bf2a0d8fafdc922884a7924d7339663b92af37cf']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61245-2c5c-4389-a559-4806950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '06bf32e95d25508f7bc8217e4d0de5057dc1109d8cf5b94a3cb60e2fbce58774']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61245-15d8-49d9-866a-4230950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '55b352ad38782f834170c5d33dba0342b27f1623985b987a345ac216e43fd2aa']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61245-b3e8-45ac-9c5c-42c7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '4397db5535405939873175e583c767b209fe9dc365931b60800f3ece279c46b2']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61245-7a94-4779-afa2-4e07950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'a99b37c27b74eebdbf90992303eb573d6b406eca0840f2e8690d9f5e91b502a0']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61245-b170-4e2f-8549-4706950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '2cae4c0cd1e7d7a87d6a10735970dafc50344df3042957c00bbc0cce1d02a602']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61245-1680-41db-bd4f-47f2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'b5b625c18f9cdc53ea080a1726cf7222f6f8578849481f5a44bcfae4283af283']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61245-d7fc-4d69-8311-488d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'de09b7ae5e1899b04bddb8476ccd8f0633ed244f0b9875b14881b93d820a6396']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61245-4788-442f-be0c-43c9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '4e96d174595200929d5e4c6ba64b5cc13a03c7c606534ce32fe007abbb0d9355']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61245-23fc-4820-ae62-4e95950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '98dfa9713aa0030b1fcebd34c5a1dc8e76635694548bb683b3d8043c123f0b11']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61245-d9c8-4733-b4d4-426f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '0ccdc6dacb13a92f95b9824315158715ba269afdf1778ba20447aab3716e1728']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61245-932c-40ac-a7ff-4500950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '9282e85300e1dacd9c388760459612bb2a6e516cad0e1836ba4916e97a271507']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61246-0070-4cb9-af44-47a9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '6199613fd468919293a33ccc9894febf82b6c71df062b960ca82b0c68b160d2e']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61246-c074-4b25-9e34-48cb950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'a6d3f5f6d3ae1c307184d92b313c5cd321da5fdcc7771cc532e53b9950daa060']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61246-9978-4ad7-a55f-4240950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'e1cdada171022961c25a58783403e7dac07968514dace472bd4e82fe60d6fa35']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61246-c10c-42b0-9b3a-404f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '2bc5ce39dd9afe2157448d3f6d8cb9c549ed39543d159616e38480b9e6c11c49']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61246-f17c-4a72-8756-4218950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'd85c72ad2016a5e1a858b5a1b67316873927e13f9ff52b8456852c5758736f26']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61246-c4c4-4602-9617-45d0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '7f305dcd024ed7f5a6f7359d0baa35f06d90ae4cb8c35ffed65ed5c651fb0577']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61246-014c-401f-a17a-4a3b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'cb93e86cbb7b048ef2f3607bc97225a03f0143424247913ad903dedadcaebc57']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61246-20f0-43fc-9382-4ec4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '4234f27a48a440d46def787f4fbae259da9e53d5dc976e2d1eaf6f4c5fc1623c']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61246-da7c-4bd4-8b5e-491d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '413bad05ff92bb9895cae3db0e9cbacb4a9f735970044b4b6c56cfb737f154ba']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61246-3d94-412b-ba85-486b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'c6b74ff3409dd91f62677e4da52f77a2810c539a161efb768e86ad31f9500e10']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61246-facc-4500-bddd-4a01950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '881359a2e2d0294f639caf19336d16c6c6447cbfb778b669ccdf3ffba61a1d04']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61247-e368-4cc2-b491-461f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '3356b9dea77d333af9b7c4ac72a3433a9ee4b74f34e84ccdb26c56a53609fd85']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61247-9b30-4e38-8880-43d6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '70dc54ea5a4f2c2815fb1b60c0ee70d316798a6a4adbc2476a4bdbdccb07ec76']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61247-7ef8-415a-b43a-479d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'a832e6cd838389901e4e229ea4c662be81114fc60506d537d66760ed46cbdb80']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61247-49d0-460f-bc94-4db9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'd29caef55fa0eae09838176dc29bd4313e04113061d194ebb5d8b3b23b04ca45']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61247-9e64-4a14-9095-4f2e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '6658aefa05c72fb361cd8710bf442ef7f41a1d6cf6315ca68438fcbd36df3080']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61247-75f0-4002-88f2-4ff1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '6895c0875c627401d00857d426ad9f222075d5ff5f0a217e9de91424a777acdc']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61247-4f08-429a-863b-401c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '445288ad6d9b7b2c11bd572bc87d248146274502a0557cabf63a89d58869f581']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61247-73b4-4db6-b325-4137950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '60fbea9897389c9dc1bb19fae2de4fe485797dd7958e09ac211137c7ae87a68b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61247-0140-44ee-a059-4554950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '73525df5a5b7e12a49d045f92cbb09f87d679dbe3156b9bc5871346e1ddc2d2a']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61247-23d8-49b0-95b1-4651950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '349e19c3a2e3f4071da8b32a052c93b56aa5f4307ee5c07f722bdcc243d02bd2']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61247-cad4-4530-b58c-4693950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '9cb2b1a45e2e427e73b6decc9cbe76790877b052d6053ef90c1dd42d0aab7abc']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61248-08ac-455e-8feb-4ae8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '30a0ac4f02caf9acc6b29a1e9419352a56be9d84d1b534389cf3391b19868347']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61248-cc98-4fe7-9f3c-4994950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '9399d2cae2218d94dde1ed314a9c3b7f5a12e7e94774198a2338ff368f8a6aa8']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61248-9a10-4033-8373-4686950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '647f5f3cc8b07f3f87e4c8ae6f63bd843f8c97d86917f4501dd3e0fcf1649c95']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61248-e7e0-4348-86ff-4ab4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'ab8654480201f0f74126fe6373f7b1605f0142fe53b0aabadaa1e0cef8da6c45']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61248-46a8-4cd2-8739-4118950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '65c710188b3b19309d75848212e921c57b0a7784ca5d6affa08acfeb7c7150dd']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61248-c58c-4f5a-bf3c-445b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '2afa3a7f029f857ed0cda12e84ed4b51f41fba3e320f2d5f4d51c88685c5de11']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61248-8568-4bbb-ad74-4dc2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '39503394318533b7631cea7b1f19a86f8e4362a672e5f0df322d3ad761350136']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61248-2e54-4321-8666-474c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '4d464f9def2276dac15d19ccf049b7c68642290bc0e345e06d4b6e9103fde9e6']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61248-435c-4fd4-b313-4c5b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '65bbf0bd8c6e1ccdb60cf646d7084e1452cb111d97d21d6e8117b1944f3dc71e']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61248-1ef4-493d-a987-448c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '8446c945371f94eefa5b56ae17c4bf7c9c13dd37a38e158658fb8ef89e11b5a2']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61248-16ec-45ec-a5ad-4917950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'fe4985b13b2270c0e71a2c0755a22c17bba968ac66b94899fe6dccc22aacbd54']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61249-c930-4c67-a1af-4f00950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'a78dbafaca4813307529cafbed554b53a622a639941f2e66520bbb92769ee960']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61249-dce0-4143-8657-4067950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'a08caf2d12e1405e615b9dfffca71fa8444347e4a09f43d981c387f14ef18d82']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61249-1350-4005-87c1-4bfd950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'abb466652a24d2525d0a348bca5e000a83272ed4a862cc545075801fd5ff5ad5']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61249-4d5c-4eed-9dfa-4bb7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = 'abce952d75a4ffa93a42dcce883b48ee85cd574793feac0b1442d5b990ea822d']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61249-9984-4c6b-953d-4901950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '861b0fc01cf05c8556fb2037b6e1f59b6ca9f4f69a93b0aa8c477c53aa13d1b2']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61249-67dc-4596-bffe-4d87950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '5889d81082283c087d53d45d9092e552c74a9b446b78579989c1cb4d5e574362']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61249-c8f8-46b4-bc20-43e8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '82c49e96a8f625059084a7519be94fb67c7581a8ea5f39c08c77943abb719fc2']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61249-0ae4-44df-8415-4f8f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '991a2a75e18a2421cf9f887a4fe83d132de6ab73c15b97bd030b8d6037591b1a']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61249-a9d4-4022-94be-4fd3950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '95852da6976c0b3f46eac1988490edd3a0b3e9165c17e3a6e934fd4f899fa204']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61249-e034-40eb-975a-40e2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '20ba00b8df292fdb29beb692d4c8558fffb3f01e9b19d1037a28b3675e09d5e7']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c61249-1a90-46ee-8231-41db950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '882d79db4eeddd403605739ce14f0283752762847fc0535249140ea90a3e96e9']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c6124a-f2fc-492c-8ada-4916950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '542b8483008b476dcb86874c8dd906a72ac12883a5cde2b395f6ec19cb7f02b8']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c6124a-0c88-49fa-929d-43e8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '5146a8483b7a947a193dedd8a840635d2bdd42d384835d8270de7cd38c82d25f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c6124a-fdfc-4d70-a7c7-494d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '8a1a8009b19dd08677209ef54e7ec71e2a41ae383ebd686e95e43f091a8d0a39']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c6124a-2828-419b-b234-4eb7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[file:hashes.SHA256 = '98446b2e9f1b9559cf475dd175555a3557dce973d653be87262b8b8ff38e7710']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c6128e-f3ec-4652-96e2-0941950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"url--54c6128e-f3ec-4652-96e2-0941950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"link\"",
|
|
"misp:category=\"External analysis\""
|
|
]
|
|
},
|
|
{
|
|
"type": "url",
|
|
"spec_version": "2.1",
|
|
"id": "url--54c6128e-f3ec-4652-96e2-0941950d210b",
|
|
"value": "https://www.blackhat.com/images/page-graphics-asia-14/asia-14-slides.png"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c6128e-c328-49de-ae18-0941950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"url--54c6128e-c328-49de-ae18-0941950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"link\"",
|
|
"misp:category=\"External analysis\""
|
|
]
|
|
},
|
|
{
|
|
"type": "url",
|
|
"spec_version": "2.1",
|
|
"id": "url--54c6128e-c328-49de-ae18-0941950d210b",
|
|
"value": "https://www.blackhat.com/docs/asia-14/materials/Haruyama/BHAsia_haruyama_suzuki.zip"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e40-2214-40a7-99c8-4648950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '007-style.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e40-6964-40dd-9033-4953950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '35.ipad2u.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e41-0ad4-4169-91e6-4ef0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'accessamerica.us']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e41-cdf8-46c6-baf6-444f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'accu-rateinsurance.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e41-24fc-4616-a450-45b6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'afbjz.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e41-8d58-412d-9503-4ea6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'alia2.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e41-a6f0-4e25-b1dd-4aa9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'angelitrinitysite.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e41-a4e4-4dde-b409-46e8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'arizonahauntings.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e41-a024-4158-b224-4762950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bartendingacademy.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e41-cb0c-4124-bfb8-4bda950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'betterhomesandgardensgallery.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e41-9b14-4ed2-96b1-4959950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bi-apple.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e41-8834-482a-9310-4027950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'biaaro.ipad2u.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e41-a950-4cbb-966d-4cd9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bonnetlakecarpetcleaner.biz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e42-8c24-4d05-8c1b-4de0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'buydocks.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e42-3f0c-4f31-8d20-414c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'callcowboys.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e42-6b8c-4699-8a26-4ffb950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'capitolcloud.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e42-0b14-4d72-99d7-4826950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'carsalesusedcars.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e42-f02c-42a6-841e-4517950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ccnsure.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e42-fbc0-4e5d-8f06-4759950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cetharhealthcare.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e42-c9cc-4355-acbf-4181950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'clean-talk.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e42-f744-4f23-ab2e-4aa5950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'clubassistonline.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e42-55d4-4620-8c1a-463a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cookiesbecause.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e42-6554-42de-9370-4a06950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'hbeer.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e42-eae8-4fdf-97a7-49d1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'kjwre9fqwieluoi.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e43-f338-4042-b816-447e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'lawfirmreferrals.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e43-2fbc-41ef-b261-4d89950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mail-kr2.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e43-4fb0-485e-bad5-49b0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'maritimesafe.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e43-661c-44dd-8599-40d7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'syscation.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c75e43-5da0-4559-b59c-411c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'usgps.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76127-b400-4a7f-8364-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '1.234.66.15']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76127-d0ac-4713-ae8d-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '101.55.29.18']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76127-0620-42cb-831e-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.14.114.68']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76127-0f08-4396-ab08-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.17.117.161']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76128-5ce4-458f-8905-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.17.117.162']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76128-191c-4c63-a5aa-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.20.220.230']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76128-a4a4-4a43-a80a-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.244.149.61']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76128-64c4-45a9-9095-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.246.244.196']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76128-e404-40d0-931d-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.246.244.201']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76128-af68-4ef2-b393-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.246.244.212']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76128-c0e0-42bd-9d45-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.246.244.213']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76128-9ef4-45cd-ad15-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.246.245.124']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76128-3008-4064-83ba-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.246.245.130']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76128-3378-4112-9b0b-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.27.124.5']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76128-2480-4270-ae92-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '103.30.5.159']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76129-1720-4c88-bcbe-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '112.121.171.94']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76129-fa7c-4c37-90b0-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '112.140.186.149']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76129-5ad0-4029-ba83-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '112.175.234.194']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76129-c024-4bb7-8308-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '112.213.109.237']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76129-fd7c-4c72-adfa-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '113.10.205.225']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76129-2980-4142-a856-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '113.10.205.236']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76129-f944-4680-bf15-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '113.10.246.46']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76129-4924-4198-9c9e-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '111.92.231.6']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76129-d304-440f-86b5-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '108.175.9.189']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76129-60a4-42a2-8423-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '115.23.172.131']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76129-1094-45a2-8177-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '119.10.155.83']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612a-3f8c-4467-a780-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '119.42.148.196']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612a-1f24-4e29-b135-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '119.42.148.197']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612a-275c-4afc-b85b-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '121.127.248.224']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612a-25e8-42c1-8da9-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '121.127.248.27']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612a-f7cc-41f5-93ad-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '121.127.248.28']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612a-bbbc-4a02-a59c-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '122.10.10.156']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612a-8230-499a-8026-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '122.10.10.196']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612a-fd88-41f8-9161-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '122.10.81.232']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612a-f3e0-4957-96d3-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '122.10.81.233']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612a-49ac-47db-b70a-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '122.112.2.14']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612a-dbf4-4aca-b081-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '122.112.2.20']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612b-c4f4-4483-af60-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '122.199.194.197']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612b-e648-4b7d-aefa-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '123.108.108.112']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612b-39e4-4e46-adec-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '124.237.77.11']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612b-e934-4b60-b675-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '124.237.77.25']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612b-3048-47db-be74-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '124.248.238.204']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612b-635c-4c71-ab07-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '125.115.153.63']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612b-dc80-40cf-bffa-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '125.115.158.177']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612b-5b64-4984-924b-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '14.102.252.142']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612b-bee8-4dd2-bef8-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '14.102.252.143']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612b-9ec0-449d-8818-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '14.136.152.179']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612c-8818-4654-ad52-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '14.136.153.152']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612c-836c-4bc0-9d16-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '142.4.121.143']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612c-3400-4fd2-a47f-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '153.122.27.137']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612c-3868-4928-a001-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '157.166.238.48']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612c-1130-41c9-a92f-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '163.43.32.4']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612c-a2c4-4fc3-9592-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '173.13.112.122']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612c-53e0-477f-95b3-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '173.162.177.137']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612c-c6c4-44c8-9c1f-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '173.232.59.113']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612c-5fcc-43f3-8295-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '173.232.59.76']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612c-4608-48a6-802a-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '174.128.255.230']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612c-54a4-4834-a2fe-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '174.137.132.45']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612d-d768-4b4c-b76d-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '174.139.12.84']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612d-5f44-472a-813e-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '174.139.12.86']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612d-570c-49af-ab60-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '174.139.85.155']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612d-9668-4a64-83a1-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.63.130.197']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612d-548c-4603-87c4-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '180.150.227.21']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612d-a300-483f-aa2d-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '180.178.60.126']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612d-a0f8-412f-bd85-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '182.16.18.116']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612d-e058-484c-bdbb-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '182.16.9.13']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612d-a128-4544-99da-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '182.16.9.132']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612d-97dc-430e-ba79-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '182.16.9.14']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612d-de08-473f-a0d1-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '184.22.223.142']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612e-5e80-473a-a6d0-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '184.22.68.202']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612e-e948-4c26-8a22-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '184.82.130.20']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612e-5340-46c7-9ab2-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.161.52.208']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612e-9a38-4343-9b18-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.241.149.43']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612e-5da8-421a-9919-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.74.232.8']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612e-6698-484e-b8fc-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.74.246.91']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612e-f290-43f1-8092-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '198.100.107.107']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612e-9260-4157-a9c1-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '198.199.75.95']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612e-2e60-4fd6-aab8-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '198.199.78.132']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612e-a45c-46ae-952f-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '198.211.127.103']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612e-58c8-489b-ab9d-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '202.150.213.12']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612f-f20c-4ef7-9888-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '202.55.12.146']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612f-e050-4330-8885-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '202.69.69.41']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612f-6154-4e14-930f-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '203.124.13.49']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612f-dd50-4f72-80ec-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '204.200.222.136']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612f-51fc-439a-aa62-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '206.137.17.89']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612f-617c-4064-8f4d-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '208.115.242.35']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612f-4860-461d-999b-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '209.222.14.3']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612f-9cd4-4b8b-958d-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '210.56.63.38']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612f-6b3c-46c8-a98c-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '210.56.63.60']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612f-3ca8-4301-99ec-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '211.44.80.151']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c7612f-9d80-4ffd-a1e5-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '27.255.64.94']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76130-18f4-4777-a305-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '27.255.71.204']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76130-cf6c-4d6b-b551-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '27.255.71.54']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76130-5984-4d40-9103-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '27.255.72.195']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76130-b86c-41df-bd1f-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '27.255.72.196']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76130-fa58-496e-8609-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.4.209.130']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76130-bb8c-4d95-9bfe-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.2.160.125']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76130-7e58-4380-b71f-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.2.160.126']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76130-4b40-4001-94aa-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.2.160.163']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76130-f6f4-4795-92b0-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.2.160.84']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76130-4a60-4233-bcfc-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.63.202.33']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76130-4490-4d55-b0e8-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.63.202.45']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76131-04ac-4ee5-88f6-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.63.202.60']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76131-8f8c-4db3-9db7-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.63.202.62']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76131-8730-4e17-a6d6-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.63.202.95']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76131-cb80-40f8-b123-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '54.214.49.61']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76131-5ca8-4a19-b650-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '54.238.170.48']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76131-89b4-4e4b-98bf-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '54.238.225.28']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76131-4a6c-49fc-a15e-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '54.238.50.84']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76131-4f98-47e9-b07b-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '54.241.13.219']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76131-084c-4051-8b73-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '54.241.17.1']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76131-5a6c-472c-bcc5-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '54.245.89.19']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76131-450c-4456-b000-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '54.248.202.112']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76132-8060-4db1-9ad7-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '54.248.229.24']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76132-0870-4cdc-bae6-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '54.248.229.25']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76132-a9ac-41ed-96b5-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '54.248.82.122']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76132-4e80-4ab9-9274-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '54.248.95.240']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76132-49c8-4a83-93d2-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '54.250.220.230']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76132-0704-434c-9988-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '58.64.200.101']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76132-3a30-40a3-8829-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '58.64.200.105']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76132-166c-46b9-b55d-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '58.64.200.156']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76132-6880-4295-944c-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '59.151.46.217']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76132-9724-47e2-8abc-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '59.188.73.71']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76132-3a80-41a8-b867-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '60.10.1.114']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76133-0cc4-4e83-a96c-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '60.10.1.115']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76133-4a54-45d6-ac8d-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '60.10.1.118']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76133-750c-4bbc-8bc3-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '60.10.1.119']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76133-3dd0-4bcc-a668-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '60.10.1.121']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76133-ce28-461f-8b05-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '60.179.29.115']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76133-aa98-4742-bc1a-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '60.2.148.164']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76133-5e04-48ea-8d07-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '61.178.77.159']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76133-5780-4f0a-95d9-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '61.82.71.15']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76133-5380-447d-9781-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.120.216.119']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76133-fd94-488f-a9e0-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.78.161.132']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76133-1484-4ce0-9be6-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.78.161.146']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76134-94dc-41bb-8e42-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.78.161.148']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76134-04bc-4e4b-88de-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.78.161.150']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76134-62ac-4214-96e2-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.78.161.151']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76134-e680-457f-8e24-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.78.161.152']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76134-8bc8-4488-a553-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.78.161.153']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76134-8f7c-431c-aebc-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.78.170.138']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76134-2e84-40b0-baa1-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.78.170.157']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76134-8818-4e84-9b60-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.78.170.159']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76134-73fc-4e67-9728-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '67.90.204.228']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76134-1f2c-42d7-9e8c-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '69.162.100.164']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76134-b8d0-47e7-9988-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '69.46.86.195']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76135-d308-493a-a658-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '69.64.147.243']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76135-97dc-497f-b837-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '70.147.53.43']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76135-87b8-4eb6-a139-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '71.19.245.98']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76135-0a04-45b3-9c4f-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '74.208.164.166']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76135-f37c-4f5e-a964-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '74.63.195.237']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76135-9d34-48c1-bd44-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '87.106.24.200']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76135-5cf4-4638-a370-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '87.106.250.34']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76135-187c-4a34-bca5-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.73.129.172']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76135-dde0-487f-9fdf-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '96.43.141.186']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76135-004c-441c-a176-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '98.126.107.249']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76135-7f18-4b75-9302-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '98.126.193.223']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76136-fd24-43af-94d7-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '98.126.40.11']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76136-b970-4417-a768-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '98.126.69.3']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c767d3-e610-4e37-91cb-ff5e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '23.88.114.202']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c767f3-4128-4d53-9e6c-41e7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '24.193.122.107']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c768d5-9028-4c2d-a28a-1e3a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"comment\"",
|
|
"misp:category=\"External analysis\""
|
|
],
|
|
"x_misp_category": "External analysis",
|
|
"x_misp_type": "comment",
|
|
"x_misp_value": "Data entered by David Andr\u00c3\u00a9 (and it was painful to extract and sort from the svg!)"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769db-71e0-4c5e-a809-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '000555.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769db-7e60-453a-b7f1-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '00hq.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769db-0cd0-497b-9f7d-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '04748.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769db-e1d0-4cb8-88f0-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '07am.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dc-d760-438c-9221-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '08bus.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dc-75d8-4028-86fc-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1000txt.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dc-0268-4143-9738-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '113766.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dc-56a8-40f7-903f-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '113966.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dc-4dd4-4a94-b1ed-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '114sa.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dc-977c-4b9b-a56e-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '11db.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dc-ce5c-4dd8-be46-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '123brookdale.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dc-09b4-4ff5-9b2c-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '123letters.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dc-507c-458a-8472-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '11thhourevictions.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dc-6964-4bba-9eae-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '10jeuxenligne.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dc-ce78-4596-a8ca-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '10daywebsites.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dc-872c-4d8e-83a6-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '179shoredr.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dd-6bb4-450f-8c0b-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1800800800.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dd-d7b0-425b-b8a6-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1800highbid.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dd-5ae4-4b30-a765-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1ratedehrfor.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dd-19b4-4ddc-96ce-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1stamericanmortgagesource.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dd-0eb8-49fd-a9ef-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '2012yearleft.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dd-5e80-4c75-9878-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '22princes.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dd-3da8-409e-927b-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '246678.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dd-91cc-4bb1-bd3c-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '256699.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dd-fa2c-4846-a08e-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '5voice.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dd-4e10-4104-ae82-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'adv138mail.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769dd-550c-42a7-a46e-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'baatarhuu.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769de-3e50-4fa9-aa76-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bacguarp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769de-0ce4-4aa7-9fca-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bbsexgirl.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769de-34d0-4ce8-844c-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'blueskypotravel.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769de-07b8-434b-94c8-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bluewinnt.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769de-9714-4e81-a8bd-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bodologetee.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769de-33e4-431b-91aa-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bpubzone.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769de-866c-49fc-87ec-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'captainsabertooth.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769de-a98c-4b97-a788-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cheekyfusser.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769de-db90-4d7c-bbdb-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'chileexe77.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769de-2bec-40aa-bb99-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cmdnetview.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769de-2b50-4bff-951c-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'codisk.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769df-6cb0-455a-8776-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'coffeelaunch.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769df-5774-416f-91be-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769df-63bc-46d5-ba2a-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'dreamlifes.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769df-0da0-42b2-9012-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'drivedown.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769df-265c-4f78-b943-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'enjoyholidays.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769df-1110-4be7-8aa9-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'exprenum.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769df-f8e4-4b6c-a9d7-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'freesharecenter.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769df-b13c-4236-b320-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'goldtoyota.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769df-0398-4d9e-9e8f-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'gostudyantivirus.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769df-e7d4-44bf-a761-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'greenrightway.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769df-420c-4c85-9360-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'gzsn999.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e0-8268-4b94-8566-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'have8000.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e0-f280-4c8e-bfc9-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ironybl00dy.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e0-6580-4244-9e13-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'japanteam.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e0-deb8-43ce-a318-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'jnzj8.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e0-5d80-4422-8932-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'jobcall.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e0-1cac-4f9c-abe4-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'kreamnnd.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e0-50ec-417e-949a-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'linkpc.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e0-7460-47d3-92b1-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'lookipv6.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e0-0c08-4959-acf2-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'loveddos.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e0-1918-4773-843c-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'lovequintet.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e0-6c44-4946-8639-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'molnews.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e1-dc50-47d6-b37e-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mongolbaatar.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e1-b738-4f20-a7ac-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'oerco.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e1-ff78-4087-8e28-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'officeskyline.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e1-4790-414c-99b5-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'regionfocus.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e1-a794-46d1-8a9b-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'rsofficial.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e1-3060-4091-be6d-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'seablow.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e1-a1a0-4301-b0ad-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'savagecounty.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e1-d848-4f84-864d-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'sportgameinfo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e1-08e0-4983-9548-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'superdogdream.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e1-a5a0-40ec-af30-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'swordwind.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e1-80c8-4e23-b7ca-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'tendgroup.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e1-cb68-462d-9444-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'tetrer.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e2-9484-4868-8c7a-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'twitterdocs.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e2-eba4-4b66-a4af-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'vip-webmail.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c769e2-f798-4b0a-8582-f80d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'wakay-public.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76a79-2678-4c6c-b41d-0c58950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'zuesinfo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4d-2d44-477a-a1d7-4ec1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "Rajasthan483@rediffmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4d-8444-4771-96fb-4828950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "alfredo.melendres@gmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4d-3e98-4303-9c76-4111950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "allfornewlife@gmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4d-3388-4d92-9873-4806950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "amoroso.antonino@yahoo.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4d-ea8c-4bb5-b922-4538950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "bayern_arsenal@hotmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4e-da54-4f54-b6c2-41a2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "edcf15@yahoo.com.tw"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4e-9e00-49fb-8dea-4edd950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "hellokitty0532@yahoo.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4e-1c50-4744-8799-42da950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "hellokitty19700@hotmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4e-2604-4c55-8fad-48d5950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "hi31736290@aliyun.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4e-0584-45a2-86b9-49e6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "hlemonk@163.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4e-c3cc-4b4e-bcbe-43ce950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "imadakatsu@yahoo.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4e-ade4-439e-afdc-40fe950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "jenny_humphary@yahoo.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4e-1d9c-4785-b782-4ad0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "lanagreen2000@gmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4e-17bc-4b80-bf6e-4af6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "madconnon@126.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4e-9b7c-426b-ab11-40b5950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "mongolianews@yahoo.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4e-ea0c-40f9-9c5e-4c61950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "mrskaren49@yahoo.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4e-f254-46eb-bcb1-437a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "oubjun@yahoo.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4f-214c-4e90-b5fc-46f9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "pl.kosacki@gmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4f-6c10-4f73-820b-4118950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "qiang_zhang@rocketmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4f-69c4-4a67-af29-4169950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "rosa@loncis.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4f-4218-4b6c-bce3-4167950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "sangcheolwoo@gmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4f-5f1c-4c57-9519-4e7a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "sayajames@hotmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4f-3990-4d53-a149-4b74950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "shilii_naran@yahoo.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4f-8c38-4acf-8b06-4cdc950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "stephenjerry68@gmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4f-d338-4b52-a763-4815950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "tuuter@yahoo.cn"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4f-651c-4f8b-af18-4343950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "wedgsdva@hotmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4f-1768-4220-9f48-4336950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "wininglobal@gmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4f-a524-4a80-9e3e-411a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "zhengyanbin8@gmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--54c76b4f-cf08-4626-bcec-47ea950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"labels": [
|
|
"misp:type=\"text\"",
|
|
"misp:category=\"Attribution\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "text",
|
|
"x_misp_value": "zsgyjy001@gtdd.gg"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b77-12e8-4198-bb86-4b8b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b77-12e8-4198-bb86-4b8b950d210b",
|
|
"email-addr--54c76b77-12e8-4198-bb86-4b8b950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b77-12e8-4198-bb86-4b8b950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b77-12e8-4198-bb86-4b8b950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b77-12e8-4198-bb86-4b8b950d210b",
|
|
"value": "Rajasthan483@rediffmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b77-3bcc-46ee-82ac-40ec950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b77-3bcc-46ee-82ac-40ec950d210b",
|
|
"email-addr--54c76b77-3bcc-46ee-82ac-40ec950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b77-3bcc-46ee-82ac-40ec950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b77-3bcc-46ee-82ac-40ec950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b77-3bcc-46ee-82ac-40ec950d210b",
|
|
"value": "alfredo.melendres@gmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b77-32c0-412c-997c-4711950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b77-32c0-412c-997c-4711950d210b",
|
|
"email-addr--54c76b77-32c0-412c-997c-4711950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b77-32c0-412c-997c-4711950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b77-32c0-412c-997c-4711950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b77-32c0-412c-997c-4711950d210b",
|
|
"value": "allfornewlife@gmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b77-1540-4989-84fd-4ee9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b77-1540-4989-84fd-4ee9950d210b",
|
|
"email-addr--54c76b77-1540-4989-84fd-4ee9950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b77-1540-4989-84fd-4ee9950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b77-1540-4989-84fd-4ee9950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b77-1540-4989-84fd-4ee9950d210b",
|
|
"value": "amoroso.antonino@yahoo.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b77-99e4-4626-b640-48d6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b77-99e4-4626-b640-48d6950d210b",
|
|
"email-addr--54c76b77-99e4-4626-b640-48d6950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b77-99e4-4626-b640-48d6950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b77-99e4-4626-b640-48d6950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b77-99e4-4626-b640-48d6950d210b",
|
|
"value": "bayern_arsenal@hotmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b77-ce10-473c-ba88-4d02950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b77-ce10-473c-ba88-4d02950d210b",
|
|
"email-addr--54c76b77-ce10-473c-ba88-4d02950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b77-ce10-473c-ba88-4d02950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b77-ce10-473c-ba88-4d02950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b77-ce10-473c-ba88-4d02950d210b",
|
|
"value": "edcf15@yahoo.com.tw"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b77-e428-4d47-bd16-4982950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b77-e428-4d47-bd16-4982950d210b",
|
|
"email-addr--54c76b77-e428-4d47-bd16-4982950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b77-e428-4d47-bd16-4982950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b77-e428-4d47-bd16-4982950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b77-e428-4d47-bd16-4982950d210b",
|
|
"value": "hellokitty0532@yahoo.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b78-a778-4e2b-88e3-4b2e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b78-a778-4e2b-88e3-4b2e950d210b",
|
|
"email-addr--54c76b78-a778-4e2b-88e3-4b2e950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b78-a778-4e2b-88e3-4b2e950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b78-a778-4e2b-88e3-4b2e950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b78-a778-4e2b-88e3-4b2e950d210b",
|
|
"value": "hellokitty19700@hotmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b78-c68c-4a6d-9fe4-4a72950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b78-c68c-4a6d-9fe4-4a72950d210b",
|
|
"email-addr--54c76b78-c68c-4a6d-9fe4-4a72950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b78-c68c-4a6d-9fe4-4a72950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b78-c68c-4a6d-9fe4-4a72950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b78-c68c-4a6d-9fe4-4a72950d210b",
|
|
"value": "hi31736290@aliyun.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b78-0758-4eef-8d4d-4965950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b78-0758-4eef-8d4d-4965950d210b",
|
|
"email-addr--54c76b78-0758-4eef-8d4d-4965950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b78-0758-4eef-8d4d-4965950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b78-0758-4eef-8d4d-4965950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b78-0758-4eef-8d4d-4965950d210b",
|
|
"value": "hlemonk@163.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b78-9d70-4e22-8f77-47db950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b78-9d70-4e22-8f77-47db950d210b",
|
|
"email-addr--54c76b78-9d70-4e22-8f77-47db950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b78-9d70-4e22-8f77-47db950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b78-9d70-4e22-8f77-47db950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b78-9d70-4e22-8f77-47db950d210b",
|
|
"value": "imadakatsu@yahoo.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b78-b760-4a14-a092-427f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b78-b760-4a14-a092-427f950d210b",
|
|
"email-addr--54c76b78-b760-4a14-a092-427f950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b78-b760-4a14-a092-427f950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b78-b760-4a14-a092-427f950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b78-b760-4a14-a092-427f950d210b",
|
|
"value": "jenny_humphary@yahoo.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b78-f110-4236-9d8f-46d8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b78-f110-4236-9d8f-46d8950d210b",
|
|
"email-addr--54c76b78-f110-4236-9d8f-46d8950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b78-f110-4236-9d8f-46d8950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b78-f110-4236-9d8f-46d8950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b78-f110-4236-9d8f-46d8950d210b",
|
|
"value": "lanagreen2000@gmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b78-3830-44f9-935f-4414950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b78-3830-44f9-935f-4414950d210b",
|
|
"email-addr--54c76b78-3830-44f9-935f-4414950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b78-3830-44f9-935f-4414950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b78-3830-44f9-935f-4414950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b78-3830-44f9-935f-4414950d210b",
|
|
"value": "madconnon@126.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b78-6810-406e-86e6-4fad950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b78-6810-406e-86e6-4fad950d210b",
|
|
"email-addr--54c76b78-6810-406e-86e6-4fad950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b78-6810-406e-86e6-4fad950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b78-6810-406e-86e6-4fad950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b78-6810-406e-86e6-4fad950d210b",
|
|
"value": "mongolianews@yahoo.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b78-9b68-49c6-9439-4a0b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b78-9b68-49c6-9439-4a0b950d210b",
|
|
"email-addr--54c76b78-9b68-49c6-9439-4a0b950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b78-9b68-49c6-9439-4a0b950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b78-9b68-49c6-9439-4a0b950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b78-9b68-49c6-9439-4a0b950d210b",
|
|
"value": "mrskaren49@yahoo.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b78-d280-40a1-928a-4ce5950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b78-d280-40a1-928a-4ce5950d210b",
|
|
"email-addr--54c76b78-d280-40a1-928a-4ce5950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b78-d280-40a1-928a-4ce5950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b78-d280-40a1-928a-4ce5950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b78-d280-40a1-928a-4ce5950d210b",
|
|
"value": "oubjun@yahoo.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b78-4204-4ca5-8932-4941950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b78-4204-4ca5-8932-4941950d210b",
|
|
"email-addr--54c76b78-4204-4ca5-8932-4941950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b78-4204-4ca5-8932-4941950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b78-4204-4ca5-8932-4941950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b78-4204-4ca5-8932-4941950d210b",
|
|
"value": "pl.kosacki@gmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b79-93fc-4c08-9b07-44e9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b79-93fc-4c08-9b07-44e9950d210b",
|
|
"email-addr--54c76b79-93fc-4c08-9b07-44e9950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b79-93fc-4c08-9b07-44e9950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b79-93fc-4c08-9b07-44e9950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b79-93fc-4c08-9b07-44e9950d210b",
|
|
"value": "qiang_zhang@rocketmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b79-7c60-455a-9441-4162950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b79-7c60-455a-9441-4162950d210b",
|
|
"email-addr--54c76b79-7c60-455a-9441-4162950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b79-7c60-455a-9441-4162950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b79-7c60-455a-9441-4162950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b79-7c60-455a-9441-4162950d210b",
|
|
"value": "rosa@loncis.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b79-8384-4f56-bf8e-439e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b79-8384-4f56-bf8e-439e950d210b",
|
|
"email-addr--54c76b79-8384-4f56-bf8e-439e950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b79-8384-4f56-bf8e-439e950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b79-8384-4f56-bf8e-439e950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b79-8384-4f56-bf8e-439e950d210b",
|
|
"value": "sangcheolwoo@gmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b79-d03c-4b20-b973-4227950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b79-d03c-4b20-b973-4227950d210b",
|
|
"email-addr--54c76b79-d03c-4b20-b973-4227950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b79-d03c-4b20-b973-4227950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b79-d03c-4b20-b973-4227950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b79-d03c-4b20-b973-4227950d210b",
|
|
"value": "sayajames@hotmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b79-87a0-4754-9e36-47fa950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b79-87a0-4754-9e36-47fa950d210b",
|
|
"email-addr--54c76b79-87a0-4754-9e36-47fa950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b79-87a0-4754-9e36-47fa950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b79-87a0-4754-9e36-47fa950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b79-87a0-4754-9e36-47fa950d210b",
|
|
"value": "shilii_naran@yahoo.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b79-6678-4d56-bc32-4c33950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b79-6678-4d56-bc32-4c33950d210b",
|
|
"email-addr--54c76b79-6678-4d56-bc32-4c33950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b79-6678-4d56-bc32-4c33950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b79-6678-4d56-bc32-4c33950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b79-6678-4d56-bc32-4c33950d210b",
|
|
"value": "stephenjerry68@gmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b79-e478-45a2-b577-47f4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b79-e478-45a2-b577-47f4950d210b",
|
|
"email-addr--54c76b79-e478-45a2-b577-47f4950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b79-e478-45a2-b577-47f4950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b79-e478-45a2-b577-47f4950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b79-e478-45a2-b577-47f4950d210b",
|
|
"value": "tuuter@yahoo.cn"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b79-3b04-40f8-bcff-411a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b79-3b04-40f8-bcff-411a950d210b",
|
|
"email-addr--54c76b79-3b04-40f8-bcff-411a950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b79-3b04-40f8-bcff-411a950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b79-3b04-40f8-bcff-411a950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b79-3b04-40f8-bcff-411a950d210b",
|
|
"value": "wedgsdva@hotmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b79-4cc0-42de-a5ea-4482950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b79-4cc0-42de-a5ea-4482950d210b",
|
|
"email-addr--54c76b79-4cc0-42de-a5ea-4482950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b79-4cc0-42de-a5ea-4482950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b79-4cc0-42de-a5ea-4482950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b79-4cc0-42de-a5ea-4482950d210b",
|
|
"value": "wininglobal@gmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b79-a960-45a8-bd6a-48ff950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b79-a960-45a8-bd6a-48ff950d210b",
|
|
"email-addr--54c76b79-a960-45a8-bd6a-48ff950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b79-a960-45a8-bd6a-48ff950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b79-a960-45a8-bd6a-48ff950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b79-a960-45a8-bd6a-48ff950d210b",
|
|
"value": "zhengyanbin8@gmail.com"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--54c76b79-a2c8-4c86-88c0-4532950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"first_observed": "2015-01-27T10:46:53Z",
|
|
"last_observed": "2015-01-27T10:46:53Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"email-message--54c76b79-a2c8-4c86-88c0-4532950d210b",
|
|
"email-addr--54c76b79-a2c8-4c86-88c0-4532950d210b"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"email-src\"",
|
|
"misp:category=\"Payload delivery\""
|
|
]
|
|
},
|
|
{
|
|
"type": "email-message",
|
|
"spec_version": "2.1",
|
|
"id": "email-message--54c76b79-a2c8-4c86-88c0-4532950d210b",
|
|
"is_multipart": false,
|
|
"from_ref": "email-addr--54c76b79-a2c8-4c86-88c0-4532950d210b"
|
|
},
|
|
{
|
|
"type": "email-addr",
|
|
"spec_version": "2.1",
|
|
"id": "email-addr--54c76b79-a2c8-4c86-88c0-4532950d210b",
|
|
"value": "zsgyjy001@gtdd.gg"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1a-4e60-41e9-95a4-481d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.MD5 = '05138bd38f7c63313cb72b4ed5c241fa']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1b-47b0-445f-a349-4103950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.MD5 = '08709f35581e0958d1ca4e50b7d86dba']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1b-71e4-484a-a9d0-4ee6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.MD5 = '39a59411e7b12236c0b4351168fb47ce']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1b-67cc-475c-b22f-4eb2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.MD5 = '410eeaa18dbec01a27c5b41753b3c7ed']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1b-324c-43bf-9272-4d08950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.MD5 = '5b90896127179f0ad2e6628593cdb60d']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1b-1e00-45f7-80e5-4bad950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.MD5 = '68fec995a13762184a2616bda86757f8']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1b-d600-4c59-9455-4dd9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.MD5 = '7fd4ba6d20d36aade9b3b483b777df99']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1b-ae2c-43b7-be41-4ea0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.SHA256 = 'a927dbfa5e712349c41367930154abbab8749aa8e30355b4386ef4ba65335879']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1b-a610-4e18-b06d-497e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.MD5 = 'b0eeca383a7477ee689ec807b775ebbb']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1b-ddd0-47e0-8cba-4d46950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.MD5 = 'b1deff736b6d12b8d98b485e20d318ea']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1b-3a30-4805-a4fc-476c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.MD5 = 'cf8094c07c15aa394dddd4eca4aa8c8b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1b-f3f8-4ded-9f4f-42a1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.MD5 = 'd8c00fed6625e5f8d0b8188a5caac115']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1c-2854-4ddb-b84e-4744950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.SHA256 = 'f013c62225b0aab8b0182f27984f48bcac1d4dbab51bfd77ef4ea3a25c2ce0cb']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1c-a030-4fcc-8795-4f7b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.MD5 = 'f5315fb4a654087d30c69c768d80f826']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c1c-d0f8-4108-9de1-4229950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"description": "Imported via the freetext import.",
|
|
"pattern": "[file:hashes.MD5 = 'e84853c0484b02b7518dd683787d04fc']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c4b-39b4-486c-8be2-4b45950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'max-hi.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c4b-2ac4-46df-a5ef-4fdf950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'methoder.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c4b-ad84-4986-8714-4eec950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mg5-yahoo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c4b-e4dc-46c8-81ee-4a4c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mofamails.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c4b-89c8-4d1d-8834-4e88950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mol-government.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c61-bb24-42ba-8113-4dc7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '005.twoshekels.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c61-dd6c-43c2-98a9-443d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '014136152179.ctinets.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c61-8304-4188-96dc-4d2e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '021307dd122c.oyonu.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c61-8f10-4e51-80e3-4459950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '042707d90914.agrigid.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c61-3df0-450b-be15-43a1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '052507dd1107.derchy.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c61-5da8-4b93-bb01-4b41950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '07a458cff1d2.himpi.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c61-2020-41a6-b19c-4b1e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '09back.purpledaily.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c61-b284-48c9-a040-42bd950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '0bba49cdebc1.himpi.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c61-8d3c-477b-a576-4ad4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '0cb54dd5fbde.himpi.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c61-b874-4aba-8025-4906950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '0fb45bd8f0db.himpi.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c62-8f10-46c7-97c9-4c4d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1053b.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c62-39f4-4da4-a0f4-4920950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '10a.10b.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c62-9468-4a2c-b39e-4959950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '10f6c.cash-ddt.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c62-408c-4934-b4e3-46fd950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '11102.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c62-83d4-46ae-ad85-4e33950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '121907dd072f.agrigid.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c62-5c48-4f4c-a088-4289950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '123123.itrello.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c62-3b04-4d1d-84b8-427a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '13znian2012qq.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c62-1eb0-4d44-8fbf-4cd3950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '14929.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c62-715c-48d3-be3e-4bf4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '152e1e.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c62-1e58-45a5-a411-47ae950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '15c92.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c62-dfdc-40ce-aabd-4c16950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '16954.cash-ddt.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c63-23bc-4328-8f0e-4795950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '172.24.18.21.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c63-dec8-4898-a8a3-426f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '17b45.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c63-a3ac-463e-bda8-4113950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '17f1e.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c63-d86c-4cd0-ad39-4e87950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1875b.money-frn.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c63-b98c-4ddc-87ff-471e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '19962ba.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c63-54f8-4623-a003-414f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1a95a.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c63-59a0-41de-b92e-406f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1a999.cash-ddt.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c63-2758-4e1b-97db-4a05950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1a9a8.money-frn.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c63-c5cc-4a4f-b749-4966950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1b1a7.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c63-b6c8-4990-8d6e-4956950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1b1b7.cash-ddt.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c63-44fc-4aa0-9de1-4799950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1b1c6.money-frn.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c63-ca44-4c92-a1f1-450d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1b9a6.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c64-a3c8-4430-b5d3-4d10950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1be69.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c64-1098-494a-afae-4365950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1c3dc.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c64-58b0-485a-aaf0-4256950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1c3fa.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c64-8ae8-4fb0-bde0-4595950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1d1b2.cash-ddt.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c64-7588-4b26-b25e-4f77950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1d9666.cash-ddt.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c64-90d0-4537-9c4f-43e2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1db7d.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c64-1df0-49fe-bb94-4101950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1dd17.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c64-b6b0-4ab1-a13e-4191950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1e988.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c64-6794-4f2c-89ac-43bc950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1f269.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c64-2f0c-4bd0-bb0e-4b6a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1f66c8b.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c64-24b0-4c64-81ef-4690950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1fc59b.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c64-2310-497d-a2c6-425b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1fc992.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c65-1998-42b2-88bd-4bb9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1fe07.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c65-449c-4f96-b205-4665950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1ff277.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c65-0db8-450e-bb50-4a9a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '1z7.no-ip.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c65-5c74-4849-8bd1-4727950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '20002.police702.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c65-c55c-4fa6-8140-490d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '23fed.cash-ddt.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c65-b344-4c80-8276-451d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '242db.money-frn.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c65-8d24-4b62-9e71-4556950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '24b95.cash-ddt.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c65-cb78-4312-b0d6-4f8b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '24b95.makemegood24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c65-aa58-407d-a45b-47f7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '25626.7z7z.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c65-31f0-4546-8e44-4770950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '29q.no-ip.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c65-b1e0-4c03-92ae-4c0f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = '9ijhh45.zapto.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c66-6784-4adc-b879-4b8b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'firehappy.sytes.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c66-1268-434a-8f9d-4689950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'a-a1.no-ip.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c66-523c-4592-b143-4ed1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'a-ga.purpledaily.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c66-7c1c-47bc-b3c7-4eed950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ac.westjean.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c66-7be4-4097-8c1a-47aa950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ac.westmilitary.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c66-b184-4456-9a3b-4497950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'accountingrecovery.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c66-e458-4199-a2c3-4986950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'accout.mrbasic.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c66-1c5c-4810-b054-4db0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ad.msnupdate.bz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c66-6114-4976-81eb-4a88950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ads.bpyoyo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c66-5e00-4d75-927f-4633950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'aga.toh.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c66-0738-4ace-b316-4a69950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'agames.dyndns.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c67-1c54-4211-9c6d-4b3b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ahjhlk.dyndns.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c67-d610-417a-bec4-4aa9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'airbus.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c67-3fd4-4d6f-b675-4c6e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'allmydearfriends.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c67-eac8-461b-9c81-49c5950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'almas.protectiveumbrella019470.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c67-fd28-4a6b-a151-4d3e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'amne.purpledaily.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c67-a0b0-4e9f-8948-4bf6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ap.msnupdate.bz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c67-4d90-4184-9d46-470d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'app.downloadwindows.codisk.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c67-f1d8-476c-80f3-439d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'apple.cmdnetview.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c67-fcb0-4771-8384-47bb950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'apple.jumpingcrab.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c67-6074-4424-aee8-427d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'apss.purpledaily.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c67-1fac-4f96-ab86-45d1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'areva.winibmhelp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c67-c900-49d5-95ab-4936950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'asia.usgps.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c68-4918-4d5a-8038-475a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'autuo.xicp.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c68-e140-46ae-98e9-4930950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'av4.microsoftsp3.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c68-5938-4f89-ac7f-43b2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'back.worthhummer.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c68-9f60-4a52-b79e-43ce950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bakup.dyndns-mail.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c68-c370-4418-b4f9-4fb7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bangzi.ironybl00dy.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c68-5e88-467d-8ee4-4aca950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'banreservas.com.do.myredirect.us']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c68-a120-4358-ab69-41cf950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'baqiwailu.zapto.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c68-4d44-4447-97a0-496d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bbs.tradeinfo2u.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c68-a080-43ad-b89e-4620950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bbs.zuesinfo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c68-3698-4a6b-bcae-435d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bingyuanyuan.f3322.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c68-71cc-48a6-82ef-4e66950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bluefin.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c69-e690-438e-a5cd-4f38950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bot.dongevil.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c69-f1c8-4b8a-9eac-442f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bot.duola123.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c69-1c50-4021-a123-4035950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bot.jgame.in']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c69-bbc8-49e4-bc8b-4065950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bp.dnsalias.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c69-5098-42b8-9fa4-48bb950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bs411.bluewinnt.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c69-273c-4603-ad07-4fcd950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'bugatti.from-wa.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c69-0ffc-4f8a-a01f-46be950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'business.chileexe77.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c69-b7e0-4795-84d3-43cf950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cac.worthhummer.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c69-67ec-4732-9085-40cb950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cas.usgps.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c69-55c8-49c2-b2c8-49bc950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'catalogipdate.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c69-ded4-40da-a1e0-4fa8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ccac.dyndns-web.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6a-5f14-4038-b17c-4462950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cdn.abacocafe.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6a-be28-40f2-aa67-4d7c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cdrnkl.worthhummer.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6a-df34-4cce-9d7e-4c76950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cecon.flower-show.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6a-5afc-4077-ba89-4380950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'centipede.wha.la']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6a-fbbc-456b-850e-4747950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'centralasia.regionfocus.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6a-555c-4bcf-8334-41c7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cgr.usgps.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6a-b904-4849-9346-4d24950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'changejohn.25u.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6a-b6a0-4c05-8970-4cef950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'changejohn.authorizeddns.us']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6a-033c-4d4f-ab96-4da7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'checkerror.obama20009.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6a-0d78-4fd1-ba53-473d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'checking.obama20009.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6a-ea00-4925-957a-40a8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'citt.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6b-38d8-489a-90a2-4009950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cmos17.no-ip.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6b-690c-41ff-bb75-496a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cochin5.homeftp.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6b-abd0-4c9b-8750-44e2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cochin5.webhop.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6b-1478-4179-9591-4560950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cochinbak1.dvrdns.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6b-1aec-438a-8e47-44c3950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cochinbak2.mine.nu']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6b-0034-4ddb-a780-4322950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cochine.blogdns.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6b-d278-4a12-8936-4089950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cochine.homeip.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6b-45d0-4afc-8ae2-4da5950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cochinsl.homedns.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6b-9ab0-4486-a18a-4db4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'cochinsl.webhop.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6b-b368-4d6f-b237-4a09950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'connectsexy.dns-dns.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6b-c4b8-4c1d-a8c8-47f6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'csrss.drivedown.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6c-7460-4947-8a15-4503950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'css.zuesinfo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6c-99a4-43f5-bf6b-4358950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ct.toh.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6c-375c-406d-b3ab-499d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'culture.chileexe77.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6c-90a8-430e-9b47-441a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'czc.lookbar8.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6c-3cd4-4b27-8816-4155950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'daddy.gostudyantivirus.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6c-ad74-47f6-8a00-4af4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'data.lovequintet.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6c-16a4-4f5d-8530-4485950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'data.msftncsl.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6c-6be8-41da-8640-43e1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'dedydns.ns01.us']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6c-a4bc-4a61-b332-4733950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'dell.winmicrosoft.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6c-b140-4756-a105-4e7c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'dns.chileexe77.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6c-3694-4b8f-8a55-4c44950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'dns.lookipv6.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6c-6640-4b17-b117-4948950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'dns.tendgroup.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6d-c034-44ba-ada4-4366950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'do.enjoyholidays.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6d-89b4-4f26-8312-4b5e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'do.myredirect.us']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6d-6510-447a-a747-4344950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'documents.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6d-f050-4109-9aed-4392950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'domain.domainservice-search.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6d-551c-4531-9bb4-4874950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'dotkang.vicp.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6d-7ea0-43e5-b36a-4eb5950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'dream.jobcall.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6d-d9c4-4aa5-861c-48f9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'drives.methoder.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6d-99d4-4fd3-a8a5-4f25950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'dyl.winxpibm.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6d-3f14-4e1b-88fa-4db0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'elact.dynamicdns.org.uk']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6d-0744-456c-b07a-4d10950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'email.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6d-a19c-4159-82a1-4dc7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'eonceo.flower-show.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6e-5600-4891-b381-46c2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ez3.bluewinnt.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6e-bd3c-41e5-985e-4544950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'fast.bacguarp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6e-a7d0-4b70-ab7b-42bc950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'fast2.bacguarp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6e-6aac-4ae5-8c21-4598950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'fax.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6e-a2dc-4bac-b358-4c95950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'fbi.zyns.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6e-39e0-4ca8-b894-4822950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'files.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6e-f958-4b27-babe-492f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'film.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6e-9b68-44a1-949c-48b1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'finance.chileexe77.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6e-239c-4620-9bf6-4d7b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'fine.worthhummer.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6e-3aec-4e0f-bf5f-4cc9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'finekl.worthhummer.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6e-2310-4394-9162-43f2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'fisu.servehttp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6f-2624-4e76-9121-4012950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'flower-show.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6f-d248-4dbe-b2f7-492b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'flucare.worthhummer.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6f-50bc-44b6-9035-41f0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'fmp.worthhummer.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6f-af40-4a73-8acb-4f11950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'forum.zuesinfo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6f-bd5c-462a-82fa-48d0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'free.coffeelauch.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6f-4f8c-4cc5-a187-48ea950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ftp.bacguarp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6f-5afc-4caa-85e6-4a28950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ftp.bb.ocry.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6f-6d9c-492a-8fb4-43e9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ftp.catalogipdate.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6f-a11c-419b-9ef8-4eca950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ftp.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6f-773c-4274-b0ee-4af7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ftp.dyns.acmetoy.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c6f-c310-4dd9-84be-44ac950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ftp.hession0345.dnsrd.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c70-0348-45f2-8120-4ed6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ftp.port.wikaba.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c70-7968-46c9-a324-4b72950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ftp.satp.lflinkup.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c70-99a0-4b0b-a36a-43e4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ftp.tokyoip.freewww.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c70-6e64-46ce-90df-43e1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ftp.vip-webmail.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c70-af2c-49fa-9406-4941950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'fuckchina.govnb.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c70-5820-4cf7-805c-40ce950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'gameby.flower-show.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c70-d830-4bf6-b8da-4e3c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'gdisrv.lenovoxp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c70-4244-4717-ab7e-4a0c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'geoinfo.servehttp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c70-0cd0-4e14-993e-47ec950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'gms1.ironybl00dy.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c70-93ac-49d7-962e-4d6b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'gol.baatarhuu.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c70-23c0-41bf-a661-4ddd950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'help.yahoo-upgrade.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c71-f804-499b-b5b9-4e12950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'hk.loveddos.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c71-b730-4bb8-9093-4396950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'house.superdogdream.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c71-36e8-41db-b2d1-45d2950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'http80.vip-webmail.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c71-3f20-4b4f-a874-48b6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'image.dreamlifes.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c71-cae8-4ed1-b342-4c65950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'info.greenrightway.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c71-dc80-4a03-806a-4ec4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'information.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c71-027c-4e6a-a167-44c3950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'iri.worthhummer.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c71-e81c-4a81-b51e-4b6b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'istore.bacguarp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c71-7b94-4370-a6d3-40e0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'janpun.americanunfinished.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c71-8bb4-4790-a90b-476c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'japan.accountingrecovery.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c71-ad04-4af3-8bd9-4749950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'japan.fuckanti.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c72-eb38-4967-b1fa-4270950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'japanfst.japanteam.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c72-1010-4173-928e-471e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'jessler.memsanyber.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c72-bbb4-412d-bfdf-4b1f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'jpn.longmusic.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c72-cfd0-4919-a88d-457a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'kkorea.accountingrecovery.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c72-ada0-40e1-a43f-49d8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'klcirf.worthhummer.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c72-3e10-4d6f-98a4-46b4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'kor.redirectme.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c72-d58c-4307-b6b4-4ee5950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'koreans.ironybl00dy.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c72-0af8-4cbb-9727-43f7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'lab.vip-webmail.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c72-d234-4f37-b21b-408d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ligne.oicp.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c72-8030-4eef-93de-4b8e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'like.winntupdate.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c72-d8e8-4c50-8885-47f8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'line.bacguarp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c73-5b58-4069-ab1a-4719950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'lingm.flower-show.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c73-e1fc-4243-9dc5-44a5950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'logs.chileexe77.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c73-81c4-4fd2-98d0-440a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'look.captainsabertooth.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c73-5858-4040-a1ff-42e0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'm3.rsofficial.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c73-9dc8-417c-8ad8-45da950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'magazine.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c73-00c8-4612-be2d-4581950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mail-kr2.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c73-083c-4566-8fff-42ec950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mail-ru2.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c73-6bdc-4e89-afa8-47f5950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mail.chileexe77.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c73-1040-499f-8160-4d35950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mail.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c73-71ec-4457-b9e3-459f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mail.galwil.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c73-95ec-46df-9933-456f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'maofajapa.3322.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c74-1e48-407a-ad90-4a7b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'map.lookipv6.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c74-e96c-47fc-8d53-4454950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mon.mongolbaatar.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c74-30e0-4101-965d-40a7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mongol.mongolbaatar.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c74-0f80-42f1-9c4a-4a42950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mongolia.regionfocus.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c74-2594-4281-933f-4601950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'mongolia.swordwind.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c74-c9ec-43d1-97e6-48a1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'monkey.2012yearleft.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c74-4c44-41ff-8211-4038950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ms.winibmhelp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c74-e1b4-4793-bdac-4eaa950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'msc.kr-mail.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c74-8cd0-4ef4-9b14-4919950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'msn.catalogipdate.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c74-f804-43f7-b0dd-424b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'murun.baatarhuu.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c74-3860-4a9d-bed9-41b0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'nangua.mongolbaatar.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c75-54a4-4384-b89b-4312950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'nars.baatarhuu.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c75-748c-40f7-9898-4437950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'nevergiveup.changeip.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c75-da2c-494f-b744-4cef950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'nevergiveup.changeip.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c75-a394-4f06-989d-4f5c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'news.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c75-302c-4850-adc8-4835950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'news.erenchag.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c75-a974-4ac3-82d2-454b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ngcc.8800.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c75-0ce0-4b9a-82a2-4d6d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'nkrme.flower-show.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c75-43dc-4b5a-90c3-42e7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'nod.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c75-86b8-451f-aa67-4e27950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ns.tobehemoth.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c75-87e0-4370-92fe-42d9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ns1.mg5-yahoo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c75-1c80-4ecd-a0cd-43a1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ns1.mol-government.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c76-2868-4528-8ec0-4f78950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ns1.tobehemoth.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c76-6c10-4694-9d95-4fa4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ns2.mg5-yahoo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c76-da60-4d90-8e1c-4a71950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ns2.mol-government.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c76-8224-4a73-90d0-4e5b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ns2.tobehemoth.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c76-8a54-4143-8463-4443950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ns3.mol-government.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c76-07a4-4f9f-8230-44c3950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ns3.oprea.biz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c76-4ccc-4299-ae93-4da8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ntuedu-tw.dnset.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c76-a4e0-481c-9161-4892950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'odbcinit.winibmhelp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c76-bdb0-4b11-96b8-4600950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'office-save.mefound.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c76-1d0c-46e9-9147-4fce950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'once.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c76-e540-413b-b74f-4a86950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'peaceful.linkpc.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c77-81c4-4004-af60-4fc0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'pen.abacocafe.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c77-9114-43af-908c-44ec950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'pens.abacocafe.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c77-06fc-4ff3-bfd9-42bf950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'pop.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c77-bc50-4422-8022-4f85950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ppt.bodologetee.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c77-62a4-42c7-8416-4382950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'qinetiq.officeskyline.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c77-24dc-44a5-84d6-4b7e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'qnao.officeskyline.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c77-9fc8-49a9-81c9-4c6e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'reader.bluewinnt.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c77-c904-48ad-9b09-4a3b950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'rfa.bacguarp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c77-94f0-4bde-bed7-4b05950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'rose.officeskyline.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c77-974c-4ac5-a49c-4b8a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'safebyeak.flower-show.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c77-674c-4ad8-b3af-45c4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'saiyo.exprenum.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c78-33a8-49c8-b662-4558950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'scrlk.exprenum.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c78-91f4-4b07-a9a2-480f950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'send.have8000.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c78-3b54-4098-aac7-4e83950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'services.darkhero.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c78-b4a0-4f85-a0c3-426d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'share.accountingrecovery.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c78-a4bc-43d1-aafe-4150950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'sky.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c78-60a0-4a58-9080-4bdc950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'sky.oldbmwy.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c78-fdd4-4340-a66c-43f1950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'smart.jobcall.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c78-be64-4645-9902-4706950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'smtp.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c78-4414-40bd-b9bc-498e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'smtp.tendgroup.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c78-9070-4ff3-8841-42d8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'sputatrix.justdied.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c78-8d68-4075-83f2-4d70950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'start.usrobothome.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c79-6918-46eb-a371-413a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'sub0000527246.hmk-temp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c79-c614-4c6f-94ac-4027950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'submarine.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c79-15dc-4828-80f2-42de950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'syesv.qpoe.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c79-47f4-45d1-9bc3-40e5950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'systen.windowsdeupdate.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c79-2ffc-448a-86cf-4779950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'sz5.bluewinnt.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c79-2060-4dd9-bb98-4733950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'task.mol-government.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c79-94dc-43b5-8c21-4fac950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'tastfine.seablow.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c79-9390-4f51-ae17-46b7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'times.bacguarp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c79-453c-4eab-b568-4b07950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'tkuedu-tw.4pu.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c79-e324-4deb-ac94-4f43950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'tongji.ath.cx']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c79-1da0-4f82-a4fa-44f6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'transtop.dynalias.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7a-22e4-44d2-aaf0-4053950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'trendmicro-update.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7a-1e34-4507-9a3e-4784950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'tw.2012yearleft.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7a-78ec-485e-ae64-4609950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'udp.jjevil.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7a-8f9c-42e3-95cc-4475950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'udp.vip-webmail.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7a-c8a8-4766-bf00-43ad950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'ui.hdcdui.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7a-db80-4d5d-a7fa-4d55950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'update.downloadsite.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7a-6a88-4a7a-9d00-49d4950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'usa.dnsrd.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7a-cea4-4fd0-a80a-4f5d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'usa.regionfocus.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7a-2a64-44d8-9487-4f0a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'uscom.kr-mail.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7a-6c40-4392-a703-4cf5950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'uscom.wsafelogin.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7a-e074-488b-9413-4077950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'utz.winntupdate.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7b-1aa8-40f5-b4af-442d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'uulaa.baatarhuu.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7b-e208-4b8c-9722-40c3950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'vip.kavupdate.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7b-e7fc-4e2a-b77c-4276950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'vpen.abacocafe.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7b-41a0-4291-b749-4e7e950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'web.bacguarp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7b-08c4-4a5b-96a8-45c6950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'web.zuesinfo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7b-ec18-419c-b2ce-437a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'weile3322b.3322.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7b-3c30-44b8-9b2f-4ee8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'wmi.ns01.us']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7b-2c10-4e20-a4ca-4659950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www.4sxdy.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7b-8bac-4f7d-8f63-441a950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www.bluewinnt.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7b-3b3c-4601-8c04-4a20950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www.flyeagles.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7b-d710-4c11-91f1-4e80950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www.gikui.us']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7c-60c0-4a09-bdef-4edf950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www.kreamnnd.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7c-d870-4463-b8a8-452d950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www.mofamails.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7c-caa4-47af-8088-4017950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www.opointcn.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7c-8704-48be-acc4-4e72950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www.savagecounty.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7c-000c-4d0b-be46-45c7950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www.sqwm.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7c-fd18-42fd-8579-45d9950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www.sumba.freetcp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7c-09e4-4856-87c9-43e0950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www.tendgroup.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7c-706c-4c3c-a9ac-4d03950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www.trendmicro-update.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7c-473c-4397-97bb-4eae950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www.twitterdocs.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7c-9d98-402c-9600-442c950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www1.molnews.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7c-8e8c-4fe3-970b-4234950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'www2.molnews.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7d-ec7c-4851-8939-4d89950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'wwzzsh.3322.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--54c76c7d-8fb0-40bb-b4a2-45f8950d210b",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2015-01-27T10:46:53.000Z",
|
|
"modified": "2015-01-27T10:46:53.000Z",
|
|
"pattern": "[domain-name:value = 'yy.lenovoxp.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2015-01-27T10:46:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d10-a2f4-4874-82de-599d950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:32.000Z",
|
|
"modified": "2016-02-18T23:00:32.000Z",
|
|
"description": "Automatically added (via a927dbfa5e712349c41367930154abbab8749aa8e30355b4386ef4ba65335879)",
|
|
"pattern": "[file:hashes.MD5 = '3251338f5a23ed93d8b98a5426b200e3']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:32Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d14-aed4-4582-b465-4a48950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:36.000Z",
|
|
"modified": "2016-02-18T23:00:36.000Z",
|
|
"description": "Automatically added (via 991a2a75e18a2421cf9f887a4fe83d132de6ab73c15b97bd030b8d6037591b1a)",
|
|
"pattern": "[file:hashes.MD5 = '51c244ce48794f5a52a53682510a3ffb']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:36Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d15-45ac-41d5-8ac2-c654950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:37.000Z",
|
|
"modified": "2016-02-18T23:00:37.000Z",
|
|
"description": "Automatically added (via 82c49e96a8f625059084a7519be94fb67c7581a8ea5f39c08c77943abb719fc2)",
|
|
"pattern": "[file:hashes.MD5 = '665bde46f3bcb7d4b447e8f4da52138f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:37Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d17-1f68-4239-b9c6-c652950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:39.000Z",
|
|
"modified": "2016-02-18T23:00:39.000Z",
|
|
"description": "Automatically added (via 861b0fc01cf05c8556fb2037b6e1f59b6ca9f4f69a93b0aa8c477c53aa13d1b2)",
|
|
"pattern": "[file:hashes.MD5 = '49bec945e990e764f39d5109367c5470']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:39Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d19-0c48-478c-8656-46bc950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:41.000Z",
|
|
"modified": "2016-02-18T23:00:41.000Z",
|
|
"description": "Automatically added (via abce952d75a4ffa93a42dcce883b48ee85cd574793feac0b1442d5b990ea822d)",
|
|
"pattern": "[file:hashes.MD5 = '7995a9a6a889b914e208eb924e459ebc']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:41Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d1b-56c0-46bd-ae16-5f51950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:43.000Z",
|
|
"modified": "2016-02-18T23:00:43.000Z",
|
|
"description": "Automatically added (via fe4985b13b2270c0e71a2c0755a22c17bba968ac66b94899fe6dccc22aacbd54)",
|
|
"pattern": "[file:hashes.MD5 = '1abbd53263fffaa8d97ccc67f5b3dea1']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:43Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d1d-ab18-4ebe-863e-599f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:45.000Z",
|
|
"modified": "2016-02-18T23:00:45.000Z",
|
|
"description": "Automatically added (via 65bbf0bd8c6e1ccdb60cf646d7084e1452cb111d97d21d6e8117b1944f3dc71e)",
|
|
"pattern": "[file:hashes.MD5 = '7cffd679599fb8579abae8f32ce49026']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:45Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d1f-ac70-468d-9397-599c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:47.000Z",
|
|
"modified": "2016-02-18T23:00:47.000Z",
|
|
"description": "Automatically added (via 4d464f9def2276dac15d19ccf049b7c68642290bc0e345e06d4b6e9103fde9e6)",
|
|
"pattern": "[file:hashes.MD5 = '4dd49174d6bc559105383bdf8bf0e234']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:47Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d22-ebc8-4677-b868-4094950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:50.000Z",
|
|
"modified": "2016-02-18T23:00:50.000Z",
|
|
"description": "Automatically added (via 2afa3a7f029f857ed0cda12e84ed4b51f41fba3e320f2d5f4d51c88685c5de11)",
|
|
"pattern": "[file:hashes.MD5 = '2385b332637dd37e4e5c79a1fed46171']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:50Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d24-d140-4280-b154-599e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:52.000Z",
|
|
"modified": "2016-02-18T23:00:52.000Z",
|
|
"description": "Automatically added (via 647f5f3cc8b07f3f87e4c8ae6f63bd843f8c97d86917f4501dd3e0fcf1649c95)",
|
|
"pattern": "[file:hashes.MD5 = '53482711d0d7f3e03beaa1cbb2a48570']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:52Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d26-2c44-449b-a161-c651950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:54.000Z",
|
|
"modified": "2016-02-18T23:00:54.000Z",
|
|
"description": "Automatically added (via 30a0ac4f02caf9acc6b29a1e9419352a56be9d84d1b534389cf3391b19868347)",
|
|
"pattern": "[file:hashes.MD5 = '065cb47a3807b5409f74d48372143ec4']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:54Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d27-dffc-45ed-bc8e-599e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:55.000Z",
|
|
"modified": "2016-02-18T23:00:55.000Z",
|
|
"description": "Automatically added (via 9cb2b1a45e2e427e73b6decc9cbe76790877b052d6053ef90c1dd42d0aab7abc)",
|
|
"pattern": "[file:hashes.MD5 = 'cc1a806d25982acdb35dd196ab8171bc']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:55Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d2a-2f44-46ac-a396-5f51950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:58.000Z",
|
|
"modified": "2016-02-18T23:00:58.000Z",
|
|
"description": "Automatically added (via 445288ad6d9b7b2c11bd572bc87d248146274502a0557cabf63a89d58869f581)",
|
|
"pattern": "[file:hashes.MD5 = 'cb304d97fa661a7d44b5cd12fb80dc5c']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:58Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d2b-65cc-4b15-880d-59a1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:59.000Z",
|
|
"modified": "2016-02-18T23:00:59.000Z",
|
|
"description": "Automatically added (via 6895c0875c627401d00857d426ad9f222075d5ff5f0a217e9de91424a777acdc)",
|
|
"pattern": "[file:hashes.MD5 = 'bdc7240e8a4ee25b80c168e3a621c76b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:59Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d2e-4404-49d0-b11d-c651950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:02.000Z",
|
|
"modified": "2016-02-18T23:01:02.000Z",
|
|
"description": "Automatically added (via 3356b9dea77d333af9b7c4ac72a3433a9ee4b74f34e84ccdb26c56a53609fd85)",
|
|
"pattern": "[file:hashes.MD5 = 'fd3892d53e432f0e3c50530fa8b9bd96']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:02Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d30-ebc0-4e02-8781-4c8d950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:04.000Z",
|
|
"modified": "2016-02-18T23:01:04.000Z",
|
|
"description": "Automatically added (via 881359a2e2d0294f639caf19336d16c6c6447cbfb778b669ccdf3ffba61a1d04)",
|
|
"pattern": "[file:hashes.MD5 = '4ad3eb346331c646e92474a17673f389']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:04Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d32-8d78-48bd-81b7-59a4950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:06.000Z",
|
|
"modified": "2016-02-18T23:01:06.000Z",
|
|
"description": "Automatically added (via c6b74ff3409dd91f62677e4da52f77a2810c539a161efb768e86ad31f9500e10)",
|
|
"pattern": "[file:hashes.MD5 = '18310fcabac68bcd3d11aff4ff3ace0e']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:06Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d34-4f84-4186-a080-5ca1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:08.000Z",
|
|
"modified": "2016-02-18T23:01:08.000Z",
|
|
"description": "Automatically added (via cb93e86cbb7b048ef2f3607bc97225a03f0143424247913ad903dedadcaebc57)",
|
|
"pattern": "[file:hashes.MD5 = '5d40e86b09e6fe1dedbc87457a086d95']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:08Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d36-9dc8-4ecd-ad86-59a1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:10.000Z",
|
|
"modified": "2016-02-18T23:01:10.000Z",
|
|
"description": "Automatically added (via d85c72ad2016a5e1a858b5a1b67316873927e13f9ff52b8456852c5758736f26)",
|
|
"pattern": "[file:hashes.MD5 = '87d883bd633249dbf1f23ed0606d42b2']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:10Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d38-c0cc-4e86-9685-5f51950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:12.000Z",
|
|
"modified": "2016-02-18T23:01:12.000Z",
|
|
"description": "Automatically added (via 2bc5ce39dd9afe2157448d3f6d8cb9c549ed39543d159616e38480b9e6c11c49)",
|
|
"pattern": "[file:hashes.MD5 = 'f1f48360f95e1b43e9fba0fec5a2afb8']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:12Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d3a-b9bc-4ec5-8f2a-599c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:14.000Z",
|
|
"modified": "2016-02-18T23:01:14.000Z",
|
|
"description": "Automatically added (via e1cdada171022961c25a58783403e7dac07968514dace472bd4e82fe60d6fa35)",
|
|
"pattern": "[file:hashes.MD5 = '01123b7af292abcd9a271607607d10a4']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:14Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d3c-e670-4175-b0db-599f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:16.000Z",
|
|
"modified": "2016-02-18T23:01:16.000Z",
|
|
"description": "Automatically added (via 4e96d174595200929d5e4c6ba64b5cc13a03c7c606534ce32fe007abbb0d9355)",
|
|
"pattern": "[file:hashes.MD5 = '0fd64a4dbdf29370c584e9f00bf3a00d']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:16Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d3e-93d4-4f11-906f-599c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:18.000Z",
|
|
"modified": "2016-02-18T23:01:18.000Z",
|
|
"description": "Automatically added (via de09b7ae5e1899b04bddb8476ccd8f0633ed244f0b9875b14881b93d820a6396)",
|
|
"pattern": "[file:hashes.MD5 = 'f9ec0685d3e9409e7db924ce3e3379bf']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:18Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d40-741c-4696-9d49-59a3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:20.000Z",
|
|
"modified": "2016-02-18T23:01:20.000Z",
|
|
"description": "Automatically added (via b5b625c18f9cdc53ea080a1726cf7222f6f8578849481f5a44bcfae4283af283)",
|
|
"pattern": "[file:hashes.MD5 = '1a0dd6fb8d0787e3ee0efdb4f2e6adfc']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:20Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d42-f9d8-4246-85a5-59a1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:22.000Z",
|
|
"modified": "2016-02-18T23:01:22.000Z",
|
|
"description": "Automatically added (via 2cae4c0cd1e7d7a87d6a10735970dafc50344df3042957c00bbc0cce1d02a602)",
|
|
"pattern": "[file:hashes.MD5 = '003050c19425afa2393c13207595fa98']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:22Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d45-75b8-4d2e-8388-59a4950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:25.000Z",
|
|
"modified": "2016-02-18T23:01:25.000Z",
|
|
"description": "Automatically added (via 96c577a5e2d09d297e8527b3bf2a0d8fafdc922884a7924d7339663b92af37cf)",
|
|
"pattern": "[file:hashes.MD5 = 'c830330cf220ce4f1223fbfe1299037f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:25Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d47-1d9c-45c8-876f-59a0950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:27.000Z",
|
|
"modified": "2016-02-18T23:01:27.000Z",
|
|
"description": "Automatically added (via dfd13c1d72399bae6ce3910e269e45f9bc717de605e64dff326c86172c4d5a98)",
|
|
"pattern": "[file:hashes.MD5 = '423eaeff2a4576365343e6dc35d22042']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:27Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d49-53ec-4069-bf30-c652950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:29.000Z",
|
|
"modified": "2016-02-18T23:01:29.000Z",
|
|
"description": "Automatically added (via 166b489bea58e877a8f97eac6c9ef6d5db08dd5ff87392657f8400a608dda6b1)",
|
|
"pattern": "[file:hashes.MD5 = 'bd2a82de57dc03e0a52e5f562b29e67d']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:29Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d4b-5ed8-4456-8182-c651950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:31.000Z",
|
|
"modified": "2016-02-18T23:01:31.000Z",
|
|
"description": "Automatically added (via f88660de3151900ccf25bc11fc24de17e0d40128a1aff73c561c9cb4a559cac6)",
|
|
"pattern": "[file:hashes.MD5 = 'fb7a06dc4666e38dc90e9753d162c233']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:31Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d4d-03c8-4f96-87eb-59a0950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:33.000Z",
|
|
"modified": "2016-02-18T23:01:33.000Z",
|
|
"description": "Automatically added (via a3c4cb110064086fd7491d9cf5ffd7552384916c92effca20c8b16dfc625f37b)",
|
|
"pattern": "[file:hashes.MD5 = 'b9501109bd94ac243f22aec5aca65ace']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d4f-8240-4949-aa38-5ca1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:35.000Z",
|
|
"modified": "2016-02-18T23:01:35.000Z",
|
|
"description": "Automatically added (via c729089055c1b2e0e13627878e9aaa319198c9f70fb247fc7d52e4071b4cd067)",
|
|
"pattern": "[file:hashes.MD5 = '06599db803bd96764941d65b643c91d3']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:35Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d53-719c-4f90-ae57-5f51950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:39.000Z",
|
|
"modified": "2016-02-18T23:01:39.000Z",
|
|
"description": "Automatically added (via a003c5353c9abb01ca9a243bca467b4e9f6067c88471924d5f800fc10b3dc59b)",
|
|
"pattern": "[file:hashes.MD5 = 'c9091a86efb69acdd3de3155c367b64f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:39Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d55-5ad8-40fc-b370-599e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:41.000Z",
|
|
"modified": "2016-02-18T23:01:41.000Z",
|
|
"description": "Automatically added (via 616ab9849512d35a9612e3c7f976a0517eaf18301650d977d4ea8a0c1d7b9ae9)",
|
|
"pattern": "[file:hashes.MD5 = 'e3a7f12a699db2016f8b8f438e2bf7ff']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:41Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d57-8e68-4d5f-917e-59a3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:43.000Z",
|
|
"modified": "2016-02-18T23:01:43.000Z",
|
|
"description": "Automatically added (via 9bfcaeb45cf9f1d661871013d4c387462186fff3447a63b3e653c0df70855e96)",
|
|
"pattern": "[file:hashes.MD5 = '06330ecba94bd0502217fe9fd3691926']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:43Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d59-0664-40a1-9fc5-c651950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:45.000Z",
|
|
"modified": "2016-02-18T23:01:45.000Z",
|
|
"description": "Automatically added (via b6999f03c228e11601d09055fccbd8513c0fb596ab24c10b0c7c33f7c60b7665)",
|
|
"pattern": "[file:hashes.MD5 = '9f8a401c43d8a2dbe4e4e52a05c27670']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:45Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d5b-a3e8-48f6-a248-494b950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:47.000Z",
|
|
"modified": "2016-02-18T23:01:47.000Z",
|
|
"description": "Automatically added (via 8865387f29f8603ef4e74d2ab25afb74f2725266b03991d2cc0e7d9316a460de)",
|
|
"pattern": "[file:hashes.MD5 = '1ba0a8c406ca183418bd787b990dbfb6']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:47Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d5e-5184-41b7-98c9-59a3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:50.000Z",
|
|
"modified": "2016-02-18T23:01:50.000Z",
|
|
"description": "Automatically added (via c6dffd8891d2f5fb843133e5716f330774b8ca48b4954dbff57e0d2a89406a59)",
|
|
"pattern": "[file:hashes.MD5 = 'c40725093db8cbf16073f169a19922a9']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:50Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d60-5ed4-4aec-a32a-599e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:52.000Z",
|
|
"modified": "2016-02-18T23:01:52.000Z",
|
|
"description": "Automatically added (via 257023f2b2082f016265070291e1eb926f3107907e1528455cbc53c573d9cbb3)",
|
|
"pattern": "[file:hashes.MD5 = '3861e38b4c224818021d03fd88221f96']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:52Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d61-6644-4bf8-a9e5-599c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:53.000Z",
|
|
"modified": "2016-02-18T23:01:53.000Z",
|
|
"description": "Automatically added (via 555952aa5bcca4fa5ad5a7269fece99b1a04816d104ecd8aefabaa1435f65fa5)",
|
|
"pattern": "[file:hashes.MD5 = 'f7a842eb1364d1269b40a344510068e8']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d64-ee78-4db2-891b-599e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:56.000Z",
|
|
"modified": "2016-02-18T23:01:56.000Z",
|
|
"description": "Automatically added (via e1b91899c1233a933caaf62f17338677eda79522daba41856d1e23f2d0bd625d)",
|
|
"pattern": "[file:hashes.MD5 = '6ecda565ef63d21c04918d1751ebb66e']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:56Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d66-a9f0-42bb-a7c4-44aa950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:58.000Z",
|
|
"modified": "2016-02-18T23:01:58.000Z",
|
|
"description": "Automatically added (via 0576bc326b3ece524867e2c9b3feff1d0a4f02a36e375a3e7b0e11b2fafc5629)",
|
|
"pattern": "[file:hashes.MD5 = 'add667cd78babe649da86e198496f4f6']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:58Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d68-fef4-40e2-8916-c651950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:00.000Z",
|
|
"modified": "2016-02-18T23:02:00.000Z",
|
|
"description": "Automatically added (via 5dccc1a35857cb3ea2107fae171afd228c0c25da426c160c09b98c6686666966)",
|
|
"pattern": "[file:hashes.MD5 = '2ed8e96f1bb15f2cf413ce37a5c45dea']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:00Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d6a-78ec-4e87-8de6-599e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:02.000Z",
|
|
"modified": "2016-02-18T23:02:02.000Z",
|
|
"description": "Automatically added (via 66bca3f92841b7bffae4d27c3ddb5adbf8084ad40ee0edda1edc1d25f5e1b967)",
|
|
"pattern": "[file:hashes.MD5 = '3c74a85c2cf883bd9d4b9f8b9746030f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:02Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d6b-c0a0-4f44-ab0c-c652950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:03.000Z",
|
|
"modified": "2016-02-18T23:02:03.000Z",
|
|
"description": "Automatically added (via 67c29f047285a0401afa8cd1167344031b375fa0b11a79ce746c0ca7fa1b8196)",
|
|
"pattern": "[file:hashes.MD5 = 'f057058fb19d2ef61a95396886f13339']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:03Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d6d-edac-4ebe-9ede-c650950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:05.000Z",
|
|
"modified": "2016-02-18T23:02:05.000Z",
|
|
"description": "Automatically added (via 10e20e496b4ea73c3ac656304d6add6c234a045640eb0a54b88aeb68c6c08751)",
|
|
"pattern": "[file:hashes.MD5 = 'd39199965148bff974ec1848356665ff']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:05Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d6f-8800-46e8-b6d7-59a0950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:07.000Z",
|
|
"modified": "2016-02-18T23:02:07.000Z",
|
|
"description": "Automatically added (via 2a8d18a59cd648637deb830079b460008d81411681f0eb41dc327c3f447326f6)",
|
|
"pattern": "[file:hashes.MD5 = 'cc7b091b94c4f0641b180417b017fec2']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:07Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d71-70a0-48c8-bc20-4970950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:09.000Z",
|
|
"modified": "2016-02-18T23:02:09.000Z",
|
|
"description": "Automatically added (via 90a5c1c5dc2278063478fbc8f2ac072ccf0489d7b3f81a6ed35b7d712b4b7b84)",
|
|
"pattern": "[file:hashes.MD5 = 'c116cd083284cc599c024c3479ca9b70']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:09Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d74-cab8-49e4-820d-c652950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:12.000Z",
|
|
"modified": "2016-02-18T23:02:12.000Z",
|
|
"description": "Automatically added (via c5d23f066a4f51149211caecae50c6f602a520557bdb441e787bc4506217bb32)",
|
|
"pattern": "[file:hashes.MD5 = 'fd3fda25453d8bae7ba89442b6c47300']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:12Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d77-3fe8-4701-9c90-4c77950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:15.000Z",
|
|
"modified": "2016-02-18T23:02:15.000Z",
|
|
"description": "Automatically added (via bf630442adaced2410a6f1962d76f3f8948a5a810d92001bb11f09aa1d01f9ac)",
|
|
"pattern": "[file:hashes.MD5 = '7de15482671a5bbc54087b9731711a59']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:15Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d0b-ddfc-481d-b562-c650950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:27.000Z",
|
|
"modified": "2016-02-18T23:00:27.000Z",
|
|
"description": "Automatically added (via b0eeca383a7477ee689ec807b775ebbb)",
|
|
"pattern": "[file:hashes.SHA1 = 'a1eaccd9f29406a05aa444eb628a5688c6b7bc10']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:27Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d0d-a12c-4db3-b0ba-59a1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:29.000Z",
|
|
"modified": "2016-02-18T23:00:29.000Z",
|
|
"description": "Automatically added (via 5b90896127179f0ad2e6628593cdb60d)",
|
|
"pattern": "[file:hashes.SHA1 = 'dab0b5e5c71669834627975ab95587963c1a41a1']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:29Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d11-9f58-4ca7-add7-5f51950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:33.000Z",
|
|
"modified": "2016-02-18T23:00:33.000Z",
|
|
"description": "Automatically added (via a927dbfa5e712349c41367930154abbab8749aa8e30355b4386ef4ba65335879)",
|
|
"pattern": "[file:hashes.SHA1 = '0713d8ed672d7d652e2960251a0a4fa4b5c51f71']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d15-bc48-41bb-b271-471b950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:37.000Z",
|
|
"modified": "2016-02-18T23:00:37.000Z",
|
|
"description": "Automatically added (via 991a2a75e18a2421cf9f887a4fe83d132de6ab73c15b97bd030b8d6037591b1a)",
|
|
"pattern": "[file:hashes.SHA1 = '17def0cbb51e0d6da5e592eb5cb3786e90ad75df']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:37Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d16-8d30-4f45-a249-599f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:38.000Z",
|
|
"modified": "2016-02-18T23:00:38.000Z",
|
|
"description": "Automatically added (via 82c49e96a8f625059084a7519be94fb67c7581a8ea5f39c08c77943abb719fc2)",
|
|
"pattern": "[file:hashes.SHA1 = '3058b005c3ca1dda71ac2a274fde6b413684ee9f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:38Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d18-870c-41e6-847a-5ca1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:40.000Z",
|
|
"modified": "2016-02-18T23:00:40.000Z",
|
|
"description": "Automatically added (via 861b0fc01cf05c8556fb2037b6e1f59b6ca9f4f69a93b0aa8c477c53aa13d1b2)",
|
|
"pattern": "[file:hashes.SHA1 = 'b2800950ab653dc71dc32dbae3e4639b8386c6cb']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:40Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d1a-8e84-46c0-a8bf-c651950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:42.000Z",
|
|
"modified": "2016-02-18T23:00:42.000Z",
|
|
"description": "Automatically added (via abce952d75a4ffa93a42dcce883b48ee85cd574793feac0b1442d5b990ea822d)",
|
|
"pattern": "[file:hashes.SHA1 = '1a725d3168c2d9a1f23d8ec6d757085ac49d8b0e']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:42Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d1c-b894-4b8a-9689-59a4950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:44.000Z",
|
|
"modified": "2016-02-18T23:00:44.000Z",
|
|
"description": "Automatically added (via fe4985b13b2270c0e71a2c0755a22c17bba968ac66b94899fe6dccc22aacbd54)",
|
|
"pattern": "[file:hashes.SHA1 = '107e48a8c4cbbd1738b96984e2105c37ece4c1ae']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:44Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d1e-4154-4352-96d9-4317950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:46.000Z",
|
|
"modified": "2016-02-18T23:00:46.000Z",
|
|
"description": "Automatically added (via 65bbf0bd8c6e1ccdb60cf646d7084e1452cb111d97d21d6e8117b1944f3dc71e)",
|
|
"pattern": "[file:hashes.SHA1 = '8273be8d8666b8577bb7feb0d1134cbff199446f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:46Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d20-010c-4c1b-a086-59a1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:48.000Z",
|
|
"modified": "2016-02-18T23:00:48.000Z",
|
|
"description": "Automatically added (via 4d464f9def2276dac15d19ccf049b7c68642290bc0e345e06d4b6e9103fde9e6)",
|
|
"pattern": "[file:hashes.SHA1 = 'f0c0975f349f12cdbd39e00b151df07cd82ecf7d']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:48Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d23-3954-4853-bdcf-c652950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:51.000Z",
|
|
"modified": "2016-02-18T23:00:51.000Z",
|
|
"description": "Automatically added (via 2afa3a7f029f857ed0cda12e84ed4b51f41fba3e320f2d5f4d51c88685c5de11)",
|
|
"pattern": "[file:hashes.SHA1 = '3bdc175c25ecdd92df085dcae958ca95400a1c96']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:51Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d25-0e2c-4d2e-8671-59a1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:53.000Z",
|
|
"modified": "2016-02-18T23:00:53.000Z",
|
|
"description": "Automatically added (via 647f5f3cc8b07f3f87e4c8ae6f63bd843f8c97d86917f4501dd3e0fcf1649c95)",
|
|
"pattern": "[file:hashes.SHA1 = '7fb7d7fa654e24e6ca2ef00f83788576dd531ea9']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d26-9d80-4051-bedc-59a2950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:54.000Z",
|
|
"modified": "2016-02-18T23:00:54.000Z",
|
|
"description": "Automatically added (via 30a0ac4f02caf9acc6b29a1e9419352a56be9d84d1b534389cf3391b19868347)",
|
|
"pattern": "[file:hashes.SHA1 = 'ace2a75a17cac8c188757af4c9ffb8f8eeee47d0']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:54Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d28-26d8-4e56-a510-599f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:56.000Z",
|
|
"modified": "2016-02-18T23:00:56.000Z",
|
|
"description": "Automatically added (via 9cb2b1a45e2e427e73b6decc9cbe76790877b052d6053ef90c1dd42d0aab7abc)",
|
|
"pattern": "[file:hashes.SHA1 = '5a5069896cdc60d869a6421aa3b80af48da5e17f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:56Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d2b-5a10-45db-82f0-599c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:58.000Z",
|
|
"modified": "2016-02-18T23:00:58.000Z",
|
|
"description": "Automatically added (via 445288ad6d9b7b2c11bd572bc87d248146274502a0557cabf63a89d58869f581)",
|
|
"pattern": "[file:hashes.SHA1 = '05c11ea66d0c9972e59bfabc704f446ebe305489']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:58Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d2c-1584-410d-a0a1-599f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:00.000Z",
|
|
"modified": "2016-02-18T23:01:00.000Z",
|
|
"description": "Automatically added (via 6895c0875c627401d00857d426ad9f222075d5ff5f0a217e9de91424a777acdc)",
|
|
"pattern": "[file:hashes.SHA1 = 'fa6a3f8dacb4fb23c1cc5718598c20ddd96f6c58']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:00Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d2f-9fc0-4ced-8f7b-c652950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:03.000Z",
|
|
"modified": "2016-02-18T23:01:03.000Z",
|
|
"description": "Automatically added (via 3356b9dea77d333af9b7c4ac72a3433a9ee4b74f34e84ccdb26c56a53609fd85)",
|
|
"pattern": "[file:hashes.SHA1 = '7d1af9e7ea5d1937b8cfab641732b33f85524bd8']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:03Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d31-9eb8-404c-8c71-599c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:05.000Z",
|
|
"modified": "2016-02-18T23:01:05.000Z",
|
|
"description": "Automatically added (via 881359a2e2d0294f639caf19336d16c6c6447cbfb778b669ccdf3ffba61a1d04)",
|
|
"pattern": "[file:hashes.SHA1 = 'ee458e927ae71f55d630c951b56001ead817ba4b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:05Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d33-1184-491b-ae00-59a3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:07.000Z",
|
|
"modified": "2016-02-18T23:01:07.000Z",
|
|
"description": "Automatically added (via c6b74ff3409dd91f62677e4da52f77a2810c539a161efb768e86ad31f9500e10)",
|
|
"pattern": "[file:hashes.SHA1 = 'ea39d9f911b85a2b939716d6770981d764b481cc']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:07Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d35-c4b8-4949-b9c1-599e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:09.000Z",
|
|
"modified": "2016-02-18T23:01:09.000Z",
|
|
"description": "Automatically added (via cb93e86cbb7b048ef2f3607bc97225a03f0143424247913ad903dedadcaebc57)",
|
|
"pattern": "[file:hashes.SHA1 = '14b7ecfd65aeb5254da9a4bb8f24e3549f42eba6']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:09Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d37-0224-4b54-839a-59a4950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:11.000Z",
|
|
"modified": "2016-02-18T23:01:11.000Z",
|
|
"description": "Automatically added (via d85c72ad2016a5e1a858b5a1b67316873927e13f9ff52b8456852c5758736f26)",
|
|
"pattern": "[file:hashes.SHA1 = '54bfd86fa7fc93f9eb8c0a3a2e9d2200e63b91a4']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:11Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d39-efd8-4e74-bc9f-59a3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:13.000Z",
|
|
"modified": "2016-02-18T23:01:13.000Z",
|
|
"description": "Automatically added (via 2bc5ce39dd9afe2157448d3f6d8cb9c549ed39543d159616e38480b9e6c11c49)",
|
|
"pattern": "[file:hashes.SHA1 = '70ceb467db7b0161d22e4545479f747417b9705a']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:13Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d3a-4d18-4ca8-b5ef-59a1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:14.000Z",
|
|
"modified": "2016-02-18T23:01:14.000Z",
|
|
"description": "Automatically added (via e1cdada171022961c25a58783403e7dac07968514dace472bd4e82fe60d6fa35)",
|
|
"pattern": "[file:hashes.SHA1 = '44a566b95ec0a90ba76fe419006587e26ea51a2d']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:14Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d3d-ef80-45a4-9005-5ca1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:17.000Z",
|
|
"modified": "2016-02-18T23:01:17.000Z",
|
|
"description": "Automatically added (via 4e96d174595200929d5e4c6ba64b5cc13a03c7c606534ce32fe007abbb0d9355)",
|
|
"pattern": "[file:hashes.SHA1 = '09926db7db51ef1b63fdf0b2ace99dede47d7940']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:17Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d3f-40a4-41d0-a10e-c651950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:19.000Z",
|
|
"modified": "2016-02-18T23:01:19.000Z",
|
|
"description": "Automatically added (via de09b7ae5e1899b04bddb8476ccd8f0633ed244f0b9875b14881b93d820a6396)",
|
|
"pattern": "[file:hashes.SHA1 = '8c7b00cc7a603005a1deb89129e500e797585655']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:19Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d41-ccfc-421b-86e8-4e4e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:21.000Z",
|
|
"modified": "2016-02-18T23:01:21.000Z",
|
|
"description": "Automatically added (via b5b625c18f9cdc53ea080a1726cf7222f6f8578849481f5a44bcfae4283af283)",
|
|
"pattern": "[file:hashes.SHA1 = 'bd6ed78dc5bb5667e676815fa978622fde10b051']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:21Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d43-a4e0-470d-b727-c650950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:23.000Z",
|
|
"modified": "2016-02-18T23:01:23.000Z",
|
|
"description": "Automatically added (via 2cae4c0cd1e7d7a87d6a10735970dafc50344df3042957c00bbc0cce1d02a602)",
|
|
"pattern": "[file:hashes.SHA1 = '1cdd57c885df4f02742f8a3cd345d37f9b9f595c']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:23Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d46-2668-4fdc-ac13-5f51950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:26.000Z",
|
|
"modified": "2016-02-18T23:01:26.000Z",
|
|
"description": "Automatically added (via 96c577a5e2d09d297e8527b3bf2a0d8fafdc922884a7924d7339663b92af37cf)",
|
|
"pattern": "[file:hashes.SHA1 = 'fab4e8b53569ba8c667619adb7f8e39fee889033']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:26Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d48-1ac0-493e-a890-59a2950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:28.000Z",
|
|
"modified": "2016-02-18T23:01:28.000Z",
|
|
"description": "Automatically added (via dfd13c1d72399bae6ce3910e269e45f9bc717de605e64dff326c86172c4d5a98)",
|
|
"pattern": "[file:hashes.SHA1 = 'bc77c055ad1fcc6c9bd02b3606ec3c4587d87623']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d4a-af4c-4089-bb27-599f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:30.000Z",
|
|
"modified": "2016-02-18T23:01:30.000Z",
|
|
"description": "Automatically added (via 166b489bea58e877a8f97eac6c9ef6d5db08dd5ff87392657f8400a608dda6b1)",
|
|
"pattern": "[file:hashes.SHA1 = '042f9b7479504a7b44c84e4e91b94a53fdff2ba2']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:30Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d4c-9328-411e-be0e-c653950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:32.000Z",
|
|
"modified": "2016-02-18T23:01:32.000Z",
|
|
"description": "Automatically added (via f88660de3151900ccf25bc11fc24de17e0d40128a1aff73c561c9cb4a559cac6)",
|
|
"pattern": "[file:hashes.SHA1 = 'ed74f3db5fdf010ae1a0f2458a844cee5f324af0']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:32Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d4e-c4c8-45f4-b92e-c654950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:34.000Z",
|
|
"modified": "2016-02-18T23:01:34.000Z",
|
|
"description": "Automatically added (via a3c4cb110064086fd7491d9cf5ffd7552384916c92effca20c8b16dfc625f37b)",
|
|
"pattern": "[file:hashes.SHA1 = 'b2b2a14983b13f966b3bfeb2ba33c3dd64a69ded']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:34Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d50-6d18-4906-a73c-599c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:36.000Z",
|
|
"modified": "2016-02-18T23:01:36.000Z",
|
|
"description": "Automatically added (via c729089055c1b2e0e13627878e9aaa319198c9f70fb247fc7d52e4071b4cd067)",
|
|
"pattern": "[file:hashes.SHA1 = '18b1102cae322efe1a4e379c9af93f2e0c2847bc']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:36Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d53-f368-407e-a27f-4399950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:39.000Z",
|
|
"modified": "2016-02-18T23:01:39.000Z",
|
|
"description": "Automatically added (via a003c5353c9abb01ca9a243bca467b4e9f6067c88471924d5f800fc10b3dc59b)",
|
|
"pattern": "[file:hashes.SHA1 = 'b3d4f08b7dd40b618a65f7994a688cc17222b7ef']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:39Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d56-c30c-4f43-9034-c654950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:42.000Z",
|
|
"modified": "2016-02-18T23:01:42.000Z",
|
|
"description": "Automatically added (via 616ab9849512d35a9612e3c7f976a0517eaf18301650d977d4ea8a0c1d7b9ae9)",
|
|
"pattern": "[file:hashes.SHA1 = '17f06425ec8cbebe6713439f5ae7b7672aad3713']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:42Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d57-f2bc-41a0-8da8-5f51950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:43.000Z",
|
|
"modified": "2016-02-18T23:01:43.000Z",
|
|
"description": "Automatically added (via 9bfcaeb45cf9f1d661871013d4c387462186fff3447a63b3e653c0df70855e96)",
|
|
"pattern": "[file:hashes.SHA1 = 'a48d071130976d966e4dd215370fd3b6f08afc96']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:43Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d5a-b904-4491-b18e-59a1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:46.000Z",
|
|
"modified": "2016-02-18T23:01:46.000Z",
|
|
"description": "Automatically added (via b6999f03c228e11601d09055fccbd8513c0fb596ab24c10b0c7c33f7c60b7665)",
|
|
"pattern": "[file:hashes.SHA1 = 'e5cf902d51b140a8768483a4970a0080e04f8995']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:46Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d5b-ae20-4b17-8a8b-c652950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:47.000Z",
|
|
"modified": "2016-02-18T23:01:47.000Z",
|
|
"description": "Automatically added (via 8865387f29f8603ef4e74d2ab25afb74f2725266b03991d2cc0e7d9316a460de)",
|
|
"pattern": "[file:hashes.SHA1 = '5c58e4811dff6cd7ba2dec220d08226898769704']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:47Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d5e-15cc-4fa0-beed-59a2950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:50.000Z",
|
|
"modified": "2016-02-18T23:01:50.000Z",
|
|
"description": "Automatically added (via c6dffd8891d2f5fb843133e5716f330774b8ca48b4954dbff57e0d2a89406a59)",
|
|
"pattern": "[file:hashes.SHA1 = '796da854a9ea54f0b9625b70bcd1613b8ae4a563']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:50Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d60-c2dc-4777-9714-59a0950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:52.000Z",
|
|
"modified": "2016-02-18T23:01:52.000Z",
|
|
"description": "Automatically added (via 257023f2b2082f016265070291e1eb926f3107907e1528455cbc53c573d9cbb3)",
|
|
"pattern": "[file:hashes.SHA1 = 'ac03daddc0c874a80616ee5826be2c28506f943d']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:52Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d62-e3ec-489d-a567-599f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:54.000Z",
|
|
"modified": "2016-02-18T23:01:54.000Z",
|
|
"description": "Automatically added (via 555952aa5bcca4fa5ad5a7269fece99b1a04816d104ecd8aefabaa1435f65fa5)",
|
|
"pattern": "[file:hashes.SHA1 = '009743fda0d47802bee85f627e8727f7216c464b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:54Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d64-3970-44d2-858a-59a4950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:56.000Z",
|
|
"modified": "2016-02-18T23:01:56.000Z",
|
|
"description": "Automatically added (via e1b91899c1233a933caaf62f17338677eda79522daba41856d1e23f2d0bd625d)",
|
|
"pattern": "[file:hashes.SHA1 = '191e917e900f30b15059f573f6951732693f44a1']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:56Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d67-0a38-4073-9388-c653950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:01:59.000Z",
|
|
"modified": "2016-02-18T23:01:59.000Z",
|
|
"description": "Automatically added (via 0576bc326b3ece524867e2c9b3feff1d0a4f02a36e375a3e7b0e11b2fafc5629)",
|
|
"pattern": "[file:hashes.SHA1 = 'cfece2e7cc95a0ed669c891561103f6a7f17a655']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:01:59Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d69-9698-4054-8248-c654950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:01.000Z",
|
|
"modified": "2016-02-18T23:02:01.000Z",
|
|
"description": "Automatically added (via 5dccc1a35857cb3ea2107fae171afd228c0c25da426c160c09b98c6686666966)",
|
|
"pattern": "[file:hashes.SHA1 = '56772b6e3f5e8f402651a743b988554cabd43874']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:01Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d6a-f758-4785-93b6-5ca1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:02.000Z",
|
|
"modified": "2016-02-18T23:02:02.000Z",
|
|
"description": "Automatically added (via 66bca3f92841b7bffae4d27c3ddb5adbf8084ad40ee0edda1edc1d25f5e1b967)",
|
|
"pattern": "[file:hashes.SHA1 = '40541a03e910b21df681bec69cfe59678ebba86c']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:02Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d6c-5298-4d2d-8082-c654950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:04.000Z",
|
|
"modified": "2016-02-18T23:02:04.000Z",
|
|
"description": "Automatically added (via 67c29f047285a0401afa8cd1167344031b375fa0b11a79ce746c0ca7fa1b8196)",
|
|
"pattern": "[file:hashes.SHA1 = 'd051d4329602fcb7134c51ff869abf4d5b9be99d']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:04Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d6e-f1d4-46e6-8adc-5ca1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:06.000Z",
|
|
"modified": "2016-02-18T23:02:06.000Z",
|
|
"description": "Automatically added (via 10e20e496b4ea73c3ac656304d6add6c234a045640eb0a54b88aeb68c6c08751)",
|
|
"pattern": "[file:hashes.SHA1 = '60e02915645ddfaa9ec4ec96c7433e839a32b995']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:06Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d70-7838-4e3a-98d8-c651950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:08.000Z",
|
|
"modified": "2016-02-18T23:02:08.000Z",
|
|
"description": "Automatically added (via 2a8d18a59cd648637deb830079b460008d81411681f0eb41dc327c3f447326f6)",
|
|
"pattern": "[file:hashes.SHA1 = '17c59c9bdc7ac4ef8abdca087fdfeefef816f597']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:08Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d72-e304-4ee0-94eb-c650950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:10.000Z",
|
|
"modified": "2016-02-18T23:02:10.000Z",
|
|
"description": "Automatically added (via 90a5c1c5dc2278063478fbc8f2ac072ccf0489d7b3f81a6ed35b7d712b4b7b84)",
|
|
"pattern": "[file:hashes.SHA1 = 'bf831962162a0446454e3e32d764cc0e5daafde0']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:10Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d74-de04-43a2-82a6-c654950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:12.000Z",
|
|
"modified": "2016-02-18T23:02:12.000Z",
|
|
"description": "Automatically added (via c5d23f066a4f51149211caecae50c6f602a520557bdb441e787bc4506217bb32)",
|
|
"pattern": "[file:hashes.SHA1 = 'bbb9b99ac09da617e18a6d0ed7beadc2c7ab28de']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:12Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d77-9ff4-411e-8f2e-5f51950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:02:15.000Z",
|
|
"modified": "2016-02-18T23:02:15.000Z",
|
|
"description": "Automatically added (via bf630442adaced2410a6f1962d76f3f8948a5a810d92001bb11f09aa1d01f9ac)",
|
|
"pattern": "[file:hashes.SHA1 = 'f451dd3db933ffe1fd232c58ae56ad853f467684']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:02:15Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "External analysis"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"External analysis\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d0c-7164-4b02-8640-44c1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:28.000Z",
|
|
"modified": "2016-02-18T23:00:28.000Z",
|
|
"description": "Automatically added (via b0eeca383a7477ee689ec807b775ebbb)",
|
|
"pattern": "[file:hashes.SHA256 = '0085b3d71f87253e1ce08bb59b72da59273b0dc1500305f47e8922db0391cea5']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--56c64d0e-662c-4805-933c-59a3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-02-18T23:00:30.000Z",
|
|
"modified": "2016-02-18T23:00:30.000Z",
|
|
"description": "Automatically added (via 5b90896127179f0ad2e6628593cdb60d)",
|
|
"pattern": "[file:hashes.SHA256 = '197c22d3d8e306e582fd3c7777746f8583a94ae82f925afa0bbdf23e4ec5c0ed']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-02-18T23:00:30Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Artifacts dropped"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Artifacts dropped\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "marking-definition",
|
|
"spec_version": "2.1",
|
|
"id": "marking-definition--34098fce-860f-48ae-8e50-ebd3cc5e41da",
|
|
"created": "2017-01-20T00:00:00.000Z",
|
|
"definition_type": "tlp",
|
|
"name": "TLP:GREEN",
|
|
"definition": {
|
|
"tlp": "green"
|
|
}
|
|
},
|
|
{
|
|
"type": "marking-definition",
|
|
"spec_version": "2.1",
|
|
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
|
|
"created": "2017-01-20T00:00:00.000Z",
|
|
"definition_type": "tlp",
|
|
"name": "TLP:WHITE",
|
|
"definition": {
|
|
"tlp": "white"
|
|
}
|
|
}
|
|
]
|
|
} |