1172 lines
42 KiB
JSON
1172 lines
42 KiB
JSON
|
{"response":[{
|
||
|
|
"Event": {
|
||
|
|
"id": "140",
|
||
|
|
"orgc_id": "2",
|
||
|
|
"org_id": "2",
|
||
|
|
"date": "2019-09-24",
|
||
|
|
"threat_level_id": "1",
|
||
|
|
"info": "MISSING LINK: Tibetan Groups Targeted with Mobile Exploits",
|
||
|
|
"published": true,
|
||
|
|
"uuid": "5bec8d43-b990-4129-a9f4-45d08064ab0b",
|
||
|
|
"attribute_count": "71",
|
||
|
|
"analysis": "1",
|
||
|
|
"timestamp": "1569271112",
|
||
|
|
"distribution": "1",
|
||
|
|
"proposal_email_lock": false,
|
||
|
|
"locked": false,
|
||
|
|
"publish_timestamp": "1569271150",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"Org": {
|
||
|
|
"id": "2",
|
||
|
|
"name": "citizenlab",
|
||
|
|
"uuid": "581b5fea-818c-441a-bd1d-49798e96ca05"
|
||
|
|
},
|
||
|
|
"Orgc": {
|
||
|
|
"id": "2",
|
||
|
|
"name": "citizenlab",
|
||
|
|
"uuid": "581b5fea-818c-441a-bd1d-49798e96ca05"
|
||
|
|
},
|
||
|
|
"Attribute": [
|
||
|
|
{
|
||
|
|
"id": "18567",
|
||
|
|
"type": "sha256",
|
||
|
|
"category": "Artifacts dropped",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76dfaf-574c-4253-b1f1-67578064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568072031",
|
||
|
|
"comment": "iOS payload",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "0d2ee9ade24163613772fdda201af985d852ab506e3d3e7f07fb3fa8b0853560",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18558",
|
||
|
|
"type": "whois-registrant-email",
|
||
|
|
"category": "Attribution",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c9b2-8b24-4fb2-8ff3-61dc8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065970",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "dashenqu832@outlook.com",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18559",
|
||
|
|
"type": "whois-registrant-email",
|
||
|
|
"category": "Attribution",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c9b2-5654-4b42-a28f-61dc8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065970",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "ornaments798@outlook.com",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18542",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c70f-df94-4cd0-b977-4cea8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568072039",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "www.energy-mail.org",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18546",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c98c-95a0-4186-9d08-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065932",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "antmoving.online",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18547",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c98c-be94-4716-9cc3-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065932",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "beemail.online",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18548",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c98c-0998-4c3d-94fa-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065932",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "bf.mk",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18549",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c98c-77cc-4a32-b989-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065932",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "energy-mail.org",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18550",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c98c-a620-4e86-969b-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065932",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "gmailapp.me",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18551",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c98c-8960-4e6c-be1c-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065932",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "izelense.com",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18552",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c98c-52b4-4bb9-b61b-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065932",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "mailanalysis.services",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18553",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c98c-1b78-4933-98f8-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065932",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "mailcontactanalysis.online",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18554",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c98c-3358-4897-a52b-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065932",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "mailnotes.online",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18555",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c98c-6be4-4b4a-9a37-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065932",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "polarismail.services",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18556",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c98c-0cb4-4be5-b3d6-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065932",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "rf.mk",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18557",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c98c-f230-436d-a69f-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065932",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "walkingnote.online",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18406",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5bec8d6d-71e0-40b6-add8-171c8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1542229375",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "www.msap.services",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18407",
|
||
|
|
"type": "domain",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5bec8d6d-6cc8-4aef-b8c9-171c8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1542229378",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "msap.services",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18544",
|
||
|
|
"type": "ip-dst",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c7a0-2dac-4e65-a0ca-67208064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065440",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "45.32.75.217",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18545",
|
||
|
|
"type": "ip-dst",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76c7a0-3c28-4110-aa88-67208064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1569015557",
|
||
|
|
"comment": "Android exploit server",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "45.76.149.154",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18560",
|
||
|
|
"type": "ip-dst",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76cc33-7aac-4eb8-a1be-66c48064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568072048",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "45.78.79.100",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18561",
|
||
|
|
"type": "ip-dst",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76cf56-94f8-4a16-84d5-67af8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568067414",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "149.28.93.11",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18562",
|
||
|
|
"type": "ip-dst",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76d19b-0704-42fa-95c5-61df8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568072087",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "95.169.2.57",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18563",
|
||
|
|
"type": "ip-dst",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76d6f2-f44c-4b21-ba2d-67578064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568069362",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "206.189.65.198",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18564",
|
||
|
|
"type": "ip-dst",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76dae6-bdc4-4cca-8161-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568070374",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "140.82.17.222",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18565",
|
||
|
|
"type": "ip-dst",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76dcf6-f094-47a0-8fd4-4cea8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568072101",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "45.76.53.26",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18566",
|
||
|
|
"type": "ip-dst",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d76de15-2544-4f39-baed-61db8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568071189",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "45.32.91.137",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18408",
|
||
|
|
"type": "ip-dst",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5bec8d7b-b658-4050-8b3c-45cc8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1569015678",
|
||
|
|
"comment": "iOS exploit server",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "144.202.59.23",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18410",
|
||
|
|
"type": "ip-dst",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5bed8343-d968-4c72-a106-2b328064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1569015608",
|
||
|
|
"comment": "iOS C2",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "66.42.58.59",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18411",
|
||
|
|
"type": "ip-dst",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5bed84bf-8710-4cba-b9eb-05688064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1542292671",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "43.251.16.87",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18511",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-b878-442a-b476-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/bit.ly\/2z1WayM",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18512",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-b644-45e2-a9d7-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/www.msap.services\/1R7mqD",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18513",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-14c4-4b77-85be-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/bit.ly\/2AYy61a",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18514",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-f8f0-4399-a2ae-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http\/\/www.msap.services\/2bKr8Z",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18515",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-a174-4130-a62c-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/www.msap.services\/6FeBOy",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18516",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-ce00-497f-9284-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/suo.im\/5ot25j",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18517",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-1708-4847-8b18-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/news.cmitcsubs.tk:5000\/web\/info?org=aHR0cHM6Ly9kcml2ZS5nb29nbGUuY29tL29wZW4\/aWQ9MUlTakl2eFoxX1g5YkdJSnQtMlpKeDRDRWwzdVVhRmlv",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18518",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-bb64-4b8d-b773-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/www.msap.services\/yHJbS6",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18519",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-d218-49a3-96f3-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/bit.ly\/2qHg3Xt",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18520",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-0658-494c-afb4-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/www.msap.services\/S5gDoN",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18521",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-8624-44df-8338-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/bit.ly\/2T2CoeX",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18522",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-1170-4f0e-ade3-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/www.msap.services\/EzpOhU",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18523",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-578c-4a96-88fe-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/bit.ly\/2PSvdau",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18524",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-7058-403d-a9b1-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/www.msap.services\/GfHuRi",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18525",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-5824-4b00-8dda-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/suo.im\/5okeFb",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18526",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-b8ec-438c-8161-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/news.cmitcsubs.tk:5000\/web\/info?org=aHR0cHM6Ly93d3cubnl0aW1lcy5jb20vMjAxOC8xMS8wMi9vYml0dWFyaWVzL2xvZGktZ3lhcmktZGVhZC5odG1s",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18527",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-a530-4671-8fab-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/bit.ly\/2SVPqdY",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18528",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-bd08-4528-9fab-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/www.msap.services\/F8XGNe",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18529",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-936c-411b-a0c9-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/bit.ly\/2QroNMt",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18530",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-2f9c-40b2-8cd5-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/www.msap.services\/70FtQX",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18531",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-2150-4f97-80c4-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/msap.services\/yHJbS6",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18532",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-0d28-4b27-9ac6-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/bit.ly\/2B4GwEf",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18533",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d3-8604-4125-b369-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/www.msap.services\/XgL5A9",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18534",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d4-7398-45b0-b5e9-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065235",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/bit.ly\/2T6pCMf",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18535",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d4-0854-4d51-8fb7-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065236",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/www.msap.services\/ZpzstM",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18536",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d4-2fb8-46f2-a589-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065236",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/bit.ly\/2Drl90q",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18537",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d4-12f0-4f58-9a9b-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065236",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/www.msap.services\/ZQfqzs",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18538",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d4-c2a8-4ee3-bf3d-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065236",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "https:\/\/bit.ly\/2MgSRwL",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18539",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d4-52b4-413f-bf04-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065236",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "https:\/\/www.energy-mail.org\/B20V54",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18540",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d4-dde0-484e-ac13-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065236",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "https:\/\/bit.ly\/2XePmYt",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18541",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c6d4-3b64-4591-b0df-61de8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065236",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/45.76.149.154:5000\/web\/info?org=aHR0cDovL3d3dy5waGF5dWwuY29tL25ld3MvYXJ0aWNsZS5hc3B4P2lkPTQxNDc0JmZiY2xpZD1Jd0FSM1RadGdjanppUkhNZFJuOEdhZ1RMUV9iMHFrX0VBZWY2YldxRU5SanhaZkkzRFdPNFpsRExPcFdz",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18543",
|
||
|
|
"type": "url",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76c730-b4c0-4746-af7e-61db8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568065328",
|
||
|
|
"comment": "",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "http:\/\/43.251.16.87:5000\/\/dev\/loader",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18576",
|
||
|
|
"type": "user-agent",
|
||
|
|
"category": "Network activity",
|
||
|
|
"to_ids": true,
|
||
|
|
"uuid": "5d892cd4-fba0-4c21-90d9-0b328064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1569270996",
|
||
|
|
"comment": "Scotch user agent",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "hots scot",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18568",
|
||
|
|
"type": "email-src",
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76e2eb-abe8-44bb-8dbf-67578064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568072427",
|
||
|
|
"comment": "OAuth email addresses",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "antmoving.online@gmail.com",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18569",
|
||
|
|
"type": "email-src",
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76e2eb-df2c-4913-b458-67578064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568072427",
|
||
|
|
"comment": "OAuth email addresses",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "energymail.org@gmail.com",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18570",
|
||
|
|
"type": "email-src",
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76e2eb-e004-41d8-bc9d-67578064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568072427",
|
||
|
|
"comment": "OAuth email addresses",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "jameslewis199106@gmail.com",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18571",
|
||
|
|
"type": "email-src",
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d76e2eb-37c8-4b75-b5d7-67578064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1568072427",
|
||
|
|
"comment": "OAuth email addresses",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "touchxun658@gmail.com",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18572",
|
||
|
|
"type": "sha256",
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d8545bf-ec98-4d0c-a8a3-55038064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1569015231",
|
||
|
|
"comment": "libbourbon",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "6977e6098815cd91016be9d76f194ed4622640d03c6cdd66b1032306a2190af7",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18573",
|
||
|
|
"type": "sha256",
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d8545d4-ee30-435b-827e-55078064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1569015252",
|
||
|
|
"comment": "Whisky",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "e510c361c8101384277dd95cc2c8e76715dd241f58553f592245b620422beaf3",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18574",
|
||
|
|
"type": "sha256",
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d8545e3-c264-43d8-9666-55068064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1569015267",
|
||
|
|
"comment": "Scotch",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "0d13e403303b52edae6beb76a6fe7ed454f340aae1246b9a3f55ca728da2d6aa",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "18575",
|
||
|
|
"type": "sha256",
|
||
|
|
"category": "Payload delivery",
|
||
|
|
"to_ids": false,
|
||
|
|
"uuid": "5d854603-8bf4-44fe-96ae-47ce8064ab0b",
|
||
|
|
"event_id": "140",
|
||
|
|
"distribution": "5",
|
||
|
|
"timestamp": "1569015299",
|
||
|
|
"comment": "Loader",
|
||
|
|
"sharing_group_id": "0",
|
||
|
|
"deleted": false,
|
||
|
|
"value": "b85fe634f3c5b1022a1adbc21f3b85b58451ca2b89e9380fc5f22b9340a18b88",
|
||
|
|
"SharingGroup": [],
|
||
|
|
"ShadowAttribute": []
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"ShadowAttribute": [],
|
||
|
|
"RelatedEvent": [],
|
||
|
|
"Tag": []
|
||
|
|
}
|
||
|
|
}]}
|