Skip to content

Instantly share code, notes, and snippets.

@jmlynch
Last active August 29, 2015 14:08
Show Gist options
  • Save jmlynch/c43ca0a4ded059a8ee26 to your computer and use it in GitHub Desktop.
Save jmlynch/c43ca0a4ded059a8ee26 to your computer and use it in GitHub Desktop.
Bro formatted intel file containing indicators from FireEye APT28 report
#fields indicator indicator_type meta.source meta.url meta.do_notice meta.if_in
kavkazcentr.info Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf/resources/pdfs/apt28.pdf T -
rnil.am Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
standartnevvs.com Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
novinitie.com Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
n0vinite.com Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
qov.hu.com Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
q0v.pl Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
mail.q0v.pl Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
poczta.mon.q0v.pl Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
nato.nshq.in Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
natoexhibitionff14.com Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
login-osce.org Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
baltichost.org Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
smigroup-online.co.uk Intel::DOMAIN FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
nato_smtp@mail.ru Intel::EMAIL FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
nato_pop@mail.ru Intel::EMAIL FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
detaluri.dat Intel::FILE_NAME FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
military cooperation.doc Intel::FILE_NAME FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
272f0fde35dbdfccbca1e33373b3570d Intel::FILE_HASH FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
8b92fe86c5b7a9e34f433a6fbac8bc3a Intel::FILE_HASH FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
9eebfebe3987fec3c395594dc57a0c4c Intel::FILE_HASH FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
da2a657dc69d7320f2ffc87013f257ad Intel::FILE_HASH FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
1259c4fe5efd9bf07fc4c78466f2dd09 Intel::FILE_HASH FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
3b0ecd011500f61237c205834db0e13a Intel::FILE_HASH FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
5882fda97fdf78b47081cc4105d44f7c Intel::FILE_HASH FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
791428601ad12b9230b9ace4f2138713 Intel::FILE_HASH FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
ead4ec18ebce6890d20757bb9f5285b1 Intel::FILE_HASH FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
48656a93f9ba39410763a2196aabc67f Intel::FILE_HASH FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
8c4fa713c5e2b009114adda758adc445 Intel::FILE_HASH FireeyeAPT28 http://www.fireeye.com/resources/pdfs/apt28.pdf T -
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment