{ "Event": { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [ { "colour": "#00ae7a", "exportable": true, "hide_tag": false, "id": "705", "name": "DescriptionTechnique", "numerical_value": null, "user_id": "0" } ], "category": "Other", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195112", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "comment", "uuid": "8fab1999-8011-4ed6-9480-3c9880a4fed3", "value": "Infrastructure utilis\u00e9e par le groupe cybercriminel Lockean." }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195114", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "0bd837bd-f8db-4021-8d02-e543f17bfcc4", "value": "adjustclouds.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195115", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "be501c0f-3daa-4aed-a60d-4ddefb9e4a89", "value": "akabox.space" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195116", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "8dd8ee76-da01-4e94-9722-54d07beaf067", "value": "akabox.tech" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195117", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "692062b9-42af-423c-82a4-ace684a628ea", "value": "akamacloud.pro" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195118", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "3be8a4ce-0024-4bde-aa6d-0b69976acf15", "value": "akamacloud.tech" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195119", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "986ee6c7-7b7f-4273-b270-b84364123aee", "value": "akamaclouds.app" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195120", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "49b3d1c9-13ff-4c6f-8e60-8df61262f0a5", "value": "akamaclouds.tech" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195121", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "69ca863c-7766-41f7-9e96-edf0e911f9cb", "value": "akamai-technologies.digital" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195122", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "de3d363b-5eb4-4b96-ac1d-c4f761d347e3", "value": "akamai-technologies.host" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195123", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "7ccab798-0b8b-4164-8892-5501f0e5fe26", "value": "akamai-technologies.online" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195124", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "4feb2245-81e1-4380-8b66-da2a1a6cee47", "value": "akamai-technologies.site" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195125", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "dd4da997-53ac-4f01-b7bb-c5e259d4418d", "value": "akamai-technologies.space" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195126", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "6a14f87e-3121-4109-bcd2-b2628739cb9d", "value": "akamai-technologies.website" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195127", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "35a6a802-2d94-4a7d-9fd9-d4a4292476c0", "value": "akamalupdate.site" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195128", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "b765c353-4199-488c-b1cb-a35a41e2dbfa", "value": "akastat.app" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195129", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "ee622563-a153-40e7-8500-e5ee7df91446", "value": "amajai-technologies.digital" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195130", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "abd82caf-fe7b-4298-bbd2-387069ebf50d", "value": "amajai-technologies.host" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195131", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "ab1112b6-f8f6-4497-a649-fd059fe804e0", "value": "amajai-technologies.industries" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195132", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "a388c1c1-536a-4ab9-a650-92a95888ad32", "value": "amajai-technologies.network" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195133", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "b0a93a21-bfe8-4c1b-8cca-e00c9bc3cf52", "value": "amajai-technologies.online" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195134", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "31963a16-465d-4ee6-b0e4-d9f5c5db3385", "value": "amajai-technologies.site" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195135", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "c53c0bd9-0132-447d-a961-3c0ab6583868", "value": "amajai-technologies.space" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195136", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "57740bb8-5a52-4cb3-9aad-09aa27c0e7f4", "value": "amajai-technologies.support" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195137", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "e74cda2d-6902-4452-a290-c3b495caa1b3", "value": "amajai-technologies.tech" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195138", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "37bd1655-9a53-48ce-a162-bbfac2469a1d", "value": "amajai-technologies.trade" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195139", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "f22dc5ea-db7e-43f2-8510-f67615ab9eae", "value": "amajai-technologies.website" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195140", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "402cb1f3-79e3-4e05-be7f-086e465ba364", "value": "amajai-technologies.work" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195141", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711355", "to_ids": true, "type": "domain", "uuid": "3320e34d-2bdb-415d-a612-b127f827e6f9", "value": "amajai-technologies.world" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195142", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "61306a00-9f4c-4f28-bce1-3361af7e17ed", "value": "amamai-tecnologies.cloud" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195143", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "b56861d2-6d0e-41a3-bb37-1c0350e2a038", "value": "amamai-tecnologies.digital" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195144", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "3cd9514c-43c3-4b01-a9fd-a7d879db4402", "value": "amamai-tecnologies.space" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195145", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "21a63997-4e2d-49f2-b18f-f5333b207399", "value": "amapai-technologies.digital" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195146", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "d533105d-7430-43b5-98a4-369a0ba4ee14", "value": "amapai-technologies.email" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195147", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "22f25764-0782-436e-a37a-a67ae3415408", "value": "amapai-technologies.site" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195148", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "27c3ee4f-73ca-4f51-ae76-5bcf707bec20", "value": "amapai-technologies.space" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195149", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "71c29b99-ac34-4e60-9433-b81ba3051f45", "value": "amapai-technologies.support" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195150", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "ff73cd1a-958d-42d8-9212-10b2a8c5a290", "value": "amapai-technologies.website" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195151", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "e901a1a1-ebbc-4d36-bb43-af240810e48c", "value": "amapai-technologies.work" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195152", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "7ec66117-a338-4caf-8831-f0419eb9bf8f", "value": "amapai-technologies.world" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195153", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "0581054a-47b5-466f-99df-03a2ff5a0c6d", "value": "amasonstore.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195154", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "83b78ec6-2fd3-45f3-b1e7-cd148fcda958", "value": "amatai-technologies.digital" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195155", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "6df75a17-9b1f-4b94-9cdb-8329ebe1d62d", "value": "amatai-technologies.site" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195156", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "eb7db09d-c90c-4d7d-880c-11f337bc9848", "value": "amatai-technologies.space" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195157", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "7f3f92ea-0108-4b69-82ac-8e693e51c165", "value": "amatai-technologies.website" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195158", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "21cfdd72-ee18-49ae-b6cd-29519f4c8985", "value": "amazai-technologies.online" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195159", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "66c86062-047f-4ee8-91cc-e1d7e1b212db", "value": "amazai-technologies.site" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195160", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "fe5f317d-da44-43c1-addb-c8220fabc4fb", "value": "amazai-technologies.space" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195161", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "13f5fe11-c1e0-4bba-bf3f-73443ecc0ecd", "value": "amazai-technologies.support" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195162", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "e17581da-e32d-4608-898f-46857702249b", "value": "amazai-technologies.website" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195163", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "005dd63e-cd42-48e5-a905-862719746b79", "value": "amazai-technologies.world" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195164", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "1749d90c-1878-4c05-9104-29b94b73926b", "value": "asurecloud.pro" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195165", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "50b41d0d-14bb-46e1-a5cc-92b66fb9432f", "value": "asurecloud.tech" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195166", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "f8757fda-e7c8-42b4-ab6d-6a59bd01b4f9", "value": "asureupdate.pro" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195167", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "0b0f27ea-06e5-43a7-9d9d-bbaf19ae320f", "value": "asureupdate.tech" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195168", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "e55d4d54-4232-432d-8a69-dd8f8f4cccbb", "value": "atakai-technologies.host" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195169", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "e82dae8c-b8d0-4c7c-839b-97a280d7c516", "value": "atakai-technologies.online" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195170", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "4bceb6b4-babc-438a-831f-55d657a36534", "value": "atakai-technologies.space" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195171", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "5442f08c-fb30-4cd1-a4ec-058767ee1132", "value": "atakai-technologies.website" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195172", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "c12ef110-2457-4433-9140-b7ea6c3eed05", "value": "atakai-technologies.work" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195173", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "347d05e1-18e5-4fa2-a576-c82e3fcc6dd9", "value": "azuresecure.tech" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195174", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "6a29f84d-ad85-41c4-980f-e3cc217faa7e", "value": "azurestat.app" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195175", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "39ebf9c5-0eae-44c3-b7e9-5bca33efd6f7", "value": "c2.hax.vg" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195176", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "bfb26d0c-35c8-4357-9b23-43e23fe18338", "value": "cdnengine.biz" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195177", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "f8e6dbc3-0c43-495c-904b-e8ba98496f18", "value": "classworldint.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195178", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "9437bf1a-bcb5-408b-ba0d-946a6cd81ea1", "value": "cloudflace-network.digital" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195179", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "a51e827a-21f2-47af-928f-eb442dea3dfd", "value": "cloudmetric.online" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195180", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "8f2f7392-d114-42c7-a775-aff68651bf88", "value": "dealsforyoutoday.org" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195181", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "94aabe5d-b858-4c57-bebc-6326bd80b1f2", "value": "displaychecks.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195182", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "4d604d53-071d-43a9-8835-90efd0be5bd2", "value": "electronicwhosaleonline.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195183", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "62d2878e-26aa-470a-bd1d-b15da4972280", "value": "entirelysecuritybusiness.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195184", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "3fcb5396-1ece-405f-b780-0f5221be6f76", "value": "hesitatesecuritybusiness.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195185", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "a8cabb85-2dd3-4355-b0b4-3789598b4f7b", "value": "itstrueloves.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195186", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "e4fb205a-79ec-4e7e-8f1b-4a6bd6f9e55d", "value": "justicedev.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195187", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "51b10db3-045f-4717-af07-72fe08e39fd1", "value": "killsecuritybusiness.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195188", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "7bf3bff6-d43f-4c05-9095-67ed78e8de82", "value": "knotsecuritybusiness.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195189", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "89db02cd-aa15-42f4-a00a-04ddf2f58151", "value": "madesecuritybusiness.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195190", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "11274f20-9227-4cfe-b696-66688b22a8e7", "value": "notescloud.org" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195191", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "d5220ded-381a-4771-872f-c7561ac77e71", "value": "onlineceoshelp.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195192", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "c1f3a34f-de0c-4cd3-9fe0-3412e5728c49", "value": "orientalclient.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195193", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "d476243c-02d6-4339-98ad-b5b622809988", "value": "perfectappt.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195194", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "33ed27ff-b24a-4f0e-abb7-f54bf49f0cc0", "value": "rackspare-technology.digital" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195195", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "035b0037-b3fa-4a71-8c2b-dc0522583337", "value": "rackspare-technology.download" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195196", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711356", "to_ids": true, "type": "domain", "uuid": "8141c5c8-71a1-472d-90cb-d37d1480647a", "value": "rackspare-technology.network" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195197", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "domain", "uuid": "79ab4f22-5a09-4476-a386-afe82e5e21bb", "value": "rackspare-technology.online" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195198", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "domain", "uuid": "496f30c8-c545-4762-804e-cfa092187e95", "value": "rackspare-technology.space" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195199", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "domain", "uuid": "5ff2d965-a4bd-4a35-9770-2395708b4d66", "value": "risetomoon.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195200", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "domain", "uuid": "47ec5eee-ef44-4b32-9da5-d8d741e36c78", "value": "ropesecuritybusiness.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195201", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "domain", "uuid": "c2511c5a-cae1-4b1b-a0b6-69b09d51a9ed", "value": "securesurvey.cloud" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195202", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "domain", "uuid": "cf34a10e-0e42-40e8-9a8a-c9ae60853394", "value": "securitybusinessmean.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195203", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "domain", "uuid": "69788036-5c26-4d1d-a949-c4f78dfad98e", "value": "securitypanels.org" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195204", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "domain", "uuid": "388799d8-8fd0-44d8-8767-1a7e2586b601", "value": "setupfastonline.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195205", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "domain", "uuid": "8f9d3034-8d84-4ea4-ab68-724db724ff7b", "value": "smalleststores.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195206", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "domain", "uuid": "9013f8b5-6193-478c-921a-65597c4ad390", "value": "stackpatc-technologies.digital" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195207", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "domain", "uuid": "d7e892db-161e-4d98-b497-060b49dc01aa", "value": "stexwhosaleonline.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur C2 Cobalt Strike", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195208", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "domain", "uuid": "5c6e03fa-f15d-43ee-a699-1332350e8869", "value": "ticksecuritybusiness.com" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur d\u2019exfiltration [2020-09-23:2020-12-20]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195209", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "ip-dst", "uuid": "937bbf02-d001-427d-a226-3747347b466b", "value": "93.190.140.75" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur d\u2019exfiltration [2020-11-19:2021-01-04]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195210", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "ip-dst", "uuid": "aa4b86b4-a8d5-4d9e-a052-a73c4d251396", "value": "190.2.138.42" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur d\u2019exfiltration [2021-04-03:2021-04-10]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195211", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "ip-dst", "uuid": "fd15c847-35a9-4cac-b543-cf366320c333", "value": "193.239.84.133" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur d\u2019exfiltration [2021-05-05:2021-06-01]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195212", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "ip-dst", "uuid": "49c348ec-d61d-48d0-bf92-8d3fdebe0577", "value": "212.83.61.216" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur d\u2019exfiltration [2021-04-24:2021-06-07]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195213", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "ip-dst", "uuid": "e3764104-4ebc-4ae0-af99-ea4e76541d66", "value": "91.90.121.26" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur d\u2019exfiltration [2021-02-06:2021-07-03]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195214", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "ip-dst", "uuid": "ba46636e-9090-47cb-9e96-3bdfb7369efa", "value": "45.147.160.196" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur d\u2019exfiltration [2021-03-11:2021-07-31]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195215", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "ip-dst", "uuid": "3b1cabfe-5b6f-4c01-a24c-87dd2aee5e51", "value": "45.147.160.5" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur d\u2019exfiltration [2021-02-21:2021-08-16]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195216", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "ip-dst", "uuid": "84c252a1-1574-4daf-bb68-356b867465b1", "value": "85.25.246.169" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Serveur de distribution de scripts et de ran\u00e7ongiciels [2020-07-20:2021-01-09]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "15647", "id": "1195217", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629711357", "to_ids": true, "type": "ip-dst", "uuid": "b13b386e-5ac1-4080-8441-127da8d03c78", "value": "185.238.0.233" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [ { "colour": "#000000", "exportable": true, "hide_tag": false, "id": "706", "name": "cossi:relevantTimespan=\"from\"", "numerical_value": null, "user_id": "0" } ], "category": "Other", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "0", "event_id": "15647", "id": "1195385", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1629727175", "to_ids": true, "type": "comment", "uuid": "d2d77514-ed81-4cfe-8dc7-3fe606c6c715", "value": "2021-08-23" } ], "Galaxy": [], "Object": [], "Org": { "id": "1", "name": "CERT-FR", "uuid": "56bdf779-46f8-4353-bdf9-2bb95bce2212" }, "Orgc": { "id": "1", "name": "CERT-FR", "uuid": "56bdf779-46f8-4353-bdf9-2bb95bce2212" }, "RelatedEvent": [], "ShadowAttribute": [], "Tag": [ { "colour": "#f89595", "exportable": true, "hide_tag": false, "id": "40", "name": "fr-classif:non-classifiees=\"NON-CLASSIFIEES\"", "numerical_value": null, "user_id": "0" }, { "colour": "#ffffff", "exportable": true, "hide_tag": false, "id": "482", "name": "cossi:TLP=\"white\"", "numerical_value": null, "user_id": "0" }, { "colour": "#008e63", "exportable": true, "hide_tag": false, "id": "456", "name": "cossi:RechercheSourceOuverte=\"Autorisee\"", "numerical_value": null, "user_id": "0" }, { "colour": "#00714f", "exportable": true, "hide_tag": false, "id": "473", "name": "cossi:fiabilite=\"Bonne\"", "numerical_value": null, "user_id": "0" } ], "analysis": "0", "date": "2021-08-23", "disable_correlation": false, "distribution": "0", "extends_uuid": "", "id": "15647", "info": "[CERT-FR] Identification d'un nouveau groupe cybercriminel : Lockean", "locked": false, "org_id": "1", "orgc_id": "1", "proposal_email_lock": false, "publish_timestamp": "0", "published": false, "sharing_group_id": "0", "threat_level_id": "4", "timestamp": "1630433729", "uuid": "61236bfb-37d8-4a71-a68e-2dbf0abe1822" } }