misp-circl-feed/feeds/circl/misp/5cff9640-635c-4fac-b3f7-45ab950d210f.json

{"Event": {"info": "OSINT - APT Kimsuky", "Tag": [{"colour": "#0088cc", "exportable": true, "name": "misp-galaxy:threat-actor=\"Kimsuki\""}, {"colour": "#004646", "exportable": true, "name": "type:OSINT"}, {"colour": "#0071c3", "exportable": true, "name": "osint:lifetime=\"perpetual\""}, {"colour": "#0087e8", "exportable": true, "name": "osint:certainty=\"50\""}, {"colour": "#ffffff", "exportable": true, "name": "tlp:white"}, {"colour": "#3b0020", "exportable": true, "name": "workflow:todo=\"expansion\""}], "publish_timestamp": "0", "timestamp": "1560257473", "Object": [{"comment": "", "template_uuid": "8ec8c911-ddbe-4f5b-895b-fbff70c42a60", "uuid": "5cffa078-0c70-4d25-bba5-4bea950d210f", "sharing_group_id": "0", "timestamp": "1560256632", "description": "Microblog post like a Twitter tweet or a post on a Facebook wall.", "template_version": "6", "Attribute": [{"comment": "", "category": "Other", "uuid": "5cffa078-85b8-4682-a94c-47d0950d210f", "timestamp": "1560256632", "to_ids": false, "value": "#APT #Kimsuky\r\nITW: 6ead104743be6575e767986a71cf4bd9\r\nFileName: 1.doc\r\nITW: 03dbc1b3d79a4ff70f06fd6e67e00985\r\nFileName: The_Progress_and_Promise_of_the_Moon-Kim_Summit.doc\r\n@Arkbird_SOLG\r\n @blackorbird\r\n @cyberwar_15", "disable_correlation": false, "object_relation": "post", "type": "text"}, {"comment": "", "category": "Other", "uuid": "5cffa078-f384-428f-99a1-462e950d210f", "timestamp": "1560256632", "to_ids": false, "value": "Twitter", "disable_correlation": true, "object_relation": "type", "type": "text"}, {"comment": "", "category": "Network activity", "uuid": "5cffa079-beb4-45c0-adb9-4ebf950d210f", "timestamp": "1560256633", "to_ids": true, "value": "https://mobile.twitter.com/Timele9527/status/1137903328061296640", "disable_correlation": false, "object_relation": "url", "type": "url"}, {"comment": "", "category": "Other", "uuid": "5cffa079-a744-4dde-a4a3-4efa950d210f", "timestamp": "1560256633", "to_ids": false, "value": "@Arkbird_SOLG", "disable_correlation": false, "object_relation": "username-quoted", "type": "text"}, {"comment": "", "category": "Other", "uuid": "5cffa079-7ad8-4f5d-89b0-4f60950d210f", "timestamp": "1560256633", "to_ids": false, "value": "@blackorbird", "disable_correlation": false, "object_relation": "username-quoted", "type": "text"}, {"comment": "", "category": "Other", "uuid": "5cffa079-65a4-4424-924c-4358950d210f", "timestamp": "1560256633", "to_ids": false, "value": "@cyberwar_15", "disable_correlation": false, "object_relation": "username-quoted", "type": "text"}, {"comment": "", "category": "Other", "uuid": "5cffa079-04d4-40ef-bf9b-48eb950d210f", "timestamp": "1560256633", "to_ids": false, "value": "Timele9527", "disable_correlation": false, "object_relation": "username", "type": "text"}, {"comment": "", "category": "Other", "uuid": "5cffa079-462c-4323-8b81-4519950d210f", "timestamp": "1560256633", "to_ids": false, "value": "Jun 10, 2019 4:04 AM", "disable_correlation": false, "object_relation": "creation-date", "type": "datetime"}], "distribution": "5", "meta-category": "misc", "name": "microblog"}, {"comment": "", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "uuid": "5cffa1ba-f954-4bd6-8380-42b7950d210f", "sharing_group_id": "0", "timestamp": "1560256954", "description": "File object describing a file with meta-information", "template_version": "17", "Attribute": [{"comment": "", "category": "Payload delivery", "uuid": "5cffa1bb-6218-4bf1-b298-42e3950d210f", "timestamp": "1560256955", "to_ids": true, "value": "1.doc", "disable_correlation": true, "object_relation": "filename", "type": "filename"}, {"comment": "", "category": "Payload delivery", "uuid": "5cffa1bb-14f0-43ed-821e-4ff8950d210f", "timestamp": "1560256955", "to_ids": true, "value": "6ead104743be6575e767986a71cf4bd9", "disable_correlation": false, "object_relation": "md5", "type": "md5"}], "distribution": "5", "meta-category": "file", "name": "file"}, {"comment": "", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "uuid": "5cffa1e7-67f8-4cc2-9c8a-4bbc950d210f", "sharing_group_id": "0", "timestamp": "1560256999", "description": "File object describing a file with meta-information", "template_version": "17", "Attribute": [{"comment": "", "category": "Payload delivery", "uuid": "5cffa1e7-81d4-4bbf-9bd8-40c4950d210f", "timestamp": "1560256999", "to_ids": true, "value": "03dbc1b3d79a4ff70f06fd6e67e00985", "disable_correlation": false, "object_relation": "md5", "type": "md5"}], "distribution": "5", "meta-category": "file", "name": "file"}, {"comment": "", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "uuid": "5cffa1f8-a3cc-4485-9eba-44ca950d210f", "sharing_group_id": "0", "timestamp": "1560257016", "description": "File object describing a file with meta-information", "template_version": "17", "Attribute": [{"comment": "", "category": "Payload delivery", "uuid": "5cffa1f9-90dc-4c7d-983a-4a88950d210f", "timestamp": "1560257017", "to_ids": true, "value": "The_Progress_and_Promise_of_the_Moon-Kim_Summit.doc", "disable_correlation": true, "object_relation": "filename", "type": "filename"}], "distribution": "5", "meta-category": "file", "name": "file"}], "analysis": "0", "extends_uuid": "", "published": false, "date": "2019-06-10", "Orgc": {"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f", "name": "CIRCL"}, "threat_level_id": "3", "uuid": "5cff9640-635c-4fac-b3f7-45ab950d210f"}}