{"response":[{ "Event": { "id": "125", "orgc_id": "2", "org_id": "2", "date": "2017-12-05", "threat_level_id": "1", "info": "Champing at the Cyberbit: Ethiopian Dissidents Targeted with New Commercial Spyware", "published": true, "uuid": "5a27f994-d7c0-4ef0-9b8f-40758e96ca05", "attribute_count": "56", "analysis": "2", "timestamp": "1512576260", "distribution": "1", "proposal_email_lock": false, "locked": false, "publish_timestamp": "1512576275", "sharing_group_id": "0", "Org": { "id": "2", "name": "citizenlab", "uuid": "581b5fea-818c-441a-bd1d-49798e96ca05" }, "Orgc": { "id": "2", "name": "citizenlab", "uuid": "581b5fea-818c-441a-bd1d-49798e96ca05" }, "Attribute": [ { "id": "17544", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-15cc-44d6-8153-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "568d8c43815fa9608974071c49d68232", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17545", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-4ac4-49c5-9c46-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "80b7121c4ecac1c321ca2e3f507104c2", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17546", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-b378-4812-adc5-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "8d6ce1a256acf608d82db6539bf73ae7", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17547", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-e53c-422a-81bf-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "840c4299f9cd5d4df46ee708c2c8247c", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17548", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-de5c-4a30-8d45-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "961730964fd76c93603fb8f0d445c6f2", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17549", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-bc88-4421-a137-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "376f28fb0aa650d6220a9d722cdb108d", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17550", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-88bc-43fe-8b35-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "ca782d91daea6d67dfc49d6e7baf39b0", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17551", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-84fc-42ff-b5b6-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "0488cf9c58f895076311bf8e2d93bf63", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17552", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-80d8-4fdb-a65b-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "f483fe294b4c3af1e3c8163200d60aae", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17553", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-6a58-470b-a448-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "1dcff300018c37a888fbe36f270f43a7", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17554", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-737c-4b9b-a821-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "ed42fcd0ae2e1baf3d0eead4fcf9c9da", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17555", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-5cfc-4111-b71a-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "4b6d030664668224a88ca260354e5b4e", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17556", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-561c-42c6-8c04-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "94d49232f1d77611544371826be16a99", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17557", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-4b54-448c-9154-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "fd903f9471e7b3f60739b8f29fec041d", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17558", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-5284-4795-9ec0-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "d3ebb760c9de3486379abc3672dbee8b", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17559", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-50b8-472a-a1f2-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "37c9e979a36b31355e779f10ecaba886", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17560", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-36b4-4d66-841e-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "bb0143290d7c9cb1d186e209e4aa8d87", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17561", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-32f4-4344-a582-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "e0804de1f0b4a22dbeddc90fb2854bfe", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17562", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-43e8-46ee-941b-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "4feae73c2ef347692be0068793fc2c73", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17563", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-46cc-473a-aaaa-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "46cab66af42f40c9f65fa20bf071601f", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17564", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-2ebc-4c0e-b1c2-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "8a20147b5df86ea6bdd39b9ea84dfc2d", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17565", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-2778-4784-b22c-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "c616f271a456eb2c54bdbee67fb88eda", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17566", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-3b28-4b81-9e4b-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "19dfff93ad650c02fbffa73faea48a96", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17567", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-57d4-4f8b-acc0-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "eaf569c0d8866df41f6c419b6683946b", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17568", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-6864-4d94-b9e1-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "2f9911e69ee7eeb2db050f82da85688e", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17569", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-7764-435a-bc52-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "1b6ef8b512ab768d76999d81387eeca6", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17570", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-7a48-4aef-8735-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "370db91c6eca64f63083d577049bba5b", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17571", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-64f4-4a1a-8a35-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "dd9826b9dc747f625015d24ccd22acd6", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17572", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-c1b0-4ee1-a1b4-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "14465588c4b201fcb03366292b1112d8", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17573", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-f11c-4695-a426-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "a3125fdc709ff73ecf75447095fe4aa5", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17574", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-ee88-42ff-a6c6-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "9cecb0bd8ccf9be70a1a24c729514bda", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17575", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-c4e4-41c1-8e91-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "eb45d72b786904fe7e5e2376b845061d", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17576", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-b8f0-4e75-95f4-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "e220361db365f017583705ec341bd15b", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17577", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-cfc0-480c-8223-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "3c124dfd026c71b6035beb5c2499ae26", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17578", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-cfe8-4f1e-8e8a-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "74d5c71cc073ccedafefcb10fde91e04", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17579", "type": "md5", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27f9c5-d0d8-4264-92c7-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569285", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "ae2161510ef99f71afaa7cf69a8f814c", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17590", "type": "mutex", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27fa44-40d8-4732-94b1-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569412", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "PerfIPC", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17591", "type": "mutex", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27fa44-0978-4448-9bf1-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569412", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "STORAGE_MUTEX", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17592", "type": "mutex", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27fa44-438c-497a-b355-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569412", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "Global\\76467a526e3f430f870f2d48876b77b7", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17593", "type": "mutex", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27fa44-c94c-405b-b213-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569412", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "Global\\6efa80dda7d8489f931cc9b2eac58777", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17588", "type": "named pipe", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27fa36-8c68-4682-ab5c-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569398", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "\\\\.\\pipe\\BrowseIPC", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17589", "type": "named pipe", "category": "Artifacts dropped", "to_ids": false, "uuid": "5a27fa36-4e00-4a43-9aa1-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569398", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "\\\\.\\pipe\\{82221195-6222-4854-8874-016aa4e9dd41}", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17543", "type": "link", "category": "External analysis", "to_ids": false, "uuid": "5a27f9b3-8b70-46dc-8597-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569267", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "https:\/\/citizenlab.ca\/2017\/12\/champing-cyberbit-ethiopian-dissidents-targeted-commercial-spyware\/", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17585", "type": "domain", "category": "Network activity", "to_ids": true, "uuid": "5a27fa29-2f2c-428e-971b-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569385", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "pssts1.nozonenet.com", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17586", "type": "domain", "category": "Network activity", "to_ids": true, "uuid": "5a27fa29-c180-4131-8e5d-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569385", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "time-local.com", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17587", "type": "domain", "category": "Network activity", "to_ids": true, "uuid": "5a27fa29-36d8-4b5e-bef3-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569385", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "time-local.net", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17594", "type": "domain", "category": "Network activity", "to_ids": true, "uuid": "5a27fac9-1f90-405a-8145-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569545", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "pupki.co", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17595", "type": "domain", "category": "Network activity", "to_ids": true, "uuid": "5a281504-1720-4c8f-90c1-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512576260", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "eastafro.net", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17596", "type": "domain", "category": "Network activity", "to_ids": true, "uuid": "5a281504-7ee0-446f-bd09-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512576260", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "getadobeplayer.com", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17597", "type": "domain", "category": "Network activity", "to_ids": true, "uuid": "5a281504-f94c-4e52-8866-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512576260", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "diretube.co.uk", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17598", "type": "domain", "category": "Network activity", "to_ids": true, "uuid": "5a281504-6d78-458c-834f-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512576260", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "meskereme.net", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17580", "type": "url", "category": "Network activity", "to_ids": true, "uuid": "5a27f9f0-b9fc-4809-bbdb-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569328", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "https:\/\/pssts1.nozonenet.com\/ts8\/ts8.php", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17581", "type": "url", "category": "Network activity", "to_ids": true, "uuid": "5a27f9f0-8b98-4c33-bfce-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569328", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "https:\/\/time-local.com\/", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17582", "type": "url", "category": "Network activity", "to_ids": true, "uuid": "5a27f9f0-de2c-4a55-91a9-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569328", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "https:\/\/time-local.net\/", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17583", "type": "url", "category": "Network activity", "to_ids": true, "uuid": "5a27f9f0-ff88-4631-90ae-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569328", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "https:\/\/time-local.com\/ts.php", "SharingGroup": [ ], "ShadowAttribute": [ ] }, { "id": "17584", "type": "url", "category": "Network activity", "to_ids": true, "uuid": "5a27f9f0-0654-4388-adcc-11098e96ca05", "event_id": "125", "distribution": "5", "timestamp": "1512569328", "comment": "", "sharing_group_id": "0", "deleted": false, "value": "https:\/\/time-local.net\/ts.php", "SharingGroup": [ ], "ShadowAttribute": [ ] } ], "ShadowAttribute": [ ], "RelatedEvent": [ ], "Tag": [ { "id": "16", "name": "TLP:WHITE", "colour": "#e8e8e8", "exportable": true, "org_id": false } ] } }]}