2313 lines
No EOL
97 KiB
JSON
2313 lines
No EOL
97 KiB
JSON
{
|
|
"type": "bundle",
|
|
"id": "bundle--57ab2b08-fcd8-48b2-ba43-4cf3950d210f",
|
|
"objects": [
|
|
{
|
|
"type": "identity",
|
|
"spec_version": "2.1",
|
|
"id": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:28:57.000Z",
|
|
"modified": "2016-08-17T13:28:57.000Z",
|
|
"name": "CthulhuSPRL.be",
|
|
"identity_class": "organization"
|
|
},
|
|
{
|
|
"type": "report",
|
|
"spec_version": "2.1",
|
|
"id": "report--57ab2b08-fcd8-48b2-ba43-4cf3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:28:57.000Z",
|
|
"modified": "2016-08-17T13:28:57.000Z",
|
|
"name": "OSINT EFF Report Operation Manul",
|
|
"published": "2016-08-17T13:29:13Z",
|
|
"object_refs": [
|
|
"observed-data--57ab2b3f-9b80-49f5-99a5-4803950d210f",
|
|
"url--57ab2b3f-9b80-49f5-99a5-4803950d210f",
|
|
"observed-data--57ab2b3f-6aa4-42b7-aa4f-4fc6950d210f",
|
|
"url--57ab2b3f-6aa4-42b7-aa4f-4fc6950d210f",
|
|
"indicator--57ab2b63-0a20-413c-a455-4d0a950d210f",
|
|
"indicator--57ab2b64-07dc-4cd3-8915-4b7a950d210f",
|
|
"indicator--57ab2b64-d810-46d4-95dd-460a950d210f",
|
|
"indicator--57ab2b64-7f58-44ba-9c62-439c950d210f",
|
|
"indicator--57ab2b64-8058-452e-bd87-4690950d210f",
|
|
"indicator--57ab2b64-8fb0-49df-adea-4af6950d210f",
|
|
"indicator--57ab2b65-2794-43e1-88a1-408c950d210f",
|
|
"indicator--57ab2b65-5740-44d2-a60b-42d9950d210f",
|
|
"indicator--57ab2b8c-0824-456d-b8dc-41d2950d210f",
|
|
"indicator--57ab2b8c-41f8-4064-8673-4ae3950d210f",
|
|
"indicator--57ab2bbf-cbdc-4d20-af0d-4197950d210f",
|
|
"indicator--57ab2bbf-fc34-48e7-b446-4916950d210f",
|
|
"indicator--57ab2bc0-ee94-44d5-bce1-4870950d210f",
|
|
"indicator--57ab2bc0-b8fc-4ec6-8e49-4037950d210f",
|
|
"indicator--57ab2bc1-dbec-4e0e-ad97-48a4950d210f",
|
|
"indicator--57ab2bc1-1bf4-465f-9e1a-4dd7950d210f",
|
|
"indicator--57ab2bc2-c070-47ae-ae3e-453f950d210f",
|
|
"indicator--57ab2bc2-22d4-45dc-9512-4b94950d210f",
|
|
"indicator--57ab2bc2-acc0-46e3-9f9b-42dd950d210f",
|
|
"indicator--57ab2bc3-065c-4d01-94ed-4f9f950d210f",
|
|
"indicator--57ab2bc4-2c8c-41ad-87d4-4e83950d210f",
|
|
"indicator--57ab2bc4-7608-4c6f-984d-4d5a950d210f",
|
|
"indicator--57ab2bc5-82a4-4924-9a7d-4f0f950d210f",
|
|
"indicator--57ab2bc5-25a4-4d2a-be3d-479f950d210f",
|
|
"indicator--57ab2bc5-51d0-4100-8754-41b6950d210f",
|
|
"indicator--57ab2bc6-fff0-49e8-847e-49ad950d210f",
|
|
"indicator--57ab2bc6-2810-48cd-bc71-4124950d210f",
|
|
"indicator--57ab2bc7-dbb4-4e2f-ade8-4eb8950d210f",
|
|
"indicator--57ab2bc7-4770-47df-b8b7-4e3d950d210f",
|
|
"indicator--57ab2bc8-5118-40d4-8d66-4f9a950d210f",
|
|
"indicator--57ab2bc8-0d94-448d-a1e5-49aa950d210f",
|
|
"indicator--57ab2bc9-bd90-4e68-a68c-475a950d210f",
|
|
"indicator--57ab2bc9-7334-47c4-a504-42df950d210f",
|
|
"indicator--57ab2bca-1698-468f-8cd8-412e950d210f",
|
|
"indicator--57ab2bca-afbc-41da-9db5-412c950d210f",
|
|
"indicator--57ab2bcb-6730-4f2d-8530-46b5950d210f",
|
|
"indicator--57ab2bcb-e2c0-4630-a2c7-47b0950d210f",
|
|
"indicator--57ab2bcb-7280-4724-94ba-46e7950d210f",
|
|
"indicator--57ab2bcb-20b4-4873-bded-4c9c950d210f",
|
|
"indicator--57ab2bcb-dc08-47f9-ab62-48ae950d210f",
|
|
"indicator--57ab2bcc-4d10-4766-800c-420f950d210f",
|
|
"indicator--57ab2bcc-82b8-42ac-9abb-4deb950d210f",
|
|
"indicator--57ab2bcc-7200-4fa2-84d7-4aa7950d210f",
|
|
"indicator--57ab2bcd-c680-4c98-a8c7-4ee7950d210f",
|
|
"indicator--57ab33e7-cd60-4c68-bd03-4231950d210f",
|
|
"indicator--57ab33ed-0524-4a2e-aa35-41a3950d210f",
|
|
"indicator--57ab33f0-5e9c-4352-8d4f-4c99950d210f",
|
|
"indicator--57ab33f3-05f0-46cd-911d-4e03950d210f",
|
|
"indicator--57ab33f9-5dc4-4327-a516-47de950d210f",
|
|
"indicator--57ab33fd-be4c-45ff-894b-4ef4950d210f",
|
|
"indicator--57ab3402-8cdc-4f2a-9228-4895950d210f",
|
|
"indicator--57ab3406-c6c8-4c82-badd-4dd5950d210f",
|
|
"indicator--57ab33e9-818c-4d59-8b33-478e950d210f",
|
|
"indicator--57ab33ed-53f8-4c93-83f2-4791950d210f",
|
|
"indicator--57ab33f1-b74c-4210-9d96-4e94950d210f",
|
|
"indicator--57ab33f4-f790-4fb7-9a9a-4259950d210f",
|
|
"indicator--57ab33fa-9b58-4ebf-ad7d-4038950d210f",
|
|
"indicator--57ab33fe-d04c-45f8-874b-49ea950d210f",
|
|
"indicator--57ab3403-c560-4d52-8c6b-466a950d210f",
|
|
"indicator--57ab3408-faf0-4902-ab37-40ec950d210f",
|
|
"indicator--57ab340c-b8e8-4a2b-926e-4300950d210f",
|
|
"indicator--57ab3410-5980-457d-8178-488c950d210f",
|
|
"indicator--57ab3414-bd98-4403-bd13-49a7950d210f",
|
|
"indicator--57ab3417-a908-4ab3-b4c0-49db950d210f",
|
|
"indicator--57ab3407-dc54-4d85-bfc3-4351950d210f",
|
|
"indicator--57ab3409-9f14-4e2b-8a7d-4f11950d210f",
|
|
"indicator--57ab340d-1048-406c-890c-482f950d210f",
|
|
"indicator--57ab3411-ff50-4ec1-99ca-47ef950d210f",
|
|
"indicator--57ab3414-8ab8-4f0d-ba4e-4c4b950d210f",
|
|
"indicator--57ab3418-c8c4-4962-9300-431a950d210f",
|
|
"indicator--57b464a6-1154-4bb3-963b-47df950d210f",
|
|
"indicator--57b464a6-6a34-4963-a8fd-4ec5950d210f",
|
|
"indicator--57b464a7-532c-4578-9357-41d1950d210f",
|
|
"indicator--57b464a8-18b0-4282-b046-4a5d950d210f",
|
|
"indicator--57b464a9-5110-4784-b3bb-426c950d210f",
|
|
"indicator--57b464a9-b154-4770-8861-4216950d210f",
|
|
"indicator--57b464aa-e170-4336-8e9e-42c6950d210f",
|
|
"indicator--57b464aa-445c-47e4-9558-4cab950d210f",
|
|
"indicator--57b464ad-26bc-4a20-8ff7-4ccd950d210f",
|
|
"indicator--57b464ae-f624-408c-a04b-42e0950d210f",
|
|
"indicator--57b464af-cf08-41be-8983-46e5950d210f",
|
|
"indicator--57b4656f-19c0-4631-83bb-4ab8950d210f",
|
|
"indicator--57b46570-18fc-4b58-afd8-401d950d210f",
|
|
"indicator--57b46570-79e0-4de9-a73d-49f3950d210f",
|
|
"indicator--57b46570-8508-4c40-8810-478f950d210f",
|
|
"indicator--57b46570-eb4c-4127-8640-4845950d210f",
|
|
"indicator--57b46570-0ff8-43af-89ab-4ec0950d210f",
|
|
"indicator--57b465df-13c0-4cf6-be76-4917950d210f",
|
|
"indicator--57b46698-58c4-417b-bb33-4ee9950d210f"
|
|
],
|
|
"labels": [
|
|
"Threat-Report",
|
|
"misp:tool=\"MISP-STIX-Converter\"",
|
|
"OSINT"
|
|
],
|
|
"object_marking_refs": [
|
|
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
|
|
]
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--57ab2b3f-9b80-49f5-99a5-4803950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:25:19.000Z",
|
|
"modified": "2016-08-10T13:25:19.000Z",
|
|
"first_observed": "2016-08-10T13:25:19Z",
|
|
"last_observed": "2016-08-10T13:25:19Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"url--57ab2b3f-9b80-49f5-99a5-4803950d210f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"link\"",
|
|
"misp:category=\"External analysis\""
|
|
]
|
|
},
|
|
{
|
|
"type": "url",
|
|
"spec_version": "2.1",
|
|
"id": "url--57ab2b3f-9b80-49f5-99a5-4803950d210f",
|
|
"value": "https://www.eff.org/files/2016/08/03/i-got-a-letter-from-the-government.pdf"
|
|
},
|
|
{
|
|
"type": "observed-data",
|
|
"spec_version": "2.1",
|
|
"id": "observed-data--57ab2b3f-6aa4-42b7-aa4f-4fc6950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:25:19.000Z",
|
|
"modified": "2016-08-10T13:25:19.000Z",
|
|
"first_observed": "2016-08-10T13:25:19Z",
|
|
"last_observed": "2016-08-10T13:25:19Z",
|
|
"number_observed": 1,
|
|
"object_refs": [
|
|
"url--57ab2b3f-6aa4-42b7-aa4f-4fc6950d210f"
|
|
],
|
|
"labels": [
|
|
"misp:type=\"link\"",
|
|
"misp:category=\"External analysis\""
|
|
]
|
|
},
|
|
{
|
|
"type": "url",
|
|
"spec_version": "2.1",
|
|
"id": "url--57ab2b3f-6aa4-42b7-aa4f-4fc6950d210f",
|
|
"value": "https://www.eff.org/wp/operation-manul"
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2b63-0a20-413c-a455-4d0a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:25:55.000Z",
|
|
"modified": "2016-08-10T13:25:55.000Z",
|
|
"pattern": "[domain-name:value = 'axroot.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:25:55Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2b64-07dc-4cd3-8915-4b7a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:25:56.000Z",
|
|
"modified": "2016-08-10T13:25:56.000Z",
|
|
"pattern": "[domain-name:value = 'kaliex.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:25:56Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2b64-d810-46d4-95dd-460a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:25:56.000Z",
|
|
"modified": "2016-08-10T13:25:56.000Z",
|
|
"pattern": "[domain-name:value = 'adobeair.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:25:56Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2b64-7f58-44ba-9c62-439c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:25:56.000Z",
|
|
"modified": "2016-08-10T13:25:56.000Z",
|
|
"pattern": "[domain-name:value = 'mangoco.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:25:56Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2b64-8058-452e-bd87-4690950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:25:56.000Z",
|
|
"modified": "2016-08-10T13:25:56.000Z",
|
|
"pattern": "[domain-name:value = 'orange2015.net']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:25:56Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2b64-8fb0-49df-adea-4af6950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:25:56.000Z",
|
|
"modified": "2016-08-10T13:25:56.000Z",
|
|
"pattern": "[domain-name:value = 'accountslogin.services']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:25:56Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2b65-2794-43e1-88a1-408c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:25:57.000Z",
|
|
"modified": "2016-08-10T13:25:57.000Z",
|
|
"pattern": "[domain-name:value = 'adobeinstall.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:25:57Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2b65-5740-44d2-a60b-42d9950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:25:57.000Z",
|
|
"modified": "2016-08-10T13:25:57.000Z",
|
|
"pattern": "[domain-name:value = 'dropboxonline.com']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:25:57Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"domain\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2b8c-0824-456d-b8dc-41d2950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:26:36.000Z",
|
|
"modified": "2016-08-10T13:26:36.000Z",
|
|
"pattern": "[domain-name:value = 'jaysonj.no-ip.biz']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:26:36Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2b8c-41f8-4064-8673-4ae3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:26:36.000Z",
|
|
"modified": "2016-08-10T13:26:36.000Z",
|
|
"pattern": "[domain-name:value = 'adobe-flashviewer.accountslogin.services']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:26:36Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"hostname\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bbf-cbdc-4d20-af0d-4197950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:27.000Z",
|
|
"modified": "2016-08-10T13:27:27.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '0491f4e55158d745fd1653950c89fcc9b37d3c1102680bd3ce67616a36bb2592']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:27Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bbf-fc34-48e7-b446-4916950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:27.000Z",
|
|
"modified": "2016-08-10T13:27:27.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '06529ac1d3388732ebca75b8ee0adf0bc7f45d4c448ec98223dd7a258a0f1f33']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:27Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc0-ee94-44d5-bce1-4870950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:28.000Z",
|
|
"modified": "2016-08-10T13:27:28.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '1192b5111f7c75417215a1285a20147f5ab085368fa95d74e7603d26736057ac']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc0-b8fc-4ec6-8e49-4037950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:28.000Z",
|
|
"modified": "2016-08-10T13:27:28.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '1e3966e77ad1cbf3e3ef76803fbf92300b2b88af39650a1208520e0cdc05645b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc1-dbec-4e0e-ad97-48a4950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:29.000Z",
|
|
"modified": "2016-08-10T13:27:29.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '2431ff8ba00923a9c115a57e541d9d20e0a68b6cb1b48b87e7797864cf07dfab']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:29Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc1-1bf4-465f-9e1a-4dd7950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:29.000Z",
|
|
"modified": "2016-08-10T13:27:29.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '345773dc4215c8c189d21536755614ca7b89082b96563239e363dd72c0cd8c68']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:29Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc2-c070-47ae-ae3e-453f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:30.000Z",
|
|
"modified": "2016-08-10T13:27:30.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '373231f5be17e09e4ce94f76b35e5be57c961d6c8a9286b2e20e203d53b3c9dd']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:30Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc2-22d4-45dc-9512-4b94950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:30.000Z",
|
|
"modified": "2016-08-10T13:27:30.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '39802d53ae4a29c528626b0870872040dc5c994fb3b6b9e4a3b982144ad56e6c']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:30Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc2-acc0-46e3-9f9b-42dd950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:30.000Z",
|
|
"modified": "2016-08-10T13:27:30.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '40d30bc2db27e2a8a12cdeb5aae19f04064e5a1775bd3e6cf61a7070b797d3b3']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:30Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc3-065c-4d01-94ed-4f9f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:31.000Z",
|
|
"modified": "2016-08-10T13:27:31.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '40e9c694901aeb27993a8cd81f872076ee430e151f64af06993eb79442103ef8']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:31Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc4-2c8c-41ad-87d4-4e83950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:32.000Z",
|
|
"modified": "2016-08-10T13:27:32.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '4730c6033d8644c0aae46003bab3254e4beb62187573ffb5ba5bc95a28ddcd93']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:32Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc4-7608-4c6f-984d-4d5a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:32.000Z",
|
|
"modified": "2016-08-10T13:27:32.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '4f1923485e8cdd052467d335a6384f93cd1d50b5d927aea471e56290be29ffa3']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:32Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc5-82a4-4924-9a7d-4f0f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:33.000Z",
|
|
"modified": "2016-08-10T13:27:33.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '576ca2b0c5fe1c756c245cb82d6a2ecce7f6976d5c3f3b338f686e06955032cb']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc5-25a4-4d2a-be3d-479f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:33.000Z",
|
|
"modified": "2016-08-10T13:27:33.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '5e322d208d61dcbf17914e24103710c52878e8cf50957f3d336736f4a1851951']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc5-51d0-4100-8754-41b6950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:33.000Z",
|
|
"modified": "2016-08-10T13:27:33.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '652ec150db9a191942807ee5cf4772e75dfac562739477eacc6655fbec880ad7']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc6-fff0-49e8-847e-49ad950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:34.000Z",
|
|
"modified": "2016-08-10T13:27:34.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '65af112ce229ad888bf4bbba1e3dba701e0e68c9caf81543bb395a8b8192ba8e']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:34Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc6-2810-48cd-bc71-4124950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:34.000Z",
|
|
"modified": "2016-08-10T13:27:34.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '6eea4a67305f67cc7c016256e93eb816de32b6e9ad700f75828be9f97c28c0e0']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:34Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc7-dbb4-4e2f-ade8-4eb8950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:35.000Z",
|
|
"modified": "2016-08-10T13:27:35.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '75ee00a36d324a89fc9ef4d7dbe606b885ec072388ef7b55d39112af7dbca665']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:35Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc7-4770-47df-b8b7-4e3d950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:35.000Z",
|
|
"modified": "2016-08-10T13:27:35.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '75f51845de4d0deae8aaab737a71bb8aed14bfa4919712bcdea212f62b70c07f']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:35Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc8-5118-40d4-8d66-4f9a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:36.000Z",
|
|
"modified": "2016-08-10T13:27:36.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '778a01389b17a8ff20c445e0856b3704ac50844faa8d36c01e0ff02518e4c6d3']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:36Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc8-0d94-448d-a1e5-49aa950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:36.000Z",
|
|
"modified": "2016-08-10T13:27:36.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '8c33b645e6362ab7e8c8a9989715193b4c9655fd576812218f3957c3fff8c429']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:36Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc9-bd90-4e68-a68c-475a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:37.000Z",
|
|
"modified": "2016-08-10T13:27:37.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '8d054753e0ed754398835bed794ba4fae64a2efb018f98d3c61064de8aaa231d']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:37Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bc9-7334-47c4-a504-42df950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:37.000Z",
|
|
"modified": "2016-08-10T13:27:37.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '91d251b11c59b5e25e0c1ae55421893fce8f180a97e2eef88122c61e8cdf1bae']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:37Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bca-1698-468f-8cd8-412e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:38.000Z",
|
|
"modified": "2016-08-10T13:27:38.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '926a0196e4a72ed6eb20b51953cc17e8856ea9c0ef554681b7d7f0ecad870a2e']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:38Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bca-afbc-41da-9db5-412c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:38.000Z",
|
|
"modified": "2016-08-10T13:27:38.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = '99e699e358be9e59cfad6124f44a96d3d1577edf9767afe17281adb37d901e22']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:38Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bcb-6730-4f2d-8530-46b5950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:39.000Z",
|
|
"modified": "2016-08-10T13:27:39.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = 'a91c2cad20935a85d6eed72ef663254396914811f043018732d29276424a9578']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:39Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bcb-e2c0-4630-a2c7-47b0950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:39.000Z",
|
|
"modified": "2016-08-10T13:27:39.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = 'ade5bd96bfba79051f8e8ed8fe973edd89e5f1ec6469393967c3ad7519a95650']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:39Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bcb-7280-4724-94ba-46e7950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:39.000Z",
|
|
"modified": "2016-08-10T13:27:39.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = 'b002e8b6406fbdf3de9bfcb3493e61c8a44b331f53125e8fed9daa351c49fd34']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:39Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bcb-20b4-4873-bded-4c9c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:39.000Z",
|
|
"modified": "2016-08-10T13:27:39.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = 'd803c4d736bcb247d23735a7160b93c2f3d98de5d432680f5eaf9212f965248c']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:39Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bcb-dc08-47f9-ab62-48ae950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:39.000Z",
|
|
"modified": "2016-08-10T13:27:39.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = 'e4381ad27b10d895ad8338ba399221d385653b83b8d5dbd5a32cb86a0c318d44']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:39Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bcc-4d10-4766-800c-420f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:40.000Z",
|
|
"modified": "2016-08-10T13:27:40.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = 'eccb3d7d1e8a7cd27c7caf21885c95122eed28361651e8e47b8c02828b232c7e']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:40Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bcc-82b8-42ac-9abb-4deb950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:40.000Z",
|
|
"modified": "2016-08-10T13:27:40.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = 'f56c545a3157f1cf753de5ac56bb52e5af42bc6b8225d26aafdce3b430287f34']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:40Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bcc-7200-4fa2-84d7-4aa7950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:40.000Z",
|
|
"modified": "2016-08-10T13:27:40.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = 'fc49b37b879af6e675f223d324d32c894ba83952b2ee109d52bfa9bd8212e005']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:40Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab2bcd-c680-4c98-a8c7-4ee7950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T13:27:41.000Z",
|
|
"modified": "2016-08-10T13:27:41.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[file:hashes.SHA256 = 'f9dd8ebb062842798d53e78633ed9ca296f4a93dafb0fe60320a34a3d58d78d4']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T13:27:41Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha256\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab33e7-cd60-4c68-bd03-4231950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:15.000Z",
|
|
"modified": "2016-08-10T14:02:15.000Z",
|
|
"description": "Automatically added (via 0491f4e55158d745fd1653950c89fcc9b37d3c1102680bd3ce67616a36bb2592)",
|
|
"pattern": "[file:hashes.MD5 = 'e5a5ecc04210ced0c5e7871bc5942518']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:15Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab33ed-0524-4a2e-aa35-41a3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:21.000Z",
|
|
"modified": "2016-08-10T14:02:21.000Z",
|
|
"description": "Automatically added (via 1e3966e77ad1cbf3e3ef76803fbf92300b2b88af39650a1208520e0cdc05645b)",
|
|
"pattern": "[file:hashes.MD5 = '405dba47e2b03f53db2101444e6a925c']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:21Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab33f0-5e9c-4352-8d4f-4c99950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:24.000Z",
|
|
"modified": "2016-08-10T14:02:24.000Z",
|
|
"description": "Automatically added (via 345773dc4215c8c189d21536755614ca7b89082b96563239e363dd72c0cd8c68)",
|
|
"pattern": "[file:hashes.MD5 = '34d19df50f7dc936b5e4e13bb29a74ac']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:24Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab33f3-05f0-46cd-911d-4e03950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:27.000Z",
|
|
"modified": "2016-08-10T14:02:27.000Z",
|
|
"description": "Automatically added (via 373231f5be17e09e4ce94f76b35e5be57c961d6c8a9286b2e20e203d53b3c9dd)",
|
|
"pattern": "[file:hashes.MD5 = '6a4df36f8f92b1b3c99949936e4407ed']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:27Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab33f9-5dc4-4327-a516-47de950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:33.000Z",
|
|
"modified": "2016-08-10T14:02:33.000Z",
|
|
"description": "Automatically added (via 4f1923485e8cdd052467d335a6384f93cd1d50b5d927aea471e56290be29ffa3)",
|
|
"pattern": "[file:hashes.MD5 = 'f000ca9522aafa0c54b863528228a43b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:33Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab33fd-be4c-45ff-894b-4ef4950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:37.000Z",
|
|
"modified": "2016-08-10T14:02:37.000Z",
|
|
"description": "Automatically added (via 5e322d208d61dcbf17914e24103710c52878e8cf50957f3d336736f4a1851951)",
|
|
"pattern": "[file:hashes.MD5 = '748e0825e487071146fdf811d55e4cc5']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:37Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab3402-8cdc-4f2a-9228-4895950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:42.000Z",
|
|
"modified": "2016-08-10T14:02:42.000Z",
|
|
"description": "Automatically added (via 75ee00a36d324a89fc9ef4d7dbe606b885ec072388ef7b55d39112af7dbca665)",
|
|
"pattern": "[file:hashes.MD5 = 'd1bd6495636412713f10d5014cd32582']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:42Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab3406-c6c8-4c82-badd-4dd5950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:46.000Z",
|
|
"modified": "2016-08-10T14:02:46.000Z",
|
|
"description": "Automatically added (via 8d054753e0ed754398835bed794ba4fae64a2efb018f98d3c61064de8aaa231d)",
|
|
"pattern": "[file:hashes.MD5 = '55cc4f9e159a225709dba3b570a722c1']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:46Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab33e9-818c-4d59-8b33-478e950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:17.000Z",
|
|
"modified": "2016-08-10T14:02:17.000Z",
|
|
"description": "Automatically added (via 0491f4e55158d745fd1653950c89fcc9b37d3c1102680bd3ce67616a36bb2592)",
|
|
"pattern": "[file:hashes.SHA1 = '7daa85fa02ee70bbd70c51affae4e6f835f1455c']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:17Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab33ed-53f8-4c93-83f2-4791950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:21.000Z",
|
|
"modified": "2016-08-10T14:02:21.000Z",
|
|
"description": "Automatically added (via 1e3966e77ad1cbf3e3ef76803fbf92300b2b88af39650a1208520e0cdc05645b)",
|
|
"pattern": "[file:hashes.SHA1 = 'ed769ff77f46730a9b58a111c52f9e498ec00838']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:21Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab33f1-b74c-4210-9d96-4e94950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:25.000Z",
|
|
"modified": "2016-08-10T14:02:25.000Z",
|
|
"description": "Automatically added (via 345773dc4215c8c189d21536755614ca7b89082b96563239e363dd72c0cd8c68)",
|
|
"pattern": "[file:hashes.SHA1 = '65da12d59bf64f80f728c8dc9fa46e18f6ad08cb']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:25Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab33f4-f790-4fb7-9a9a-4259950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:28.000Z",
|
|
"modified": "2016-08-10T14:02:28.000Z",
|
|
"description": "Automatically added (via 373231f5be17e09e4ce94f76b35e5be57c961d6c8a9286b2e20e203d53b3c9dd)",
|
|
"pattern": "[file:hashes.SHA1 = '43eeda0b33b97f18f1e4eb885e4211f1ae33bcc8']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:28Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab33fa-9b58-4ebf-ad7d-4038950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:34.000Z",
|
|
"modified": "2016-08-10T14:02:34.000Z",
|
|
"description": "Automatically added (via 4f1923485e8cdd052467d335a6384f93cd1d50b5d927aea471e56290be29ffa3)",
|
|
"pattern": "[file:hashes.SHA1 = 'c636e88b9e8079ba086f5cdb132fa39e747d0f23']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:34Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab33fe-d04c-45f8-874b-49ea950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:38.000Z",
|
|
"modified": "2016-08-10T14:02:38.000Z",
|
|
"description": "Automatically added (via 5e322d208d61dcbf17914e24103710c52878e8cf50957f3d336736f4a1851951)",
|
|
"pattern": "[file:hashes.SHA1 = 'a5baf0d5cac512713ae3a6925d02b592a2bcbb1b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:38Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab3403-c560-4d52-8c6b-466a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:43.000Z",
|
|
"modified": "2016-08-10T14:02:43.000Z",
|
|
"description": "Automatically added (via 75ee00a36d324a89fc9ef4d7dbe606b885ec072388ef7b55d39112af7dbca665)",
|
|
"pattern": "[file:hashes.SHA1 = '100f40a5ae4e748e8e74f9dc01e692697bfbde33']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:43Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab3408-faf0-4902-ab37-40ec950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:48.000Z",
|
|
"modified": "2016-08-10T14:02:48.000Z",
|
|
"description": "Automatically added (via 91d251b11c59b5e25e0c1ae55421893fce8f180a97e2eef88122c61e8cdf1bae)",
|
|
"pattern": "[file:hashes.MD5 = '00dd12e8106d4679c580a3d5d5e33fb7']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:48Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab340c-b8e8-4a2b-926e-4300950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:52.000Z",
|
|
"modified": "2016-08-10T14:02:52.000Z",
|
|
"description": "Automatically added (via a91c2cad20935a85d6eed72ef663254396914811f043018732d29276424a9578)",
|
|
"pattern": "[file:hashes.MD5 = '643b0db380149d220ce9074a29f83841']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:52Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab3410-5980-457d-8178-488c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:56.000Z",
|
|
"modified": "2016-08-10T14:02:56.000Z",
|
|
"description": "Automatically added (via d803c4d736bcb247d23735a7160b93c2f3d98de5d432680f5eaf9212f965248c)",
|
|
"pattern": "[file:hashes.MD5 = '4bbcc24d287d2d2dbca475047976d178']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:56Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab3414-bd98-4403-bd13-49a7950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:03:00.000Z",
|
|
"modified": "2016-08-10T14:03:00.000Z",
|
|
"description": "Automatically added (via eccb3d7d1e8a7cd27c7caf21885c95122eed28361651e8e47b8c02828b232c7e)",
|
|
"pattern": "[file:hashes.MD5 = 'ca6f9ce45b99751dc63d16a690390ce8']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:03:00Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab3417-a908-4ab3-b4c0-49db950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:03:03.000Z",
|
|
"modified": "2016-08-10T14:03:03.000Z",
|
|
"description": "Automatically added (via fc49b37b879af6e675f223d324d32c894ba83952b2ee109d52bfa9bd8212e005)",
|
|
"pattern": "[file:hashes.MD5 = '274ba30d17c6b1ad63df9d03dce36be8']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:03:03Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"md5\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab3407-dc54-4d85-bfc3-4351950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:47.000Z",
|
|
"modified": "2016-08-10T14:02:47.000Z",
|
|
"description": "Automatically added (via 8d054753e0ed754398835bed794ba4fae64a2efb018f98d3c61064de8aaa231d)",
|
|
"pattern": "[file:hashes.SHA1 = 'adb7fc1cc9dd76725c1a81c5f17d03de64f73296']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:47Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab3409-9f14-4e2b-8a7d-4f11950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:49.000Z",
|
|
"modified": "2016-08-10T14:02:49.000Z",
|
|
"description": "Automatically added (via 91d251b11c59b5e25e0c1ae55421893fce8f180a97e2eef88122c61e8cdf1bae)",
|
|
"pattern": "[file:hashes.SHA1 = '4b584d44c2bbb1a54af07f4cf744010b769a8d07']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:49Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab340d-1048-406c-890c-482f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:53.000Z",
|
|
"modified": "2016-08-10T14:02:53.000Z",
|
|
"description": "Automatically added (via a91c2cad20935a85d6eed72ef663254396914811f043018732d29276424a9578)",
|
|
"pattern": "[file:hashes.SHA1 = '8aff7278e29341030e4b4c3ff1ae644303fe896b']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:53Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab3411-ff50-4ec1-99ca-47ef950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:02:57.000Z",
|
|
"modified": "2016-08-10T14:02:57.000Z",
|
|
"description": "Automatically added (via d803c4d736bcb247d23735a7160b93c2f3d98de5d432680f5eaf9212f965248c)",
|
|
"pattern": "[file:hashes.SHA1 = '710733f641bfaccd1f8fe9949b7d7485be17a0dd']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:02:57Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab3414-8ab8-4f0d-ba4e-4c4b950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:03:00.000Z",
|
|
"modified": "2016-08-10T14:03:00.000Z",
|
|
"description": "Automatically added (via eccb3d7d1e8a7cd27c7caf21885c95122eed28361651e8e47b8c02828b232c7e)",
|
|
"pattern": "[file:hashes.SHA1 = '916df5b73b75f03e86c78fc3d19ef5d2dc1b7b92']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:03:00Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57ab3418-c8c4-4962-9300-431a950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-10T14:03:04.000Z",
|
|
"modified": "2016-08-10T14:03:04.000Z",
|
|
"description": "Automatically added (via fc49b37b879af6e675f223d324d32c894ba83952b2ee109d52bfa9bd8212e005)",
|
|
"pattern": "[file:hashes.SHA1 = '7748a42d7db1ddd455c1ac9017f05c8b9620dd35']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-10T14:03:04Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Payload delivery"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"sha1\"",
|
|
"misp:category=\"Payload delivery\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b464a6-1154-4bb3-963b-47df950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:20:38.000Z",
|
|
"modified": "2016-08-17T13:20:38.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '111.90.150.70']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:20:38Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b464a6-6a34-4963-a8fd-4ec5950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:20:38.000Z",
|
|
"modified": "2016-08-17T13:20:38.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '111.90.150.221']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:20:38Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b464a7-532c-4578-9357-41d1950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:20:39.000Z",
|
|
"modified": "2016-08-17T13:20:39.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '184.168.221.61']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:20:39Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b464a8-18b0-4282-b046-4a5d950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:20:40.000Z",
|
|
"modified": "2016-08-17T13:20:40.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.63.202.94']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:20:40Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b464a9-5110-4784-b3bb-426c950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:20:41.000Z",
|
|
"modified": "2016-08-17T13:20:41.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.39.10.93']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:20:41Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b464a9-b154-4770-8861-4216950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:20:41.000Z",
|
|
"modified": "2016-08-17T13:20:41.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.32.230.24']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:20:41Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b464aa-e170-4336-8e9e-42c6950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:20:42.000Z",
|
|
"modified": "2016-08-17T13:20:42.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '65.19.141.204']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:20:42Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b464aa-445c-47e4-9558-4cab950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:20:42.000Z",
|
|
"modified": "2016-08-17T13:20:42.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '111.90.140.11']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:20:42Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b464ad-26bc-4a20-8ff7-4ccd950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:20:45.000Z",
|
|
"modified": "2016-08-17T13:20:45.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.63.197.10']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:20:45Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b464ae-f624-408c-a04b-42e0950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:20:46.000Z",
|
|
"modified": "2016-08-17T13:20:46.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.62.160.216']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:20:46Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b464af-cf08-41be-8983-46e5950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:20:47.000Z",
|
|
"modified": "2016-08-17T13:20:47.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '74.208.167.252']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:20:47Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b4656f-19c0-4631-83bb-4ab8950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:23:59.000Z",
|
|
"modified": "2016-08-17T13:23:59.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.202.189.170']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:23:59Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b46570-18fc-4b58-afd8-401d950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:24:00.000Z",
|
|
"modified": "2016-08-17T13:24:00.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '174.120.120.15']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:24:00Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b46570-79e0-4de9-a73d-49f3950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:24:00.000Z",
|
|
"modified": "2016-08-17T13:24:00.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '208.73.211.167']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:24:00Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b46570-8508-4c40-8810-478f950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:24:00.000Z",
|
|
"modified": "2016-08-17T13:24:00.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '208.73.210.29']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:24:00Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b46570-eb4c-4127-8640-4845950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:24:00.000Z",
|
|
"modified": "2016-08-17T13:24:00.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '209.99.40.220']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:24:00Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b46570-0ff8-43af-89ab-4ec0950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:24:00.000Z",
|
|
"modified": "2016-08-17T13:24:00.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '68.178.232.99']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:24:00Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b465df-13c0-4cf6-be76-4917950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:25:51.000Z",
|
|
"modified": "2016-08-17T13:25:51.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '209.99.40.225']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:25:51Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "indicator",
|
|
"spec_version": "2.1",
|
|
"id": "indicator--57b46698-58c4-417b-bb33-4ee9950d210f",
|
|
"created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
|
|
"created": "2016-08-17T13:28:56.000Z",
|
|
"modified": "2016-08-17T13:28:56.000Z",
|
|
"description": "Imported via the Freetext Import Tool",
|
|
"pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '209.99.40.224']",
|
|
"pattern_type": "stix",
|
|
"pattern_version": "2.1",
|
|
"valid_from": "2016-08-17T13:28:56Z",
|
|
"kill_chain_phases": [
|
|
{
|
|
"kill_chain_name": "misp-category",
|
|
"phase_name": "Network activity"
|
|
}
|
|
],
|
|
"labels": [
|
|
"misp:type=\"ip-dst\"",
|
|
"misp:category=\"Network activity\"",
|
|
"misp:to_ids=\"True\""
|
|
]
|
|
},
|
|
{
|
|
"type": "marking-definition",
|
|
"spec_version": "2.1",
|
|
"id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
|
|
"created": "2017-01-20T00:00:00.000Z",
|
|
"definition_type": "tlp",
|
|
"name": "TLP:WHITE",
|
|
"definition": {
|
|
"tlp": "white"
|
|
}
|
|
}
|
|
]
|
|
} |