539 lines
No EOL
16 KiB
JSON
539 lines
No EOL
16 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "0",
|
|
"date": "2016-09-30",
|
|
"extends_uuid": "",
|
|
"info": "Malspam 2016-09-30 (.wsf in .zip) - campaign: \"Emailing\"",
|
|
"publish_timestamp": "1475221711",
|
|
"published": true,
|
|
"threat_level_id": "3",
|
|
"timestamp": "1475220594",
|
|
"uuid": "57ee144e-ad24-4175-ba0e-4943950d210f",
|
|
"Orgc": {
|
|
"name": "CIRCL",
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": "0",
|
|
"name": "tlp:white",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#3b7500",
|
|
"local": "0",
|
|
"name": "circl:incident-classification=\"malware\"",
|
|
"relationship_type": ""
|
|
}
|
|
],
|
|
"Attribute": [
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220584",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee1468-cffc-413d-8a9e-4b5b950d210f",
|
|
"value": "104.28.6.177"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220584",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee1468-7684-4310-b09a-48c8950d210f",
|
|
"value": "122.114.89.240"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220584",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee1468-5610-47ac-8a71-45f7950d210f",
|
|
"value": "173.254.28.107"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220585",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee1469-57e8-466e-a028-4e1e950d210f",
|
|
"value": "182.253.236.10"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220585",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee1469-b690-49f8-901c-4cb3950d210f",
|
|
"value": "198.54.115.140"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220585",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee1469-5db8-4f6a-b81b-4b38950d210f",
|
|
"value": "37.140.192.124"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220585",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee1469-8704-477f-a7ed-47c0950d210f",
|
|
"value": "37.46.129.210"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220585",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee1469-069c-44e9-a17a-4e0a950d210f",
|
|
"value": "46.30.213.149"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220586",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee146a-4738-4889-9772-4e0d950d210f",
|
|
"value": "47.90.54.5"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220586",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee146a-5128-49cc-9d68-4f70950d210f",
|
|
"value": "50.87.248.224"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220586",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee146a-78d4-4582-8c14-4d14950d210f",
|
|
"value": "52.8.203.224"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220586",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee146a-8b1c-4886-9359-4098950d210f",
|
|
"value": "62.84.69.75"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220587",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee146b-dcc8-44f9-a106-4ebf950d210f",
|
|
"value": "67.20.75.70"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220587",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee146b-3978-4631-b186-410f950d210f",
|
|
"value": "69.89.22.245"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220587",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee146b-9f64-43d1-8893-4d60950d210f",
|
|
"value": "74.220.207.148"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220587",
|
|
"to_ids": true,
|
|
"type": "ip-dst",
|
|
"uuid": "57ee146b-9de0-4efe-96c5-4dde950d210f",
|
|
"value": "85.118.45.12"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220587",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "57ee146b-33a0-4ba6-a73d-4147950d210f",
|
|
"value": "allinfo.xyz.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220588",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ee146c-823c-4610-90ea-4ec1950d210f",
|
|
"value": "asknaija.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220588",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ee146c-8f80-46ec-b584-4f44950d210f",
|
|
"value": "autokover.ru"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220588",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ee146c-c5a0-44e4-b27d-494d950d210f",
|
|
"value": "ayobuy.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220588",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ee146c-7cc4-43e4-937a-4f7b950d210f",
|
|
"value": "b2c-batteries.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220589",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ee146d-9718-47a8-b47d-4d7b950d210f",
|
|
"value": "badimalik.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220589",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ee146d-2780-4a9b-a234-428a950d210f",
|
|
"value": "banquetesycoctelesfsf.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220589",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ee146d-a9bc-4ae8-8541-4e49950d210f",
|
|
"value": "bantayan.net"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220589",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ee146d-d528-40ad-aa71-4358950d210f",
|
|
"value": "bestsourcecode.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220589",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ee146d-1f24-4e8d-82ee-4d42950d210f",
|
|
"value": "bj-fzwb.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220590",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ee146e-b41c-4771-86b0-46ab950d210f",
|
|
"value": "bjjmmt.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220590",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ee146e-1de4-4c52-a713-4e0a950d210f",
|
|
"value": "bladeandsoultr.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220590",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ee146e-320c-4a1c-9ccd-4551950d210f",
|
|
"value": "bobernichow.com"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220590",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee146e-08b4-4612-a818-46a7950d210f",
|
|
"value": "http://allinfo.xyz.com/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220591",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee146f-852c-48c7-9b9a-4cdd950d210f",
|
|
"value": "http://asknaija.com/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220591",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee146f-b82c-44cb-80d5-43f7950d210f",
|
|
"value": "http://autokover.ru/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220591",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee146f-a2d4-4105-8f3a-42f3950d210f",
|
|
"value": "http://ayobuy.com/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220591",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee146f-010c-4094-a38f-4233950d210f",
|
|
"value": "http://b2c-batteries.com/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220591",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee146f-a1dc-4db1-8b4b-442b950d210f",
|
|
"value": "http://badimalik.com/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220592",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee1470-ef6c-4498-9549-48aa950d210f",
|
|
"value": "http://banquetesycoctelesfsf.com/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220592",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee1470-dd3c-4868-a144-4af2950d210f",
|
|
"value": "http://bantayan.net/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220592",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee1470-47a8-4fe4-a1f4-4725950d210f",
|
|
"value": "http://bestsourcecode.com/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220592",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee1470-18bc-4b3c-989b-4bbd950d210f",
|
|
"value": "http://bj-fzwb.com/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220592",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee1470-206c-4db3-81e1-43ec950d210f",
|
|
"value": "http://bjjmmt.com/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220593",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee1471-6b64-4b73-b512-452d950d210f",
|
|
"value": "http://bladeandsoultr.com/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220593",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee1471-3cd8-4220-9ab9-40f9950d210f",
|
|
"value": "http://bobernichow.com/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220593",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee1471-1658-4ac4-8530-4f72950d210f",
|
|
"value": "http://kashira.potolki.bz/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220593",
|
|
"to_ids": true,
|
|
"type": "url",
|
|
"uuid": "57ee1471-5b84-486d-b683-4107950d210f",
|
|
"value": "http://shuspong.com/938fhnr3"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220593",
|
|
"to_ids": true,
|
|
"type": "hostname",
|
|
"uuid": "57ee1471-1538-4e59-a391-49bd950d210f",
|
|
"value": "kashira.potolki.bz"
|
|
},
|
|
{
|
|
"category": "Network activity",
|
|
"comment": "download location",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"timestamp": "1475220594",
|
|
"to_ids": true,
|
|
"type": "domain",
|
|
"uuid": "57ee1472-356c-44e8-a795-431e950d210f",
|
|
"value": "shuspong.com"
|
|
}
|
|
]
|
|
}
|
|
} |