misp-circl-feed/feeds/circl/misp/57cd5a06-59e0-44a8-9200-3306950d210f.json

296 lines
No EOL
12 KiB
JSON

{
"type": "bundle",
"id": "bundle--57cd5a06-59e0-44a8-9200-3306950d210f",
"objects": [
{
"type": "identity",
"spec_version": "2.1",
"id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-09-05T11:49:59.000Z",
"modified": "2016-09-05T11:49:59.000Z",
"name": "CIRCL",
"identity_class": "organization"
},
{
"type": "report",
"spec_version": "2.1",
"id": "report--57cd5a06-59e0-44a8-9200-3306950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-09-05T11:49:59.000Z",
"modified": "2016-09-05T11:49:59.000Z",
"name": "Malspam 2016-09-05 (.js in .zip) - campaign: \"Credit card receipt\"",
"published": "2016-09-05T11:50:39Z",
"object_refs": [
"indicator--57cd5bb7-b798-4b79-95c3-48a8950d210f",
"indicator--57cd5bb7-9e68-48cf-a3eb-4f6e950d210f",
"indicator--57cd5bb7-953c-4c3a-8e38-4d26950d210f",
"indicator--57cd5bb8-ae0c-470b-8673-4818950d210f",
"indicator--57cd5bb8-c47c-4071-90c8-445c950d210f",
"indicator--57cd5bb8-26bc-4ef9-8ad2-4d45950d210f",
"indicator--57cd5bb8-783c-4507-815a-4488950d210f",
"indicator--57cd5bb9-0d4c-4ee1-accb-418a950d210f",
"indicator--57cd5be7-66c8-476d-bbb9-4c0a950d210f",
"indicator--57cd5be7-37f8-4b36-a89a-4af9950d210f"
],
"labels": [
"Threat-Report",
"misp:tool=\"MISP-STIX-Converter\"",
"circl:incident-classification=\"malware\""
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57cd5bb7-b798-4b79-95c3-48a8950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-09-05T11:49:11.000Z",
"modified": "2016-09-05T11:49:11.000Z",
"description": "download location",
"pattern": "[url:value = 'http://canonsupervideo4k.ws/1bcpr7xx']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-09-05T11:49:11Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57cd5bb7-9e68-48cf-a3eb-4f6e950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-09-05T11:49:11.000Z",
"modified": "2016-09-05T11:49:11.000Z",
"description": "download location",
"pattern": "[domain-name:value = 'canonsupervideo4k.ws']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-09-05T11:49:11Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57cd5bb7-953c-4c3a-8e38-4d26950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-09-05T11:49:11.000Z",
"modified": "2016-09-05T11:49:11.000Z",
"description": "download location",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '107.173.176.4']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-09-05T11:49:11Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57cd5bb8-ae0c-470b-8673-4818950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-09-05T11:49:12.000Z",
"modified": "2016-09-05T11:49:12.000Z",
"description": "download location",
"pattern": "[url:value = 'http://darkestzone2.wang/1i0i75gq']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-09-05T11:49:12Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57cd5bb8-c47c-4071-90c8-445c950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-09-05T11:49:12.000Z",
"modified": "2016-09-05T11:49:12.000Z",
"description": "download location",
"pattern": "[file:name = 'darkestzone2.wang']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-09-05T11:49:12Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57cd5bb8-26bc-4ef9-8ad2-4d45950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-09-05T11:49:12.000Z",
"modified": "2016-09-05T11:49:12.000Z",
"description": "download location",
"pattern": "[url:value = 'http://tradesmartcoin.xyz/3o8pon']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-09-05T11:49:12Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57cd5bb8-783c-4507-815a-4488950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-09-05T11:49:12.000Z",
"modified": "2016-09-05T11:49:12.000Z",
"description": "download location",
"pattern": "[file:name = 'tradesmartcoin.xyz']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-09-05T11:49:12Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Payload delivery"
}
],
"labels": [
"misp:type=\"filename\"",
"misp:category=\"Payload delivery\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57cd5bb9-0d4c-4ee1-accb-418a950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-09-05T11:49:13.000Z",
"modified": "2016-09-05T11:49:13.000Z",
"description": "download location",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '216.126.225.159']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-09-05T11:49:13Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57cd5be7-66c8-476d-bbb9-4c0a950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-09-05T11:49:59.000Z",
"modified": "2016-09-05T11:49:59.000Z",
"description": "download location",
"pattern": "[domain-name:value = 'listofbuyersus.co.in']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-09-05T11:49:59Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"hostname\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57cd5be7-37f8-4b36-a89a-4af9950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-09-05T11:49:59.000Z",
"modified": "2016-09-05T11:49:59.000Z",
"description": "download location",
"pattern": "[domain-name:value = 'videoconvertermac.in']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-09-05T11:49:59Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "marking-definition",
"spec_version": "2.1",
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
"created": "2017-01-20T00:00:00.000Z",
"definition_type": "tlp",
"name": "TLP:WHITE",
"definition": {
"tlp": "white"
}
}
]
}