[{
        "description": "Our findings show that Rocket Kitten is still active, retains a growing level of persistence, and acts ever more aggressively in terms of attack method. We also found that recent publications on the group’s activity have done nothing to change their behavior or reduce their activity. They don’t seem to bother to have to “disappear.” With this paper, we feel fairly certain that Rocket Kitten’s prime targets are not companies and political organizations as entire bodies but individuals that operate in strategically interesting fields such as diplomacy, foreign policy research, and defense-related businesses. We believe the espionage factor and political context make their attacks unique and very different from traditional targeted attacks.",
        "created": "2015-09-02T09:21:53.093000",
        "tags": [
            "spy kittens",
            "rocket kitten",
            "ghole",
            "spearphishing",
            "Social engineering",
            "TSPY_WOOLERG",
            "apt",
            "trendmicro"
        ],
        "modified": "2015-09-02T09:22:22.976000",
        "author_name": "AlienVault",
        "references": [
            "http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp-the-spy-kittens-are-back.pdf"
        ],
        "indicators": [
            {
                "indicator": "http://107.6.172.54/woolen/",
                "_id": "55e6bfb14637f22cb6057466",
                "type": "URL",
                "description": "",
                "created": "2015-09-02T09:21:53.093"
            },
            {
                "indicator": "af364ff503da71875b6d7c401a1e98e31450a561",
                "_id": "55e6bfb14637f22cb6057467",
                "type": "FileHash-SHA1",
                "description": "",
                "created": "2015-09-02T09:21:53.093"
            },
            {
                "indicator": "64ba130e627dd85c85d6534e769d239080e068dd",
                "_id": "55e6bfb14637f22cb6057468",
                "type": "FileHash-SHA1",
                "description": "",
                "created": "2015-09-02T09:21:53.093"
            },
            {
                "indicator": "46a995df8d9918ca0793404110904479b6adcb9f",
                "_id": "55e6bfb14637f22cb6057469",
                "type": "FileHash-SHA1",
                "description": "",
                "created": "2015-09-02T09:21:53.093"
            },
            {
                "indicator": "457f54e9a0f32f2648f95a8e339d9fd9aed23fa7",
                "_id": "55e6bfb14637f22cb605746a",
                "type": "FileHash-SHA1",
                "description": "",
                "created": "2015-09-02T09:21:53.093"
            },
            {
                "indicator": "84.11.146.62",
                "_id": "55e6bfb14637f22cb605746b",
                "type": "IPv4",
                "description": "",
                "created": "2015-09-02T09:21:53.093"
            },
            {
                "indicator": "107.6.172.54",
                "_id": "55e6bfb14637f22cb605746c",
                "type": "IPv4",
                "description": "",
                "created": "2015-09-02T09:21:53.093"
            },
            {
                "indicator": "107.6.181.116",
                "_id": "55e6bfb14637f22cb605746d",
                "type": "IPv4",
                "description": "",
                "created": "2015-09-02T09:21:53.093"
            },
            {
                "indicator": "29968b0c4157f226761073333ff2e82b588ddf8e",
                "_id": "55e6bfce67db8c2dec9c1c89",
                "type": "FileHash-SHA1",
                "description": "",
                "created": "2015-09-02T09:22:22.976"
            },
            {
                "indicator": "eeb67e663b2fa980c6b228fc2e04304c8992401d",
                "_id": "55e6bfce67db8c2dec9c1c8a",
                "type": "FileHash-SHA1",
                "description": "",
                "created": "2015-09-02T09:22:22.976"
            },
            {
                "indicator": "db2b8f49b4e76c2f538a3a6b222c35547c802cef",
                "_id": "55e6bfce67db8c2dec9c1c8b",
                "type": "FileHash-SHA1",
                "description": "",
                "created": "2015-09-02T09:22:22.976"
            }
        ],
        "revision": 2.0,
        "id": "55e6bfb14637f22cb605746e",
        "name": "The Spy Kittens Are Back: Rocket Kitten 2"
    },
{
    "industries": [
      "banking"
    ],
    "TLP": "green",
    "description": "Active users of mobile banking apps should be aware of a new Android banking malware campaign targeting customers of large banks in the United States, Germany, France, Australia, Turkey, Poland, and Austria. This banking malware can steal login credentials from 94 different mobile banking apps. Due to its ability to intercept SMS communications, the malware is also able to bypass SMS-based two-factor authentication. Additionally, it also contains modules to target some popular social media apps.",
    "created": "2016-11-03T20:15:43.264000",
    "tags": [
      "skype",
      "flash player",
      "android",
      "banker"
    ],
    "modified": "2016-11-03T20:15:43.264000",
    "author_name": "AlienVault",
    "public": true,
    "references": [
      "https://blog.fortinet.com/2016/11/01/android-banking-malware-masquerades-as-flash-player-targeting-large-banks-and-popular-social-media-apps"
    ],
    "targeted_countries": [
      "United States",
      "Germany",
      "France",
      "Australia",
      "Turkey",
      "Poland",
      "Austria"
    ],
    "indicators": [
      {
        "access_groups": [],
        "indicator": "e5df30b41b0c50594c2b77c1d5d6916a9ce925f792c563f692426c2d50aa2524",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-03T20:15:44",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 1265354,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "chaldear.com",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-03T20:15:44",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "domain",
        "id": 1277271,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "glennuniat.com",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-03T20:15:44",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "domain",
        "id": 1277272,
        "observations": 2
      }
    ],
    "revision": 1,
    "adversary": "",
    "id": "581b9aef324bc542d6b1fd84",
    "name": "Android banking malware masquerades as Flash Player"
  },
  {
    "industries": [],
    "TLP": "green",
    "description": "This paper documents attempted exploitation activity aimed at Uyghur interests outside of China. Exploitation is being attempted via the usual tactic of spear phishing containing malicious attachments to targets. The exploit code attached used for dropping the malware is older – CVE-2012-0158 – and from our vantage point, we have no indication of successful or failed exploitation. Nonetheless, we can obtain targeting information and insight into tactics from the spearphish messages used by the threat actors. Successful exploitation typically results in malware calling back to one or more Uyghur themed domain names. The malware payloads observed to be associated with the Uyghur themed C2 domains so far consist of PlugX, Gh0st RAT, and Saker/Xbox, although there may be others that are yet to be discovered.",
    "created": "2016-11-01T22:28:04.201000",
    "tags": [
      "Uyghur",
      "china",
      "Gh0st",
      "plugx",
      "Saker",
      "LURK0",
      "arbornetworks"
    ],
    "modified": "2016-11-01T22:28:25.492000",
    "author_name": "AlienVault",
    "public": true,
    "references": [
      "https://www.arbornetworks.com/blog/asert/wp-content/uploads/2016/11/TLP-WHITE-Flying-Dragon-Eye-Uyghur-Themed-Threat-Activity.pdf"
    ],
    "targeted_countries": [
      "China"
    ],
    "indicators": [
      {
        "access_groups": [],
        "indicator": "www.whitewall.top",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "hostname",
        "id": 352424,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "9feee2a3fe49fe774d414999ac393655255e7c035ffc93bbd031a2331fd89dc8",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 586362,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "f4fd8554710017caa042b52122d7985c7f510df8e2c26f1ffa6e27233bfe9b54",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 586382,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "0c35a508ece0c9269e176b6b278a96f7ca29e04a2ca2319a91b585f27abfe2f6",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 586386,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "e55912a134902ab73c52cb42f32051745214275b59a95d565cfcb7560d32f601",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 586388,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "3bbf0f821c89ba03d30deb63eec59c8e9e76c20578ad805de9971bdbcd2855d2",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 586391,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "940d0770e644c152d60a13f9d40015a1089419361de33fe127e032f4bb446c69",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 586400,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "45e39db2a877ff2663efc4d66ed4084ffdb6ddb4926112b7c471872208b96767",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 586411,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "c39e0fc30c2604b3eb9694591789a8e3d4cee7bcc4f9b03349e10c45304aef59",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 586416,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "5e818eeb0cffeb6f65f611a17f522560912ae19372e7f734be6df5e35ba82337",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 586420,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "b625e605932196efbc6c80a18f61a71d27d82935209a1abde2ec591973fed31e",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 586422,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "3f3d0a5aa2799d6afe74c5cb6e077e375078b173263c5ca887ffe2e22164b10f",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 586426,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "4ab388b1310918144ad95e418ebe12251a97cb69fbed3f0dd9f04d780ddd132d",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 586437,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "www.amerikauyghur.top",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "hostname",
        "id": 586454,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "210.209.118.87",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "IPv4",
        "id": 586464,
        "observations": 3
      },
      {
        "access_groups": [],
        "indicator": "444c6589ed030da41ba49d20ac38029e5213978fadef2ee94408e4f91395b488",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 1253497,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "a351040c0da2837f19b357baea4bffe194b0cd0d86bf262f8be1126e3a9d44d8",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 1253498,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "f15840fbade7a5611391193a4a53f63ef465ab451f7783da21cad7303ea3b68c",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 1253499,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "087e45f63ce00c4df07f81837eceb0b322773822feee01cfc005e5fc14e50f5e",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 1253500,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "97ec795227818fedc70fad9f2df8cb839d9fb75b502f3598614610d4e8e1be78",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 1253501,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "ef3e7b1c37aef1d8359169cca9409db4709632b9aa8bf44febe0d91e93ab537e",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 1253502,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "7b587b104219784e9fd3dc9c13a0f652e73baed01e8c3b24828a92f151f3c698",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 1253503,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "3714058d90b2149169188418773165b620abd1481b47d1551d79679bfe21d28c",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 1253504,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "69c2da4061890050dc0ca28db6f240c8ed6c4897f4174bcd5d1bca00ade537d5",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 1253505,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "be7a14927ff11536a5bfd6c21d3f4a304659001f1f13b6d90ce0e031522817e5",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 1253506,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "62a033fc586c6220ee0c0ea8ff207ab038776455505fa2137e9591433ada26e1",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA256",
        "id": 1253507,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "russiauyghur.top",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "domain",
        "id": 1253508,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "tibettimes.top",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "domain",
        "id": 1253509,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "freetibet.top",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "domain",
        "id": 1253510,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "www.turkistanuyghur.top",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "hostname",
        "id": 1253511,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "ks.uygurinfo.com",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "hostname",
        "id": 1253512,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "www.japanuyghur.top",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "hostname",
        "id": 1253513,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "dtsx.uygurinfo.com",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "hostname",
        "id": 1253514,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "www.hotansft.top",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "hostname",
        "id": 1253515,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "www.yawropauyghur.top",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "hostname",
        "id": 1253516,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "www.tibetimes.com",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "hostname",
        "id": 1253517,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "www.turkiyeuyghur.com",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "hostname",
        "id": 1253518,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "86088922528b4d0a5493046527b29822",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-MD5",
        "id": 1253519,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "4edda0e2a8a415272f475f3af4d17dc1",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-MD5",
        "id": 1253520,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "e490174855b8548161613fd5d9955e7a",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-MD5",
        "id": 1253521,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "fa85f8a332ac26892a8ad6f21491404a",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-MD5",
        "id": 1253522,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "de07dc9e83bfd445ad7cc58baab671f2",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-MD5",
        "id": 1253523,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "0ea68dd9463626082bb96ad373bd84e0",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-MD5",
        "id": 1253524,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "9de14f249afc4e6979d8f2106e405b21",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-MD5",
        "id": 1253525,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "1a169a7e52879bad47e2834abfe50361",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-MD5",
        "id": 1253526,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "e49e235b301a4316ef58753c093279f0",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-MD5",
        "id": 1253527,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "1dc2e57dbf63051608cff83d8b88d352",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-MD5",
        "id": 1253528,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "2f981ac92284f1c710e53a5a2d41257a",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-MD5",
        "id": 1253529,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "731a9761626e39bb84b34343bdae67b0",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-MD5",
        "id": 1253530,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "59781db8be6bb162f5c8ee8cf950fe191417baa4",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "FileHash-SHA1",
        "id": 1253531,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "118.193.225.133",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "IPv4",
        "id": 1253532,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "118.193.240.195",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "IPv4",
        "id": 1253533,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "59.188.83.144",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "IPv4",
        "id": 1253534,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "118.193.240.218",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "IPv4",
        "id": 1253535,
        "observations": 2
      },
      {
        "access_groups": [],
        "indicator": "2732115454@qq.com",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:05",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "email",
        "id": 1253536,
        "observations": 1
      },
      {
        "access_groups": [],
        "indicator": "CVE-2012-0158",
        "description": "",
        "title": "",
        "access_reason": "",
        "created": "2016-11-01T22:28:26",
        "is_active": 1,
        "access_type": "public",
        "content": "",
        "role": null,
        "expiration": null,
        "type": "CVE",
        "id": 813,
        "observations": 105
      }
    ],
    "revision": 2,
    "adversary": "",
    "id": "581916f4aa96ef71368c8e47",
    "name": "Flying Dragon Eye: Uyghur Themed Threat Activity"
  },
    {
        "description": "Myanmar is a country currently engaged in an important political process. A pro-democracy reform took place \nin 2011 which has helped the government create an atmopshere conducive to investor interest. The country is \nresource rich, with a variety of natural resources and a steady labor supply. Despite recent progress, the \ncountry is subject to ongoing conflict with ethnic rebels and an ongoing civil war. Analysts suggest that both \nChina and the United States are vying for greater influence in Myanmar, with China in particular having \ngeopolitical interest due to sea passages, port deals, and fuel pipelines that are important to its goals. \nGeopolitical analysts have suggested that the United States may have its own interests that involve thwarting \nChinese ambitions in the region. APT groups from multiple countries - including China - have been known to target organizations of strategic interest with aggressive malware-based espionage campaigns.",
        "created": "2015-09-01T07:47:06.073000",
        "tags": [
            "plugx",
            "Myanmar",
            "rat",
            "Strategic\tWeb\tCompromise"
        ], 
        "modified": "2015-09-01T07:47:06", 
        "author_name": "AlienVault", 
        "references": [
            "http://pages.arbornetworks.com/rs/082-KNA-087/images/ASERT%20Threat%20Intelligence%20Brief%202015-05%20PlugX%20Threat%20Activity%20in%20Myanmar.pdf"
        ],
        "indicators": [
            {
                "indicator": "http://www.uecmyanmar.org/dmdocuments/invitations.rar",
                "_id": "55e557fa4637f21c54c1baf8",
                "type": "URL",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "http://the-casgroup.com/Document/doc.zip",
                "_id": "55e557fa4637f21c54c1baf9",
                "type": "URL",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "http://www.uecmyanmar.org/dmdocuments/PlanProposal.rar",
                "_id": "55e557fa4637f21c54c1bafa",
                "type": "URL",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "http://thecasgroup.com/Document/doc/dxls.exe",
                "_id": "55e557fa4637f21c54c1bafb",
                "type": "URL",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "appeur.gnway.cc",
                "_id": "55e557fa4637f21c54c1bafc",
                "type": "hostname",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "webhttps.websecexp.com",
                "_id": "55e557fa4637f21c54c1bafd",
                "type": "hostname",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "usafbi.websecexp.com",
                "_id": "55e557fa4637f21c54c1bafe",
                "type": "hostname",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "usacia.websecexp.com",
                "_id": "55e557fa4637f21c54c1baff",
                "type": "hostname",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "e2eddf6e7233ab52ad29d8f63b1727cd",
                "_id": "55e557fa4637f21c54c1bb00",
                "type": "FileHash-MD5",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "78a9897344d756701d4674c7f559610a",
                "_id": "55e557fa4637f21c54c1bb01",
                "type": "FileHash-MD5",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "eeb631127f1b9fb3d13d209d8e675634",
                "_id": "55e557fa4637f21c54c1bb02",
                "type": "FileHash-MD5",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "5ee5df9a5f4d16de3f880740db884f69",
                "_id": "55e557fa4637f21c54c1bb03",
                "type": "FileHash-MD5",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "1e36a853bc0b1d111ce726a508bc1a86",
                "_id": "55e557fa4637f21c54c1bb04",
                "type": "FileHash-MD5",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "a1c0c364e02b3b1e0e7b8ce89b611b53",
                "_id": "55e557fa4637f21c54c1bb05",
                "type": "FileHash-MD5",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "69754b86021d3daa658da15579b8f08a",
                "_id": "55e557fa4637f21c54c1bb06",
                "type": "FileHash-MD5",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "a30262bf36b3023ef717b6e23e21bd30",
                "_id": "55e557fa4637f21c54c1bb07",
                "type": "FileHash-MD5",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "9aceefb76c2e227c651ef6a035461b5c",
                "_id": "55e557fa4637f21c54c1bb08",
                "type": "FileHash-MD5",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "d0c5410140c15c8d148437f0f7eabcf7",
                "_id": "55e557fa4637f21c54c1bb09",
                "type": "FileHash-MD5",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "d055518ad14f3d6c40aa6ced6a2d05f2",
                "_id": "55e557fa4637f21c54c1bb0a",
                "type": "FileHash-MD5",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "532f4c671a19145cf19c34d18138da63",
                "_id": "55e557fa4637f21c54c1bb0b",
                "type": "FileHash-MD5",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            },
            {
                "indicator": "809976f3aa0ffd6860056be3b66d5092",
                "_id": "55e557fa4637f21c54c1bb0c",
                "type": "FileHash-MD5",
                "description": "",
                "created": "2015-09-01T07:47:06.073"
            }
        ],
        "revision": 1.0,
        "id": "55e557fa4637f21c54c1bb0d",
        "name": "PlugX Threat\tActivity in Myanmar"
	},  
	{
		"industries": [],
		"TLP": "white",
		"description": "HIDDEN COBRA – North Korean Malicious Cyber Activity",
		"created": "2017-06-15T05:13:01.544000",
		"tags": [],
		"modified": "2017-06-15T05:17:12.187000",
		"author_name": "bschlaps",
		"public": 1,
		"references": [
		  "TA-17-164A_stix.xml"
		],
		"targeted_countries": [],
		"indicators": [
		  {
			"content": "",
			"indicator": "134.119.36.135",
			"description": "",
			"created": "2017-06-15T05:13:02",
			"is_active": 1,
			"title": "",
			"access_reason": "",
			"access_type": "public",
			"access_groups": [],
			"pulse_key": "5942175dd78f563d01abc79c",
			"role": null,
			"expiration": null,
			"type": "IPv4",
			"id": 1357989,
			"observations": 11
		  },
		  {
			"content": "",
			"indicator": "5d29dfe2ea9ca8da3ff7a14fb20c5e86",
			"description": "",
			"created": "2017-06-15T05:17:06",
			"is_active": 1,
			"title": "",
			"access_reason": "",
			"access_type": "public",
			"access_groups": [],
			"pulse_key": "5942175dd78f563d01abc79c",
			"role": null,
			"expiration": null,
			"type": "FileHash-MD5",
			"id": 234158,
			"observations": 11
          },
          {
            "indicator": "http://107.6.172.54/woolen/",
            "_id": "55e6bfb14637f22cb6057466",
            "type": "URI",
            "description": "",
            "created": "2015-09-02T09:21:53.093"
          },
          {
            "indicator": "/woolen/",
            "_id": "55e6bfb14637f22cb6057466",
            "type": "URI",
            "description": "",
            "created": "2015-09-02T09:21:53.093"
          }
     ],
		"revision": 1,
		"adversary": "",
		"id": "5942175dd78f563d01abc79c",
		"name": "Alert (TA17-164A)"
  }
]
