38 lines
2.1 KiB
Plaintext
38 lines
2.1 KiB
Plaintext
|
<?xml version="1.0" encoding="utf-8"?>
|
|||
|
|
<ioc xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" id="5cd56458-a1b0-4129-8649-64d90a14d415" last-modified="2019-05-10T00:00:00" xmlns="http://schemas.mandiant.com/2010/ioc">
|
|||
|
|
<short_description>Event #138</short_description>
|
|||
|
|
<description>Burned After Reading: Endless Mayfly’s Ephemeral Disinformation Campaign (5cd56458-a1b0-4129-8649-64d90a14d415)</description>
|
|||
|
|
<keywords />
|
|||
|
|
<authored_by>MAIN</authored_by>
|
|||
|
|
<authored_date>2019-05-10T00:00:00</authored_date>
|
|||
|
|
<links />
|
|||
|
|
<definition>
|
|||
|
|
<Indicator operator="OR" id="5cd5657b-86f0-43c7-88a5-64db0a14d415">
|
|||
|
|
<IndicatorItem id="5cd56487-0b50-4e81-b7eb-651f0a14d415" condition="is">
|
|||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
|||
|
|
<Content type="md5">5b920c6cd1d8de54463f07965b8c43f3</Content>
|
|||
|
|
</IndicatorItem>
|
|||
|
|
<IndicatorItem id="5cd56487-b340-4b92-a378-651f0a14d415" condition="is">
|
|||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
|||
|
|
<Content type="md5">07d495245814c5c4996422b4b2f52473</Content>
|
|||
|
|
</IndicatorItem>
|
|||
|
|
<IndicatorItem id="5cd56487-4424-4859-99b3-651f0a14d415" condition="is">
|
|||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
|||
|
|
<Content type="md5">8522c77e48c846c2c026b6e16501a3b2</Content>
|
|||
|
|
</IndicatorItem>
|
|||
|
|
<IndicatorItem id="5cd56487-a880-4c60-a6f0-651f0a14d415" condition="is">
|
|||
|
|
<Context document="FileItem" search="FileItem/Md5sum" type="mir" />
|
|||
|
|
<Content type="md5">bc31493e996db7fe45b7ed7aaa51fd54</Content>
|
|||
|
|
</IndicatorItem>
|
|||
|
|
<IndicatorItem id="5cd564a2-e098-43bc-8cd6-65920a14d415" condition="is">
|
|||
|
|
<Context document="RouteEntryItem" search="RouteEntryItem/Destination" type="mir" />
|
|||
|
|
<Content type="IP">217.182.54.223</Content>
|
|||
|
|
</IndicatorItem>
|
|||
|
|
<IndicatorItem id="5cd564a2-7c6c-46b2-acb4-65920a14d415" condition="is">
|
|||
|
|
<Context document="RouteEntryItem" search="RouteEntryItem/Destination" type="mir" />
|
|||
|
|
<Content type="IP">51.255.101.144</Content>
|
|||
|
|
</IndicatorItem>
|
|||
|
|
</Indicator>
|
|||
|
|
</definition>
|
|||
|
|
</ioc>
|