70 lines
3.5 KiB
Plaintext
70 lines
3.5 KiB
Plaintext
|
<?xml version="1.0" encoding="utf-8"?>
|
||
|
|
<ioc xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" id="581c0e7b-7ec8-40ad-b52a-49798e96ca05" last-modified="2016-08-02T00:00:00" xmlns="http://schemas.mandiant.com/2010/ioc">
|
||
|
|
<short_description>Event #9</short_description>
|
||
|
|
<description>Group5: Syria and the Iranian Connection</description>
|
||
|
|
<keywords />
|
||
|
|
<authored_by>citizenlab</authored_by>
|
||
|
|
<authored_date>2016-08-02T00:00:00</authored_date>
|
||
|
|
<links />
|
||
|
|
<definition>
|
||
|
|
<Indicator operator="OR" id="581c0e7b-7ec8-40ad-b52a-49798e96ca05">
|
||
|
|
<IndicatorItem id="assadcrimes.info" condition="is">
|
||
|
|
<Context document="Network" search="Network/DNS" type="mir" />
|
||
|
|
<Content type="string"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
<IndicatorItem id="88.198.222.163" condition="is">
|
||
|
|
<Context document="RouteEntryItem" search="RouteEntryItem/Destination" type="mir" />
|
||
|
|
<Content type="IP"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
<IndicatorItem id="office@assadcrimes.info" condition="is">
|
||
|
|
<Context document="Email" search="Email/From" type="mir" />
|
||
|
|
<Content type="string"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
<IndicatorItem id="7d898530d2e77f15f5badce8d7df215e" condition="is">
|
||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
||
|
|
<Content type="md5"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
<IndicatorItem id="a4f1f4921bb11ff9d22fad89b19b155d" condition="is">
|
||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
||
|
|
<Content type="md5"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
<IndicatorItem id="dd5bedd915967c5efe00733cf7478cb4" condition="is">
|
||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
||
|
|
<Content type="md5"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
<IndicatorItem id="f1f84ea3229dca0ccacb7381a2f49f99" condition="is">
|
||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
||
|
|
<Content type="md5"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
<IndicatorItem id="30bb678db3ad0140fc33acd9803385c3" condition="is">
|
||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
||
|
|
<Content type="md5"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
<IndicatorItem id="6161083021b695814434450c1882f9f3" condition="is">
|
||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
||
|
|
<Content type="md5"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
<IndicatorItem id="b4121c3a1892332402000ef0d587c0ee" condition="is">
|
||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
||
|
|
<Content type="md5"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
<IndicatorItem id="2fc276e1c06c3c78c6d7b66a141213be" condition="is">
|
||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
||
|
|
<Content type="md5"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
<IndicatorItem id="494bab7fd0b42b0b14051ed9abbd651f" condition="is">
|
||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
||
|
|
<Content type="md5"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
<IndicatorItem id="8ebeb3f91cda8e985a9c61beb8cdde9d" condition="is">
|
||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
||
|
|
<Content type="md5"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
<IndicatorItem id="76f8142b4e52c671871b3df87f10c30c" condition="is">
|
||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
||
|
|
<Content type="md5"></Content>
|
||
|
|
</IndicatorItem>
|
||
|
|
</Indicator>
|
||
|
|
</definition>
|
||
|
|
</ioc>
|