adulau/misp-circl-feed
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Packages Wiki Activity Actions
misp-circl-feed/feeds/circl/misp/57f239a3-9ac0-4261-8678-73f0950d210f.json

546 lines
No EOL
22 KiB
JSON
Raw Blame History

{
"type": "bundle",
"id": "bundle--57f239a3-9ac0-4261-8678-73f0950d210f",
"objects": [
{
"type": "identity",
"spec_version": "2.1",
"id": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T13:20:04.000Z",
"modified": "2016-10-03T13:20:04.000Z",
"name": "CIRCL",
"identity_class": "organization"
},
{
"type": "report",
"spec_version": "2.1",
"id": "report--57f239a3-9ac0-4261-8678-73f0950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T13:20:04.000Z",
"modified": "2016-10-03T13:20:04.000Z",
"name": "Malspam 2016-10-03 (.xls) - campaign: \"[Scan]\"",
"published": "2016-10-03T15:05:01Z",
"object_refs": [
"indicator--57f239b3-f598-4937-8ce8-ef38950d210f",
"indicator--57f239b4-da1c-4ae7-bc49-ef38950d210f",
"indicator--57f239b4-56bc-437c-9ef0-ef38950d210f",
"indicator--57f239b4-fb34-4eb1-90c1-ef38950d210f",
"indicator--57f239b4-3214-449d-bc43-ef38950d210f",
"indicator--57f239b5-88e4-43c5-82b2-ef38950d210f",
"indicator--57f239b5-af9c-4e71-82da-ef38950d210f",
"indicator--57f239b5-b614-4c95-b880-ef38950d210f",
"indicator--57f239b5-de0c-4cbf-945a-ef38950d210f",
"indicator--57f239b5-20dc-4c78-bd5e-ef38950d210f",
"indicator--57f239b6-5e54-4592-96b7-ef38950d210f",
"indicator--57f239b6-5214-4557-a34d-ef38950d210f",
"indicator--57f239b6-5114-46be-ba1a-ef38950d210f",
"indicator--57f239b6-8310-4692-8276-ef38950d210f",
"indicator--57f239b7-40bc-4494-81c1-ef38950d210f",
"indicator--57f239b7-f428-4f3a-91f9-ef38950d210f",
"indicator--57f25259-adac-4f62-874a-73ea950d210f",
"indicator--57f25293-13c4-46e9-bb76-e444950d210f",
"indicator--57f2527d-c534-4925-bca3-4376950d210f",
"indicator--57f252ac-31a8-45e6-a291-73ea950d210f"
],
"labels": [
"Threat-Report",
"misp:tool=\"MISP-STIX-Converter\"",
"circl:incident-classification=\"malware\""
],
"object_marking_refs": [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b3-f598-4937-8ce8-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:55.000Z",
"modified": "2016-10-03T10:57:55.000Z",
"description": "download location",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '162.253.225.88']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:55Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b4-da1c-4ae7-bc49-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:56.000Z",
"modified": "2016-10-03T10:57:56.000Z",
"description": "download location",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '68.65.120.207']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:56Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b4-56bc-437c-9ef0-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:56.000Z",
"modified": "2016-10-03T10:57:56.000Z",
"description": "download location",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '77.79.239.195']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:56Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b4-fb34-4eb1-90c1-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:56.000Z",
"modified": "2016-10-03T10:57:56.000Z",
"description": "download location",
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '96.0.130.2']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:56Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"ip-dst\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b4-3214-449d-bc43-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:56.000Z",
"modified": "2016-10-03T10:57:56.000Z",
"description": "download location",
"pattern": "[domain-name:value = 'bluewaterappco.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:56Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b5-88e4-43c5-82b2-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:57.000Z",
"modified": "2016-10-03T10:57:57.000Z",
"description": "download location",
"pattern": "[domain-name:value = 'boservice.info']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:57Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b5-af9c-4e71-82da-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:57.000Z",
"modified": "2016-10-03T10:57:57.000Z",
"description": "download location",
"pattern": "[domain-name:value = 'cedrussauna.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:57Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b5-b614-4c95-b880-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:57.000Z",
"modified": "2016-10-03T10:57:57.000Z",
"description": "download location",
"pattern": "[domain-name:value = 'far-infraredsaunas.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:57Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b5-de0c-4cbf-945a-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:57.000Z",
"modified": "2016-10-03T10:57:57.000Z",
"description": "download location",
"pattern": "[domain-name:value = 'golfnauvoo.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:57Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"domain\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b5-20dc-4c78-bd5e-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:57.000Z",
"modified": "2016-10-03T10:57:57.000Z",
"description": "download location",
"pattern": "[url:value = 'http://bluewaterappco.com/jhg45s']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:57Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b6-5e54-4592-96b7-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:58.000Z",
"modified": "2016-10-03T10:57:58.000Z",
"description": "download location",
"pattern": "[url:value = 'http://boservice.info/jhg45s']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:58Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b6-5214-4557-a34d-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:58.000Z",
"modified": "2016-10-03T10:57:58.000Z",
"description": "download location",
"pattern": "[url:value = 'http://cedrussauna.com/jhg45s']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:58Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b6-5114-46be-ba1a-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:58.000Z",
"modified": "2016-10-03T10:57:58.000Z",
"description": "download location",
"pattern": "[url:value = 'http://far-infraredsaunas.com/jhg45s']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:58Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b6-8310-4692-8276-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:58.000Z",
"modified": "2016-10-03T10:57:58.000Z",
"description": "download location",
"pattern": "[url:value = 'http://golfnauvoo.com/jhg45s']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:58Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b7-40bc-4494-81c1-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:59.000Z",
"modified": "2016-10-03T10:57:59.000Z",
"description": "download location",
"pattern": "[url:value = 'http://mmm2.aaomg.com/jhg45s']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:59Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f239b7-f428-4f3a-91f9-ef38950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T10:57:59.000Z",
"modified": "2016-10-03T10:57:59.000Z",
"description": "download location",
"pattern": "[domain-name:value = 'mmm2.aaomg.com']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T10:57:59Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"hostname\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f25259-adac-4f62-874a-73ea950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T13:19:57.000Z",
"modified": "2016-10-03T13:19:57.000Z",
"description": "download location",
"pattern": "[url:value = 'http://foe-2.com/jhg45s']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T13:19:57Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f25293-13c4-46e9-bb76-e444950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T13:19:54.000Z",
"modified": "2016-10-03T13:19:54.000Z",
"description": "download location",
"pattern": "[url:value = 'http://icdsarch.com/jhg45s']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T13:19:54Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f2527d-c534-4925-bca3-4376950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T13:20:00.000Z",
"modified": "2016-10-03T13:20:00.000Z",
"description": "download location",
"pattern": "[url:value = 'http://inmopromo.com/jhg45s']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T13:20:00Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--57f252ac-31a8-45e6-a291-73ea950d210f",
"created_by_ref": "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f",
"created": "2016-10-03T13:20:04.000Z",
"modified": "2016-10-03T13:20:04.000Z",
"description": "download location",
"pattern": "[url:value = 'http://denvertracy.com/jhg45s']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2016-10-03T13:20:04Z",
"kill_chain_phases": [
{
"kill_chain_name": "misp-category",
"phase_name": "Network activity"
}
],
"labels": [
"misp:type=\"url\"",
"misp:category=\"Network activity\"",
"misp:to_ids=\"True\""
]
},
{
"type": "marking-definition",
"spec_version": "2.1",
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
"created": "2017-01-20T00:00:00.000Z",
"definition_type": "tlp",
"name": "TLP:WHITE",
"definition": {
"tlp": "white"
}
}
]
}
Reference in a new issue View git blame Copy permalink