2528 lines
No EOL
105 KiB
JSON
2528 lines
No EOL
105 KiB
JSON
{
|
|
"type": "bundle",
|
|
"id": "bundle--57447e7c-91fc-48e4-80b0-67a0950d210f",
|
|
"objects": [
|
|
{
|
|
"type": "identity",
|
|
"spec_version": "2.1",
|
|
"id": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:34.000Z",
|
|
"modified": "2016-05-24T17:04:34.000Z",
|
|
"name": "CthulhuSPRL.be",
|
|
"identity_class": "organization"
|
|
},
|
|
{
|
|
"type": "report",
|
|
"spec_version": "2.1",
|
|
"id": "report--57447e7c-91fc-48e4-80b0-67a0950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:34.000Z",
|
|
"modified": "2016-05-24T17:04:34.000Z",
|
|
"name": "OSINT - Looking Into a Cyber-Attack Facilitator in the Netherlands by Trend Micro",
|
|
"published": "2016-07-11T13:15:56Z",
|
|
"object_refs": [
|
|
"observed-data--57447ea6-89b8-408b-8de9-4aa3950d210f",
|
|
"url--57447ea6-89b8-408b-8de9-4aa3950d210f",
|
|
"observed-data--57447ea6-bef8-4bac-bf71-49b5950d210f",
|
|
"url--57447ea6-bef8-4bac-bf71-49b5950d210f",
|
|
"x-misp-attribute--57447ec0-0c30-4e5f-b8f5-76d5950d210f",
|
|
"indicator--57447f5e-9868-4ff2-a748-429c950d210f",
|
|
"indicator--57447f5e-d9f4-4cbb-b39c-4842950d210f",
|
|
"indicator--57447f5f-8c08-45f1-933b-493b950d210f",
|
|
"indicator--57447f5f-f430-4649-9aef-4500950d210f",
|
|
"indicator--57447f5f-f6c4-4ac4-b9a0-43e2950d210f",
|
|
"indicator--57447f60-1294-4e71-9684-4467950d210f",
|
|
"indicator--57447f60-5e38-4826-abdb-4c67950d210f",
|
|
"indicator--57447f60-c8f8-42be-ae82-4664950d210f",
|
|
"indicator--57447f61-9cc8-45cc-a0dc-4e24950d210f",
|
|
"indicator--57447f61-952c-4477-acb9-46f6950d210f",
|
|
"indicator--57447f61-5634-4f24-ac54-4ba7950d210f",
|
|
"indicator--57447f62-2484-4e9a-bbee-4af6950d210f",
|
|
"indicator--57447f62-aad4-4569-8c0d-43ba950d210f",
|
|
"indicator--57447f62-699c-4949-b228-4e2f950d210f",
|
|
"indicator--57447f63-1a0c-4bd3-998d-40dc950d210f",
|
|
"indicator--57447f63-f354-4f14-85e6-4fe0950d210f",
|
|
"indicator--57447f63-095c-44cf-9b29-470b950d210f",
|
|
"indicator--57447f64-b8a4-4b46-aaac-4b9c950d210f",
|
|
"indicator--57447f64-83b4-4ff6-b441-4ca4950d210f",
|
|
"indicator--57447f64-04a0-4c07-82c5-4551950d210f",
|
|
"indicator--57447f65-9ae0-4b0c-ae22-446e950d210f",
|
|
"indicator--57447f65-6e58-4b67-b425-44ac950d210f",
|
|
"indicator--57447f66-7778-436f-b5a1-444a950d210f",
|
|
"indicator--57447f66-7d84-4e6f-8043-483a950d210f",
|
|
"indicator--57447f66-a67c-42d9-9e31-489e950d210f",
|
|
"indicator--57447f67-f910-421f-9eaf-43e9950d210f",
|
|
"indicator--57447f67-380c-428a-9573-42ce950d210f",
|
|
"indicator--57447f67-eea0-4c5c-a676-4489950d210f",
|
|
"indicator--57447f68-ae60-43ba-8b68-4f57950d210f",
|
|
"indicator--57447f68-0a30-4db5-8fcf-480f950d210f",
|
|
"indicator--57447f68-d678-48ba-bd3c-476f950d210f",
|
|
"indicator--57447f69-0954-4ebd-87f8-4cc9950d210f",
|
|
"indicator--57447f69-f8a8-48ec-bce2-4d73950d210f",
|
|
"indicator--57447f69-3174-497f-87aa-4802950d210f",
|
|
"indicator--57447f6a-f7e4-4151-9732-46e6950d210f",
|
|
"indicator--57447f6a-7150-4135-a35e-4939950d210f",
|
|
"indicator--57447f6a-9864-4ff3-9105-40f1950d210f",
|
|
"indicator--57447f6b-d780-4a21-be06-4925950d210f",
|
|
"indicator--57447f6b-8eac-454b-a0a7-4cb2950d210f",
|
|
"indicator--57447f6b-e2c4-493d-b649-4fe3950d210f",
|
|
"indicator--57447f6c-f7f8-4af0-92ee-4442950d210f",
|
|
"indicator--57447f6c-3b00-4ec7-99bb-4c0c950d210f",
|
|
"indicator--57447f6c-70a8-4615-8bcd-482b950d210f",
|
|
"indicator--57447f6d-b5ec-4691-b9d1-4e37950d210f",
|
|
"indicator--57447f6d-2fc4-4b72-951b-4334950d210f",
|
|
"indicator--57447f6d-f858-482d-b104-4593950d210f",
|
|
"indicator--57447f6e-99b4-4da4-b390-4723950d210f",
|
|
"indicator--57447f6e-1af4-4acb-a9d3-4b48950d210f",
|
|
"indicator--57447f6e-cbec-42e9-8d10-4c46950d210f",
|
|
"indicator--57447f6f-d31c-4c1c-9dac-4eef950d210f",
|
|
"indicator--57447f6f-9148-4ec6-94ef-4842950d210f",
|
|
"indicator--57447f6f-fa20-41ce-905a-420b950d210f",
|
|
"indicator--57447f70-122c-44ac-b581-48c1950d210f",
|
|
"indicator--57447f70-d97c-4cbf-9f46-43b8950d210f",
|
|
"indicator--57447f70-2f20-4ebe-9a45-4b92950d210f",
|
|
"indicator--57447f71-52d4-4114-83b9-4da0950d210f",
|
|
"indicator--57447f71-ec90-444d-9c8e-41cb950d210f",
|
|
"indicator--57447f71-4a04-41ec-842c-4339950d210f",
|
|
"indicator--57447f72-7a78-42f9-a4e4-4bae950d210f",
|
|
"indicator--57447f72-966c-4c34-ba52-4ca5950d210f",
|
|
"indicator--57447f72-748c-445d-818f-4cef950d210f",
|
|
"indicator--57447f73-ae54-4ae0-a923-451d950d210f",
|
|
"indicator--57447f73-80c8-40ca-afb9-43c2950d210f",
|
|
"indicator--57447f73-e59c-4075-bc34-4948950d210f",
|
|
"indicator--57447f74-8610-41f1-969c-478a950d210f",
|
|
"indicator--57447f74-3850-4f93-93ac-4fc8950d210f",
|
|
"indicator--57447f74-e2b0-4482-9670-45ec950d210f",
|
|
"indicator--57447f75-9bf0-46e6-a2d4-4fa8950d210f",
|
|
"x-misp-attribute--574489a2-0b44-4fb9-aa75-44bc950d210f",
|
|
"x-misp-attribute--574489a3-d050-482a-adbd-4d11950d210f",
|
|
"x-misp-attribute--574489a3-7f44-4244-bf17-4ae3950d210f",
|
|
"x-misp-attribute--574489a3-21d4-4e2f-81c7-43b4950d210f",
|
|
"x-misp-attribute--574489a4-c5f4-4505-a630-4f05950d210f",
|
|
"x-misp-attribute--574489a4-63c4-4f10-ac53-417c950d210f",
|
|
"x-misp-attribute--574489a4-17c0-4ae8-a734-437d950d210f",
|
|
"x-misp-attribute--574489a5-b1c8-4a2d-88dc-4f5a950d210f",
|
|
"x-misp-attribute--574489a5-e3c4-4fa0-9b41-404a950d210f",
|
|
"x-misp-attribute--574489a6-2da0-452e-8746-4970950d210f",
|
|
"x-misp-attribute--574489a6-49f4-462b-ba68-4c92950d210f",
|
|
"x-misp-attribute--574489a7-1c58-4178-9dab-419e950d210f",
|
|
"x-misp-attribute--574489a7-f1dc-4977-997b-4df7950d210f",
|
|
"x-misp-attribute--574489a7-ec60-41b9-8122-449a950d210f",
|
|
"x-misp-attribute--574489a8-64c8-492a-a3a0-4248950d210f",
|
|
"x-misp-attribute--574489a8-5220-49c7-9662-4c29950d210f",
|
|
"x-misp-attribute--574489a9-7630-42d9-ad24-4e47950d210f",
|
|
"x-misp-attribute--574489a9-00e8-42da-91ca-4e40950d210f",
|
|
"x-misp-attribute--574489aa-d978-4f67-a312-4809950d210f",
|
|
"x-misp-attribute--574489aa-7920-4024-962a-4e41950d210f",
|
|
"x-misp-attribute--574489aa-3860-4607-9f47-483d950d210f",
|
|
"x-misp-attribute--574489ab-450c-4679-bdf1-4fe3950d210f",
|
|
"x-misp-attribute--574489ab-a0a8-4494-9911-418d950d210f",
|
|
"x-misp-attribute--574489ac-f75c-4d50-898f-435f950d210f",
|
|
"x-misp-attribute--574489ac-8f68-455f-b78a-4776950d210f",
|
|
"x-misp-attribute--574489ad-cb4c-4f6a-9c57-4722950d210f",
|
|
"x-misp-attribute--574489ad-5930-4db9-8c8d-4e52950d210f",
|
|
"x-misp-attribute--574489ad-3604-4f74-b53e-434c950d210f",
|
|
"x-misp-attribute--574489ae-8ce4-4853-a71a-46c7950d210f",
|
|
"x-misp-attribute--574489ae-3878-42c9-8a58-44f2950d210f",
|
|
"x-misp-attribute--574489af-8d48-4bdb-befe-47aa950d210f",
|
|
"x-misp-attribute--574489af-adbc-448b-ad51-4908950d210f",
|
|
"x-misp-attribute--574489af-1c9c-4c89-958d-4267950d210f",
|
|
"x-misp-attribute--574489b0-3e40-456f-aa64-4601950d210f",
|
|
"x-misp-attribute--574489b0-3f08-4386-ba29-40cd950d210f",
|
|
"x-misp-attribute--574489b0-d224-4d52-9e90-419f950d210f",
|
|
"x-misp-attribute--574489b1-40f0-4e8d-81ee-4567950d210f",
|
|
"x-misp-attribute--574489b1-707c-40dd-826a-4709950d210f",
|
|
"x-misp-attribute--574489b1-156c-4831-88ed-409c950d210f",
|
|
"x-misp-attribute--574489b2-6084-45a3-a1df-441e950d210f",
|
|
"x-misp-attribute--574489b2-e090-4ef6-8f6e-4522950d210f",
|
|
"x-misp-attribute--574489b3-b0bc-4fe7-a7c5-4539950d210f"
|
|
],
|
|
"labels": [
|
|
"Threat-Report",
|
|
"misp:tool=\"MISP-STIX-Converter\"",
|
|
"OSINT"
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
|
|
]
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--57447ea6-89b8-408b-8de9-4aa3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:17:42.000Z",
|
|
"modified": "2016-05-24T16:17:42.000Z",
|
|
"first_observed": "2016-05-24T16:17:42Z",
|
|
"last_observed": "2016-05-24T16:17:42Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"url--57447ea6-89b8-408b-8de9-4aa3950d210f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"link\"",
|
|
"misp:category=\"External analysis\""
|
|
]
|
|
},
|
|
{
|
|
"type": "url",
|
|
"spec_version": "2.1",
|
|
"id": "url--57447ea6-89b8-408b-8de9-4aa3950d210f",
|
|
"value": "http://blog.trendmicro.com/trendlabs-security-intelligence/looking-into-a-cyber-attack-facilitator-in-the-netherlands/"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--57447ea6-bef8-4bac-bf71-49b5950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:17:42.000Z",
|
|
"modified": "2016-05-24T16:17:42.000Z",
|
|
"first_observed": "2016-05-24T16:17:42Z",
|
|
"last_observed": "2016-05-24T16:17:42Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"url--57447ea6-bef8-4bac-bf71-49b5950d210f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"link\"",
|
|
"misp:category=\"External analysis\""
|
|
]
|
|
},
|
|
{
|
|
"type": "url",
|
|
"spec_version": "2.1",
|
|
"id": "url--57447ea6-bef8-4bac-bf71-49b5950d210f",
|
|
"value": "http://documents.trendmicro.com/assets/appendix_looking-into-a-cyber-attack-facilitator-in-the-netherlands.pdf"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--57447ec0-0c30-4e5f-b8f5-76d5950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:18:08.000Z",
|
|
"modified": "2016-05-24T16:18:08.000Z",
|
|
"labels": [
|
|
"misp:type=\"comment\"",
|
|
"misp:category=\"External analysis\""
|
|
],
|
|
"x_misp_category": "External analysis",
|
|
"x_misp_type": "comment",
|
|
"x_misp_value": "Covers multiple threat actor groups that have used the same hosting company"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f5e-9868-4ff2-a748-429c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:46.000Z",
|
|
"modified": "2016-05-24T16:20:46.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'account-web.de']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:46Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f5e-d9f4-4cbb-b39c-4842950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:46.000Z",
|
|
"modified": "2016-05-24T16:20:46.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'accounts-updated-confirmation.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:46Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f5f-8c08-45f1-933b-493b950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:47.000Z",
|
|
"modified": "2016-05-24T16:20:47.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'aijazeera.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:47Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f5f-f430-4649-9aef-4500950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:47.000Z",
|
|
"modified": "2016-05-24T16:20:47.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'bestapplestore.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:47Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f5f-f6c4-4ac4-b9a0-43e2950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:47.000Z",
|
|
"modified": "2016-05-24T16:20:47.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'bit2ly.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:47Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f60-1294-4e71-9684-4467950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:48.000Z",
|
|
"modified": "2016-05-24T16:20:48.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'blu172maillive.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:48Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f60-5e38-4826-abdb-4c67950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:48.000Z",
|
|
"modified": "2016-05-24T16:20:48.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'catholicsinaliance.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:48Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f60-c8f8-42be-ae82-4664950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:48.000Z",
|
|
"modified": "2016-05-24T16:20:48.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'cc-yahoo-inc.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:48Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f61-9cc8-45cc-a0dc-4e24950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:49.000Z",
|
|
"modified": "2016-05-24T16:20:49.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'defensenews.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:49Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f61-952c-4477-acb9-46f6950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:49.000Z",
|
|
"modified": "2016-05-24T16:20:49.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'e-post.byegm.web.tr']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:49Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f61-5634-4f24-ac54-4ba7950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:49.000Z",
|
|
"modified": "2016-05-24T16:20:49.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'edit-mail-yahoo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:49Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f62-2484-4e9a-bbee-4af6950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:50.000Z",
|
|
"modified": "2016-05-24T16:20:50.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'electronicfrontierfoundation.org']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:50Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f62-aad4-4569-8c0d-43ba950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:50.000Z",
|
|
"modified": "2016-05-24T16:20:50.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'eposta.basbakanlik.qov.web.tr']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:50Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f62-699c-4949-b228-4e2f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:50.000Z",
|
|
"modified": "2016-05-24T16:20:50.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'eservicesystems.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:50Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f63-1a0c-4bd3-998d-40dc950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:51.000Z",
|
|
"modified": "2016-05-24T16:20:51.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'euroreport24.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:51Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f63-f354-4f14-85e6-4fe0950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:51.000Z",
|
|
"modified": "2016-05-24T16:20:51.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'grab2d.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:51Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f63-095c-44cf-9b29-470b950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:51.000Z",
|
|
"modified": "2016-05-24T16:20:51.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'help-yahoo-service.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:51Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f64-b8a4-4b46-aaac-4b9c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:52.000Z",
|
|
"modified": "2016-05-24T16:20:52.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'inside-apple-localisation.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:52Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f64-83b4-4ff6-b441-4ca4950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:52.000Z",
|
|
"modified": "2016-05-24T16:20:52.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'inside-localisation-apple.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:52Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f64-04a0-4c07-82c5-4551950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:52.000Z",
|
|
"modified": "2016-05-24T16:20:52.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'int-live.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:52Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f65-9ae0-4b0c-ae22-446e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:53.000Z",
|
|
"modified": "2016-05-24T16:20:53.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'iraqinews.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f65-6e58-4b67-b425-44ac950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:53.000Z",
|
|
"modified": "2016-05-24T16:20:53.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'itunes-helper.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f66-7778-436f-b5a1-444a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:54.000Z",
|
|
"modified": "2016-05-24T16:20:54.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'live-settings.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:54Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f66-7d84-4e6f-8043-483a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:54.000Z",
|
|
"modified": "2016-05-24T16:20:54.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'localiser-icloud.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:54Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f66-a67c-42d9-9e31-489e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:54.000Z",
|
|
"modified": "2016-05-24T16:20:54.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'loqin-yandex.ru']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:54Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f67-f910-421f-9eaf-43e9950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:55.000Z",
|
|
"modified": "2016-05-24T16:20:55.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mail-hurriyet.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:55Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f67-380c-428a-9573-42ce950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:55.000Z",
|
|
"modified": "2016-05-24T16:20:55.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mail-justus.com.ua']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:55Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f67-eea0-4c5c-a676-4489950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:55.000Z",
|
|
"modified": "2016-05-24T16:20:55.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mail-navy.ro']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:55Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f68-ae60-43ba-8b68-4f57950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:56.000Z",
|
|
"modified": "2016-05-24T16:20:56.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mail.armf.bg.message-id8665213.tk']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:56Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f68-0a30-4db5-8fcf-480f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:56.000Z",
|
|
"modified": "2016-05-24T16:20:56.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mail.byegm.web.tr']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:56Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f68-d678-48ba-bd3c-476f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:56.000Z",
|
|
"modified": "2016-05-24T16:20:56.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mail.g0v.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:56Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f69-0954-4ebd-87f8-4cc9950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:57.000Z",
|
|
"modified": "2016-05-24T16:20:57.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mail.kuwaitarmy.gov-kw.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:57Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f69-f8a8-48ec-bce2-4d73950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:57.000Z",
|
|
"modified": "2016-05-24T16:20:57.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mail.mofa.g0v.qa']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:57Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f69-3174-497f-87aa-4802950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:57.000Z",
|
|
"modified": "2016-05-24T16:20:57.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mail.rsaf.qov.sa.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:57Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6a-f7e4-4151-9732-46e6950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:58.000Z",
|
|
"modified": "2016-05-24T16:20:58.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mail.teiecomitalia.it']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:58Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6a-7150-4135-a35e-4939950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:58.000Z",
|
|
"modified": "2016-05-24T16:20:58.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mailhost-ut.ee']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:58Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6a-9864-4ff3-9105-40f1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:58.000Z",
|
|
"modified": "2016-05-24T16:20:58.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mailhost.university-tartu.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:58Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6b-d780-4a21-be06-4925950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:59.000Z",
|
|
"modified": "2016-05-24T16:20:59.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mailmil.ae']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:59Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6b-8eac-454b-a0a7-4cb2950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:59.000Z",
|
|
"modified": "2016-05-24T16:20:59.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'marktingvb.ml']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:59Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6b-e2c4-493d-b649-4fe3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:20:59.000Z",
|
|
"modified": "2016-05-24T16:20:59.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mfagreece.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:20:59Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6c-f7f8-4af0-92ee-4442950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:00.000Z",
|
|
"modified": "2016-05-24T16:21:00.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'military-info.eu']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:00Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6c-3b00-4ec7-99bb-4c0c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:00.000Z",
|
|
"modified": "2016-05-24T16:21:00.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mobile-sanoma.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:00Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6c-70a8-4615-8bcd-482b950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:00.000Z",
|
|
"modified": "2016-05-24T16:21:00.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'mycloud-mail.ru']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:00Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6d-b5ec-4691-b9d1-4e37950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:01.000Z",
|
|
"modified": "2016-05-24T16:21:01.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'nato-news.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:01Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6d-2fc4-4b72-951b-4334950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:01.000Z",
|
|
"modified": "2016-05-24T16:21:01.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'options-mail.ru']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:01Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6d-f858-482d-b104-4593950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:01.000Z",
|
|
"modified": "2016-05-24T16:21:01.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'osce-info.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:01Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6e-99b4-4da4-b390-4723950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:02.000Z",
|
|
"modified": "2016-05-24T16:21:02.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'osce-press.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:02Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6e-1af4-4acb-a9d3-4b48950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:02.000Z",
|
|
"modified": "2016-05-24T16:21:02.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'pasport-yandex.ru']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:02Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6e-cbec-42e9-8d10-4c46950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:02.000Z",
|
|
"modified": "2016-05-24T16:21:02.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'play.gooqle.eu.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:02Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6f-d31c-4c1c-9dac-4eef950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:03.000Z",
|
|
"modified": "2016-05-24T16:21:03.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'poczta.mon-gov.pl']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:03Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6f-9148-4ec6-94ef-4842950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:03.000Z",
|
|
"modified": "2016-05-24T16:21:03.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'posta-hurriyet.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:03Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f6f-fa20-41ce-905a-420b950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:03.000Z",
|
|
"modified": "2016-05-24T16:21:03.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'privacy-facebook.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:03Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f70-122c-44ac-b581-48c1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:04.000Z",
|
|
"modified": "2016-05-24T16:21:04.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'privacy-yahooservice.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:04Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f70-d97c-4cbf-9f46-43b8950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:04.000Z",
|
|
"modified": "2016-05-24T16:21:04.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'redirect2app.cf']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:04Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f70-2f20-4ebe-9a45-4b92950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:04.000Z",
|
|
"modified": "2016-05-24T16:21:04.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'reuters-press.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:04Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f71-52d4-4114-83b9-4da0950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:05.000Z",
|
|
"modified": "2016-05-24T16:21:05.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'rn-mail.ru']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:05Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f71-ec90-444d-9c8e-41cb950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:05.000Z",
|
|
"modified": "2016-05-24T16:21:05.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'securityicloudservice.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:05Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f71-4a04-41ec-842c-4339950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:05.000Z",
|
|
"modified": "2016-05-24T16:21:05.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'service-ukr.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:05Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f72-7a78-42f9-a4e4-4bae950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:06.000Z",
|
|
"modified": "2016-05-24T16:21:06.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'service-yahoo.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:06Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f72-966c-4c34-ba52-4ca5950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:06.000Z",
|
|
"modified": "2016-05-24T16:21:06.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'setting-mail.ru']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:06Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f72-748c-445d-818f-4cef950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:06.000Z",
|
|
"modified": "2016-05-24T16:21:06.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'tbmm.qov.web.tr']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:06Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f73-ae54-4ae0-a923-451d950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:07.000Z",
|
|
"modified": "2016-05-24T16:21:07.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'unbulletin.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:07Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f73-80c8-40ca-afb9-43c2950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:07.000Z",
|
|
"modified": "2016-05-24T16:21:07.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'webmail-gov.me']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:07Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f73-e59c-4075-bc34-4948950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:07.000Z",
|
|
"modified": "2016-05-24T16:21:07.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'webmail-mil.gr']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:07Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f74-8610-41f1-969c-478a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:08.000Z",
|
|
"modified": "2016-05-24T16:21:08.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'webmail.mofa.qov.ae']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:08Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f74-3850-4f93-93ac-4fc8950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:08.000Z",
|
|
"modified": "2016-05-24T16:21:08.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'worldpoliticsreviews.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:08Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f74-e2b0-4482-9670-45ec950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:08.000Z",
|
|
"modified": "2016-05-24T16:21:08.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'wsjworld.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:08Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57447f75-9bf0-46e6-a2d4-4fa8950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T16:21:09.000Z",
|
|
"modified": "2016-05-24T16:21:09.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[domain-name:value = 'yahoo.securepassword.info']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-05-24T16:21:09Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a2-0b44-4fb9-aa75-44bc950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:34.000Z",
|
|
"modified": "2016-05-24T17:04:34.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "umberto_eco@gmx.ch"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a3-d050-482a-adbd-4d11950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:35.000Z",
|
|
"modified": "2016-05-24T17:04:35.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "value_frogin@mail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a3-7f44-4244-bf17-4ae3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:35.000Z",
|
|
"modified": "2016-05-24T17:04:35.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "copyright@freenom.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a3-21d4-4e2f-81c7-43b4950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:35.000Z",
|
|
"modified": "2016-05-24T17:04:35.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "luisa.bacalite@mail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a4-c5f4-4505-a630-4f05950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:36.000Z",
|
|
"modified": "2016-05-24T17:04:36.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "master.traveler@mail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a4-63c4-4f10-ac53-417c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:36.000Z",
|
|
"modified": "2016-05-24T17:04:36.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "nato-news.com-owner@customers.whoisprivacycorp.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a4-17c0-4ae8-a734-437d950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:36.000Z",
|
|
"modified": "2016-05-24T17:04:36.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "h.kliener@mail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a5-b1c8-4a2d-88dc-4f5a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:37.000Z",
|
|
"modified": "2016-05-24T17:04:37.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "annaestrella@mail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a5-e3c4-4fa0-9b41-404a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:37.000Z",
|
|
"modified": "2016-05-24T17:04:37.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "milua@i.ua"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a6-2da0-452e-8746-4970950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:38.000Z",
|
|
"modified": "2016-05-24T17:04:38.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "mishel_corp@mail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a6-49f4-462b-ba68-4c92950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:38.000Z",
|
|
"modified": "2016-05-24T17:04:38.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "brown.jonatan@yahoo.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a7-1c58-4178-9dab-419e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:39.000Z",
|
|
"modified": "2016-05-24T17:04:39.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "rubhaas@email.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a7-f1dc-4977-997b-4df7950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:39.000Z",
|
|
"modified": "2016-05-24T17:04:39.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "info@verisign-grs.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a7-ec60-41b9-8122-449a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:39.000Z",
|
|
"modified": "2016-05-24T17:04:39.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "webadmin@gallery.bg"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a8-64c8-492a-a3a0-4248950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:40.000Z",
|
|
"modified": "2016-05-24T17:04:40.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "flyasky@126.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a8-5220-49c7-9662-4c29950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:40.000Z",
|
|
"modified": "2016-05-24T17:04:40.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "jennybrownbelks@gmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a9-7630-42d9-ad24-4e47950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:41.000Z",
|
|
"modified": "2016-05-24T17:04:41.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "55a38684lq89cygc@5225b4d0pi3627q9.whoisprivacycorp.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489a9-00e8-42da-91ca-4e40950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:41.000Z",
|
|
"modified": "2016-05-24T17:04:41.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "bill@deva.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489aa-d978-4f67-a312-4809950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:42.000Z",
|
|
"modified": "2016-05-24T17:04:42.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "contact@privacyprotect.org"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489aa-7920-4024-962a-4e41950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:42.000Z",
|
|
"modified": "2016-05-24T17:04:42.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "55964f419nhom3n0@5225b4d0pi3627q9.whoisprivacycorp.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489aa-3860-4607-9f47-483d950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:42.000Z",
|
|
"modified": "2016-05-24T17:04:42.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "yk2g53tv8yz@networksolutionsprivateregistration.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489ab-450c-4679-bdf1-4fe3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:43.000Z",
|
|
"modified": "2016-05-24T17:04:43.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "baumghartner@mail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489ab-a0a8-4494-9911-418d950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:43.000Z",
|
|
"modified": "2016-05-24T17:04:43.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "registrytechnical2@neustar.biz"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489ac-f75c-4d50-898f-435f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:44.000Z",
|
|
"modified": "2016-05-24T17:04:44.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "domains@virustracker.info"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489ac-8f68-455f-b78a-4776950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:44.000Z",
|
|
"modified": "2016-05-24T17:04:44.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "domains@marcaria.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489ad-cb4c-4f6a-9c57-4722950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:45.000Z",
|
|
"modified": "2016-05-24T17:04:45.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "iana@nzrs.net.nz"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489ad-5930-4db9-8c8d-4e52950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:45.000Z",
|
|
"modified": "2016-05-24T17:04:45.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "hizlivz@gmail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489ad-3604-4f74-b53e-434c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:45.000Z",
|
|
"modified": "2016-05-24T17:04:45.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "salex@fastservice.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489ae-8ce4-4853-a71a-46c7950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:46.000Z",
|
|
"modified": "2016-05-24T17:04:46.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "taylormacreadie@aol.co.uk"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489ae-3878-42c9-8a58-44f2950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:46.000Z",
|
|
"modified": "2016-05-24T17:04:46.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "thomas.anderson78@aol.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489af-8d48-4bdb-befe-47aa950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:47.000Z",
|
|
"modified": "2016-05-24T17:04:47.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "0621fdb4120848fca6bcabad18faaeae.protect@whoisguard.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489af-adbc-448b-ad51-4908950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:47.000Z",
|
|
"modified": "2016-05-24T17:04:47.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "vladmanjencev@mail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489af-1c9c-4c89-958d-4267950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:47.000Z",
|
|
"modified": "2016-05-24T17:04:47.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "iraqinews.info-owner@customers.whoisprivacycorp.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489b0-3e40-456f-aa64-4601950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:48.000Z",
|
|
"modified": "2016-05-24T17:04:48.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "walters.demian@mail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489b0-3f08-4386-ba29-40cd950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:48.000Z",
|
|
"modified": "2016-05-24T17:04:48.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "jbrown@mcclatchyinteractive.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489b0-d224-4d52-9e90-419f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:48.000Z",
|
|
"modified": "2016-05-24T17:04:48.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "gr-noc@ics.forth.gr"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489b1-40f0-4e8d-81ee-4567950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:49.000Z",
|
|
"modified": "2016-05-24T17:04:49.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "lary@asia.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489b1-707c-40dd-826a-4709950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:49.000Z",
|
|
"modified": "2016-05-24T17:04:49.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "hgoodwin39@mail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489b1-156c-4831-88ed-409c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:49.000Z",
|
|
"modified": "2016-05-24T17:04:49.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "alexmad@mail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489b2-6084-45a3-a1df-441e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:50.000Z",
|
|
"modified": "2016-05-24T17:04:50.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "azim.n@gmx.de"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489b2-e090-4ef6-8f6e-4522950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:50.000Z",
|
|
"modified": "2016-05-24T17:04:50.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "john.deagle@mail.com"
|
|
},
|
|
{
|
|
"type": "x-misp-attribute",
|
|
"spec_version": "2.1",
|
|
"id": "x-misp-attribute--574489b3-b0bc-4fe7-a7c5-4539950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-05-24T17:04:51.000Z",
|
|
"modified": "2016-05-24T17:04:51.000Z",
|
|
"labels": [
|
|
"misp:type=\"whois-registrant-email\"",
|
|
"misp:category=\"Attribution\"",
|
|
"misp:to_ids=\"True\""
|
|
],
|
|
"x_misp_category": "Attribution",
|
|
"x_misp_type": "whois-registrant-email",
|
|
"x_misp_value": "mihaymilokashech@mail.com"
|
|
},
|
|
{
|
|
"type": "marking-definition",
|
|
"spec_version": "2.1",
|
|
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
|
|
"created": "2017-01-20T00:00:00.000Z",
|
|
"definition_type": "tlp",
|
|
"name": "TLP:WHITE",
|
|
"definition": {
|
|
"tlp": "white"
|
|
}
|
|
}
|
|
]
|
|
} |