pymisp 2.5.7__py3-none-any.whl → 2.5.7.1__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pymisp might be problematic. Click here for more details.
- CHANGELOG.txt +13 -0
- pymisp/data/misp-objects/objects/rmm/definition.json +1 -1
- {pymisp-2.5.7.dist-info → pymisp-2.5.7.1.dist-info}/METADATA +2 -2
- {pymisp-2.5.7.dist-info → pymisp-2.5.7.1.dist-info}/RECORD +6 -72
- tests/57c4445b-c548-4654-af0b-4be3950d210f.json +0 -1
- tests/__init__.py +0 -0
- tests/csv_testfiles/invalid_fieldnames.csv +0 -11
- tests/csv_testfiles/valid_fieldnames.csv +0 -4
- tests/email_testfiles/mail_1.eml.zip +0 -0
- tests/email_testfiles/mail_1.msg +0 -0
- tests/email_testfiles/mail_1_bom.eml +0 -858
- tests/email_testfiles/mail_1_headers_only.eml +0 -28
- tests/email_testfiles/mail_2.eml +0 -32
- tests/email_testfiles/mail_3.eml +0 -170
- tests/email_testfiles/mail_3.msg +0 -0
- tests/email_testfiles/mail_4.msg +0 -0
- tests/email_testfiles/mail_5.msg +0 -0
- tests/email_testfiles/mail_multiple_to.eml +0 -15
- tests/email_testfiles/source +0 -1
- tests/git-vuln-finder-quagga.json +0 -1493
- tests/misp_event.json +0 -76
- tests/mispevent_testfiles/attribute.json +0 -21
- tests/mispevent_testfiles/attribute_del.json +0 -23
- tests/mispevent_testfiles/def_param.json +0 -53
- tests/mispevent_testfiles/event.json +0 -8
- tests/mispevent_testfiles/event_obj_attr_tag.json +0 -57
- tests/mispevent_testfiles/event_obj_def_param.json +0 -62
- tests/mispevent_testfiles/event_obj_tag.json +0 -29
- tests/mispevent_testfiles/event_tags.json +0 -18
- tests/mispevent_testfiles/existing_event.json +0 -4599
- tests/mispevent_testfiles/existing_event_edited.json +0 -4601
- tests/mispevent_testfiles/galaxy.json +0 -25
- tests/mispevent_testfiles/malware.json +0 -19
- tests/mispevent_testfiles/malware_exist.json +0 -163
- tests/mispevent_testfiles/misp_custom_obj.json +0 -38
- tests/mispevent_testfiles/overwrite_file/definition.json +0 -457
- tests/mispevent_testfiles/proposals.json +0 -35
- tests/mispevent_testfiles/shadow.json +0 -148
- tests/mispevent_testfiles/sighting.json +0 -5
- tests/mispevent_testfiles/simple.json +0 -2
- tests/mispevent_testfiles/test_object_template/definition.json +0 -29
- tests/new_misp_event.json +0 -34
- tests/reportlab_testfiles/HTML_event.json +0 -1
- tests/reportlab_testfiles/galaxy_1.json +0 -1250
- tests/reportlab_testfiles/image_event.json +0 -2490
- tests/reportlab_testfiles/japanese_test.json +0 -156
- tests/reportlab_testfiles/japanese_test_heavy.json +0 -318
- tests/reportlab_testfiles/long_event.json +0 -3730
- tests/reportlab_testfiles/mainly_objects_1.json +0 -1092
- tests/reportlab_testfiles/mainly_objects_2.json +0 -977
- tests/reportlab_testfiles/sighting_1.json +0 -305
- tests/reportlab_testfiles/sighting_2.json +0 -221
- tests/reportlab_testfiles/to_delete1.json +0 -804
- tests/reportlab_testfiles/to_delete2.json +0 -1
- tests/reportlab_testfiles/to_delete3.json +0 -1
- tests/reportlab_testfiles/very_long_event.json +0 -1006
- tests/reportlab_testoutputs/to_delete1.json.pdf +0 -391
- tests/reportlab_testoutputs/to_delete2.json.pdf +0 -506
- tests/reportlab_testoutputs/to_delete3.json.pdf +0 -277
- tests/search_index_result.json +0 -69
- tests/sharing_groups.json +0 -98
- tests/stix1.xml-utf8 +0 -110
- tests/stix2.json +0 -1
- tests/test_analyst_data.py +0 -123
- tests/test_emailobject.py +0 -157
- tests/test_fileobject.py +0 -20
- tests/test_mispevent.py +0 -473
- tests/test_reportlab.py +0 -431
- tests/testlive_comprehensive.py +0 -3734
- tests/testlive_sync.py +0 -474
- {pymisp-2.5.7.dist-info → pymisp-2.5.7.1.dist-info}/LICENSE +0 -0
- {pymisp-2.5.7.dist-info → pymisp-2.5.7.1.dist-info}/WHEEL +0 -0
CHANGELOG.txt
CHANGED
|
@@ -2,6 +2,18 @@ Changelog
|
|
|
2
2
|
=========
|
|
3
3
|
|
|
4
4
|
|
|
5
|
+
v2.5.7.1 (2025-02-22)
|
|
6
|
+
---------------------
|
|
7
|
+
|
|
8
|
+
Changes
|
|
9
|
+
~~~~~~~
|
|
10
|
+
- Remove tests from wheel. [Raphaël Vinot]
|
|
11
|
+
- Make mypy happy. [Raphaël Vinot]
|
|
12
|
+
- Bump objects. [Raphaël Vinot]
|
|
13
|
+
- Move email MSG to PW protected archive to fool bumb AVs. [Raphaël
|
|
14
|
+
Vinot]
|
|
15
|
+
|
|
16
|
+
|
|
5
17
|
v2.5.7 (2025-02-20)
|
|
6
18
|
-------------------
|
|
7
19
|
|
|
@@ -13,6 +25,7 @@ New
|
|
|
13
25
|
|
|
14
26
|
Changes
|
|
15
27
|
~~~~~~~
|
|
28
|
+
- Bump changelog. [Raphaël Vinot]
|
|
16
29
|
- Bump objects. [Raphaël Vinot]
|
|
17
30
|
- Bump changelog. [Raphaël Vinot]
|
|
18
31
|
- Bump deps, version. [Raphaël Vinot]
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.3
|
|
2
2
|
Name: pymisp
|
|
3
|
-
Version: 2.5.7
|
|
3
|
+
Version: 2.5.7.1
|
|
4
4
|
Summary: Python API for MISP.
|
|
5
5
|
License: BSD-2-Clause
|
|
6
6
|
Author: Raphaël Vinot
|
|
@@ -42,7 +42,7 @@ Requires-Dist: python-dateutil (>=2.9.0.post0)
|
|
|
42
42
|
Requires-Dist: python-magic (>=0.4.27) ; extra == "fileobjects"
|
|
43
43
|
Requires-Dist: reportlab (>=4.3.1) ; extra == "pdfexport"
|
|
44
44
|
Requires-Dist: requests (>=2.32.3)
|
|
45
|
-
Requires-Dist: sphinx (>=8.2.
|
|
45
|
+
Requires-Dist: sphinx (>=8.2.1) ; (python_version >= "3.11") and (extra == "docs")
|
|
46
46
|
Requires-Dist: sphinx-autodoc-typehints (>=3.1.0) ; (python_version >= "3.11") and (extra == "docs")
|
|
47
47
|
Requires-Dist: urllib3 (>=2.3.0) ; extra == "brotli"
|
|
48
48
|
Requires-Dist: validators (>=0.34.0) ; extra == "virustotal"
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
CHANGELOG.txt,sha256=
|
|
1
|
+
CHANGELOG.txt,sha256=2pi0zreoqfIInNCyU_XcDvaizt1G3VSLH9COAQ37PYY,181076
|
|
2
2
|
examples/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
3
3
|
examples/add_attributes_from_csv.py,sha256=k-9AAips6PqBZ70hRD2422wn6rRWHqNDkhpm6yIv7vw,2479
|
|
4
4
|
examples/add_email_object.py,sha256=y-HfUMsl-lETBISfAA0d8U6aVlwtpitRXEIPY-nKPQU,992
|
|
@@ -333,7 +333,7 @@ pymisp/data/misp-objects/objects/regripper-system-hive-services-drivers/definiti
|
|
|
333
333
|
pymisp/data/misp-objects/objects/report/definition.json,sha256=VGwiq38JeXS3-aZ1qhc8LolunR2TKZ8Fa9r5VUcWK68,2130
|
|
334
334
|
pymisp/data/misp-objects/objects/research-scanner/definition.json,sha256=QNnj_Z4M91pobemf3D54NcPDEnBOnt2aMQAQBRdz0MM,2409
|
|
335
335
|
pymisp/data/misp-objects/objects/risk-assessment-report/definition.json,sha256=a618CJQDAarQWtSh2DN9ddL4cvbjGvXp82Gpwt_cCcw,1418
|
|
336
|
-
pymisp/data/misp-objects/objects/rmm/definition.json,sha256=
|
|
336
|
+
pymisp/data/misp-objects/objects/rmm/definition.json,sha256=ekdWhfz1-pk7ZUgbHOebbzKnQEKhlxM2S8HhAoykAeA,2029
|
|
337
337
|
pymisp/data/misp-objects/objects/rogue-dns/definition.json,sha256=AVtTRNUGfXMVsMytl8VV44RfwrZgSLV1Zy1ubJjL46k,1272
|
|
338
338
|
pymisp/data/misp-objects/objects/rtir/definition.json,sha256=_kETOirHNgTr_ONJjBOl5Lic5WjQKwX3sAuBNDXNS3A,1553
|
|
339
339
|
pymisp/data/misp-objects/objects/sandbox-report/definition.json,sha256=gVIr3TJYvP2du-tGRcCz7FlonqlNNUtbrFnH2JYh66s,2691
|
|
@@ -460,73 +460,7 @@ pymisp/tools/update_objects.py,sha256=sp_XshzgtRjAU0Mqg8FgRTaokjVKLImyQ02xIcPSrH
|
|
|
460
460
|
pymisp/tools/urlobject.py,sha256=PIucy1356zaljUm1NbeKmEpHpAUK9yiK2lAugcMp2t8,2489
|
|
461
461
|
pymisp/tools/vehicleobject.py,sha256=bs7f4d47IBi2-VumssSM3HlqkH0viyHTLmIHQxe8Iz8,3687
|
|
462
462
|
pymisp/tools/vtreportobject.py,sha256=NsdYzgqm47dywYeW8UnWmEDeIsf07xZreD2iJzFm2wg,3217
|
|
463
|
-
|
|
464
|
-
|
|
465
|
-
|
|
466
|
-
|
|
467
|
-
tests/email_testfiles/mail_1.eml.zip,sha256=XuE4ct-_3GcTrrOumKHf4U78bYlP9DzQAFO_9JEVgIw,27186
|
|
468
|
-
tests/email_testfiles/mail_1.msg,sha256=XWNU1Ajspvsm6jlbzFdCG2IqR43IKcgbwvtjlrVRjOQ,276480
|
|
469
|
-
tests/email_testfiles/mail_1_bom.eml,sha256=1wnXbA6yhyFQHJpZLVUIxqS1CpyLABVZ4cfxva_uY30,65789
|
|
470
|
-
tests/email_testfiles/mail_1_headers_only.eml,sha256=n-AOw4wQ9V38nqkQ8TUzM76zBm5bouK8cga8LiYvCIg,2415
|
|
471
|
-
tests/email_testfiles/mail_2.eml,sha256=DIuBSpNigiEoVxYdc8ugj6gZY0ujjIDBdGmgx8pgC4I,1477
|
|
472
|
-
tests/email_testfiles/mail_3.eml,sha256=e_6-cNCILvTrqGUWgXaXD8iWSBXNe3lP3wF2mImf0S8,8878
|
|
473
|
-
tests/email_testfiles/mail_3.msg,sha256=vdBjsz-bnY6Ka-lcB-8YIXINl8HG_HF_F1KEbLzcD4Y,26624
|
|
474
|
-
tests/email_testfiles/mail_4.msg,sha256=1XXwxnRSDuRqOg_ctZD74ls1uH_uMTft-2cxOmualGA,57344
|
|
475
|
-
tests/email_testfiles/mail_5.msg,sha256=NzzvgFln7wntf-G2q-HUKBWvcAfSHLVTKh1S7hrDSRM,65536
|
|
476
|
-
tests/email_testfiles/mail_multiple_to.eml,sha256=I05fUHirW4vzQPHB13y3f-5kCB8rvkCk-ffmw_4STdM,1568
|
|
477
|
-
tests/email_testfiles/source,sha256=JNNZ6fO8OFC__qXXT6Ob0ITRa-z7K1vvfz2x7Gi1QwE,66
|
|
478
|
-
tests/git-vuln-finder-quagga.json,sha256=72kvJPrY54A0cFyorNqnEidPNn0kRTtkiO434bcXGYQ,98813
|
|
479
|
-
tests/misp_event.json,sha256=V_W1lsV-p5SmIHMieJhqIDxeF7XBmI329s3hGAZNxGA,2053
|
|
480
|
-
tests/mispevent_testfiles/attribute.json,sha256=b8gVCVa5-N88g3OoKzwGzaMnyArc0iigaareQSgCs30,374
|
|
481
|
-
tests/mispevent_testfiles/attribute_del.json,sha256=DUys_24edRUOl5Bfign1Urb_0Ve2DWzLCiN8sk4oDl4,415
|
|
482
|
-
tests/mispevent_testfiles/def_param.json,sha256=zCQsm9U7XT4HJDi3tA57fhweqM2moO6oCqsiSph76Sw,1458
|
|
483
|
-
tests/mispevent_testfiles/event.json,sha256=Z1VlOz9slPWLNsbUDK7ipIzdn1NrCn9frQcguTETZ8E,144
|
|
484
|
-
tests/mispevent_testfiles/event_obj_attr_tag.json,sha256=CZhiklh4RUhGFdDIl-IOEk0rXFfIutcEJYlNrZScogk,1507
|
|
485
|
-
tests/mispevent_testfiles/event_obj_def_param.json,sha256=YKIhEibDkF7C1eSOdx_XFOXFPd0bUDG16nieHoB-w1g,1571
|
|
486
|
-
tests/mispevent_testfiles/event_obj_tag.json,sha256=hD358Y41xiA3GsWc2gAzpP5Le1OL3uqKB8VOrcSlTOY,651
|
|
487
|
-
tests/mispevent_testfiles/event_tags.json,sha256=CKkbWlTky64PG_bBM9U3uQ7C080A8GsJQ8VLNNkshKg,237
|
|
488
|
-
tests/mispevent_testfiles/existing_event.json,sha256=W4X9ldzv2mXWpmlpsuKfQt-nhNCSR9tc4SB1kfBQEpI,146400
|
|
489
|
-
tests/mispevent_testfiles/existing_event_edited.json,sha256=v4V711qaSfDEsJScbPr1vT-n33RaGyJUQh8B7nUHPIg,146390
|
|
490
|
-
tests/mispevent_testfiles/galaxy.json,sha256=Wd1FkJYKtqTufAQXTcOAjv5bxmvU5OioNRKFOAOe2b0,756
|
|
491
|
-
tests/mispevent_testfiles/malware.json,sha256=YoksvEuBCvbTHVY1VVJvlh4l7EHzAROlCNTWwcIHSEc,396
|
|
492
|
-
tests/mispevent_testfiles/malware_exist.json,sha256=kmtQ0vW9MI-E5p4-3ZtQf0dk9CuyX_ARD_MpCQsTNjM,7140
|
|
493
|
-
tests/mispevent_testfiles/misp_custom_obj.json,sha256=uSIEHEHO63g12smDvXEs8aZLvb5OALjDpgN-qyraIfI,881
|
|
494
|
-
tests/mispevent_testfiles/overwrite_file/definition.json,sha256=2fMeAlgedrSPllkzj0D3hSUxfy5BXhS0L2vl2npVV5k,11122
|
|
495
|
-
tests/mispevent_testfiles/proposals.json,sha256=qj5PvWOVcjDzbTkFCJbwcKBwQuMEhqpqWIiVdtgzAys,715
|
|
496
|
-
tests/mispevent_testfiles/shadow.json,sha256=SRchQwDqpnb-Fnuii4UkEI84QwaY2lIIDtjh6StKDqA,4222
|
|
497
|
-
tests/mispevent_testfiles/sighting.json,sha256=1bV0Clz3JL0I6KLLFpPjmCYhMz3a5BOYItYRfk1113E,63
|
|
498
|
-
tests/mispevent_testfiles/simple.json,sha256=2RQXb9UL1_VlcAAGoxqpe3nTrRfO4gyOX_IGHVy3SBc,4
|
|
499
|
-
tests/mispevent_testfiles/test_object_template/definition.json,sha256=DjM88pcSxnA-orIGuSddriBVbzzxP26kgbiez6jOedc,578
|
|
500
|
-
tests/new_misp_event.json,sha256=tAvZzx4oSnHHi6cptmyR_7FFR3wkpD3TRUfc7m9cLKs,888
|
|
501
|
-
tests/reportlab_testfiles/HTML_event.json,sha256=icL96e7np3KbyqlumqyBuavQ8rBRYigsYTrhsiwuQCE,171424
|
|
502
|
-
tests/reportlab_testfiles/galaxy_1.json,sha256=OHlUJEItkeo0azui3P-Z9fM20va7ZoKVWwx99Wl07kY,225290
|
|
503
|
-
tests/reportlab_testfiles/image_event.json,sha256=goMdDrmqZYz1uGNjWQ1PNP-TBE9ZGYxiurBedaUfPLM,303937
|
|
504
|
-
tests/reportlab_testfiles/japanese_test.json,sha256=EjDxuz-zzFyiBz_V9tk9N56jeKbDKtzVGAENLKAwWk0,17556
|
|
505
|
-
tests/reportlab_testfiles/japanese_test_heavy.json,sha256=_enFM3O9p-nQGQr2hrBncnex6fScoJMs0LOqOD_Eik4,117363
|
|
506
|
-
tests/reportlab_testfiles/long_event.json,sha256=jYkzFllzIt51Ac4Du68QFtqQCn69gstiMMKmHRHpLpY,149693
|
|
507
|
-
tests/reportlab_testfiles/mainly_objects_1.json,sha256=JI_uXChihmRhP22hlmqgtKdpZZqUjQNBJ5kTryTvXpM,123173
|
|
508
|
-
tests/reportlab_testfiles/mainly_objects_2.json,sha256=1Pzo76wCqqY56d6Y3DmqBal4zBliK8X-bQY-3xJH6cs,102032
|
|
509
|
-
tests/reportlab_testfiles/sighting_1.json,sha256=HdAcmA8lJ2ThwNi8Ryx_GF8JNyVdJaEeh_oPMd9piLs,11787
|
|
510
|
-
tests/reportlab_testfiles/sighting_2.json,sha256=9nn4uL6tNpVc1SpoZzJroLdevvMU9ppzeDb6EzipuCY,8790
|
|
511
|
-
tests/reportlab_testfiles/to_delete1.json,sha256=Z71YUMPLG2nlI_at79wrt48y5x3zvOzJG4p_PtFIyzQ,30745
|
|
512
|
-
tests/reportlab_testfiles/to_delete2.json,sha256=OWWI4y9TrvH-RW-p-Um1F1ejVLAdoKMLWQ0PHxrxRTo,157437
|
|
513
|
-
tests/reportlab_testfiles/to_delete3.json,sha256=Ids-85h99TAIspIhoYfTRRXTqD1lT7abLxvF0IE4pVA,33776
|
|
514
|
-
tests/reportlab_testfiles/very_long_event.json,sha256=6BbYF3BvQykBoiwnl1dR1iramC9gDHpXFu-tzqB6MPM,384749
|
|
515
|
-
tests/reportlab_testoutputs/to_delete1.json.pdf,sha256=3xoKxWMJBhiTZo6AKvegJZLGGillA23MGgoaZ5ypvAs,30883
|
|
516
|
-
tests/reportlab_testoutputs/to_delete2.json.pdf,sha256=cvTnDX8Cw6qwzGYgqaknpL2s1Kby316eIQ6swzCpLCY,35123
|
|
517
|
-
tests/reportlab_testoutputs/to_delete3.json.pdf,sha256=R4q9tv1UIBMeNLULhSEJrz-imGupdb5vrFgkyZa0A5k,19673
|
|
518
|
-
tests/search_index_result.json,sha256=ndtjirO1fJA5QUdbKz_P0K9q9YMAMHIqSobcqyZFOAA,1415
|
|
519
|
-
tests/sharing_groups.json,sha256=GsLwfsAkEf_GG_Qe45UFl0IE7W9XQQC9aMolmcnw3C8,2256
|
|
520
|
-
tests/stix1.xml-utf8,sha256=NbBNpDBtw6eGIAhhS25b5_ZJfRmoonlAvYT0OsPCXcg,7214
|
|
521
|
-
tests/stix2.json,sha256=hQgTs7CSad4QI3iL4VYbvxOcfFqInNQkJhU4avIX5GA,1300
|
|
522
|
-
tests/test_analyst_data.py,sha256=ViJjgST_qPUJTaO1-pCxpsoo5C-HUuki7mPsHLeFRTo,4891
|
|
523
|
-
tests/test_emailobject.py,sha256=7eclz2-ahosdSBqzr3xbAnboaWa57tffzzmChJk--mU,7810
|
|
524
|
-
tests/test_fileobject.py,sha256=-Ns4YIZse_bymoOgyt4np9c1Rg8P5BVyklJz7j1FiHg,702
|
|
525
|
-
tests/test_mispevent.py,sha256=dRYjR3ZRxSCh030JFwyuBajyZpHLdTDT3KRlrntDvZo,24287
|
|
526
|
-
tests/test_reportlab.py,sha256=4zhH9UWkWotBj1f6e5YVYw4-D0ah02nQix6oxOZDkRU,17640
|
|
527
|
-
tests/testlive_comprehensive.py,sha256=uzL6XS3t8RQDHa9SUYTti8K99GeSSz3RIe746VLamDY,195802
|
|
528
|
-
tests/testlive_sync.py,sha256=V57x761Wwg5h1roiZY5c1Ddr63TpZGsyIDPE4tEj1Zc,22195
|
|
529
|
-
pymisp-2.5.7.dist-info/LICENSE,sha256=1oPSVvs96qLjbJVi3mPn0yvWs-6aoIF6BNXi6pVlFmY,1615
|
|
530
|
-
pymisp-2.5.7.dist-info/METADATA,sha256=uvU-sYqRDfPiJIW1brsiZ7UvhXT-T8w1dNrfgsGWDNE,8881
|
|
531
|
-
pymisp-2.5.7.dist-info/WHEEL,sha256=XbeZDeTWKc1w7CSIyre5aMDU_-PohRwTQceYnisIYYY,88
|
|
532
|
-
pymisp-2.5.7.dist-info/RECORD,,
|
|
463
|
+
pymisp-2.5.7.1.dist-info/LICENSE,sha256=1oPSVvs96qLjbJVi3mPn0yvWs-6aoIF6BNXi6pVlFmY,1615
|
|
464
|
+
pymisp-2.5.7.1.dist-info/METADATA,sha256=HDHYHKqHPkRKJVmA6fXwicqhcOCPCfTiMjZAVF0tDAI,8883
|
|
465
|
+
pymisp-2.5.7.1.dist-info/WHEEL,sha256=XbeZDeTWKc1w7CSIyre5aMDU_-PohRwTQceYnisIYYY,88
|
|
466
|
+
pymisp-2.5.7.1.dist-info/RECORD,,
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"Event": {"info": "Ransomware - Xorist", "publish_timestamp": "1472548231", "timestamp": "1472541011", "analysis": "2", "Attribute": [{"category": "External analysis", "comment": "Imported via the Freetext Import Tool - Xchecked via VT: b3c4ae251f8094fa15b510051835c657eaef2a6cea46075d3aec964b14a99f68", "uuid": "57c5300c-0560-4146-bfaa-40e802de0b81", "timestamp": "1472540684", "to_ids": false, "value": "https://www.virustotal.com/file/b3c4ae251f8094fa15b510051835c657eaef2a6cea46075d3aec964b14a99f68/analysis/1469554268/", "type": "link"}, {"category": "External analysis", "comment": "", "uuid": "57c5310b-dc34-43cb-8b8e-4846950d210f", "timestamp": "1472541011", "to_ids": false, "value": "http://www.xylibox.com/2011/06/have-fun-with-trojan-ransomwin32xorist.html", "type": "link"}, {"category": "Other", "comment": "", "uuid": "57c444c0-8004-48fa-9c33-8aca950d210f", "timestamp": "1472480448", "to_ids": false, "value": "UPX packed", "type": "comment"}, {"category": "Other", "comment": "", "uuid": "57c44648-96f4-45d4-a8eb-453e950d210f", "timestamp": "1472480840", "to_ids": false, "value": "Key: 85350044dF4AC3518D185678A9414A7F,\r\nEncryption rounds:8,\r\nStart offset: 64,\r\nAlgorithm: TEA", "type": "text"}, {"category": "Payload delivery", "comment": "Imported via the Freetext Import Tool", "uuid": "57c4448a-fb04-457d-87e7-4127950d210f", "timestamp": "1472480394", "to_ids": true, "value": "3Z4wnG9603it23y.exe", "type": "filename"}, {"category": "Payload delivery", "comment": "Imported via the Freetext Import Tool", "uuid": "57c4448b-454c-4d17-90d1-4d2f950d210f", "timestamp": "1472480395", "to_ids": true, "value": "0749bae92ca336a02c83d126e04ec628", "type": "md5"}, {"category": "Payload delivery", "comment": "Imported via the Freetext Import Tool", "uuid": "57c4448a-bef0-4ba7-a071-444e950d210f", "timestamp": "1472480394", "to_ids": true, "value": "77b0c41b7d340b8a3d903f21347bbf06aa766b5b", "type": "sha1"}, {"category": "Payload delivery", "comment": "Imported via the Freetext Import Tool", "uuid": "57c4448b-3fa4-4d65-9ccc-4afa950d210f", "timestamp": "1472480395", "to_ids": true, "value": "b3c4ae251f8094fa15b510051835c657eaef2a6cea46075d3aec964b14a99f68", "type": "sha256"}, {"category": "Persistence mechanism", "comment": "", "uuid": "57c54b0f-27a4-458b-8e63-4455950d210f", "timestamp": "1472547599", "to_ids": true, "value": "Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run|%TEMP%\\3Z4wnG9603it23y.exe", "type": "regkey|value"}], "Tag": [{"colour": "#ffffff", "exportable": true, "name": "tlp:white"}, {"colour": "#3d7a00", "exportable": true, "name": "circl:incident-classification=\"malware\""}, {"colour": "#420053", "exportable": true, "name": "ms-caro-malware:malware-type=\"Ransom\""}, {"colour": "#2c4f00", "exportable": true, "name": "malware_classification:malware-category=\"Ransomware\""}], "published": true, "date": "2016-08-29", "Orgc": {"name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"}, "threat_level_id": "3", "uuid": "57c4445b-c548-4654-af0b-4be3950d210f"}}
|
tests/__init__.py
DELETED
|
File without changes
|
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
SHA1,fileName,size
|
|
2
|
-
2a030cc6d84d5785f5e84d0f5888a411d4b06d01,soft.exe,45568
|
|
3
|
-
2abae839362edfe52d9ebe282fb61113d22b331f,sttager.exe,20480
|
|
4
|
-
6995a32e0a4d4f6d0c9b2a00a96d69bff4b83ea7,test443.exe,373911
|
|
5
|
-
87b1f17fbb4a1e8eef4cb31c1c0194b1426c868c,veil.exe,345761
|
|
6
|
-
afc36916a4df934446681ea28bef6add4decb98a,80_http.exe.exe,411850
|
|
7
|
-
f832d94391a8d2d5cf92773e6c912905ec7c40c7,test1.exe,406636
|
|
8
|
-
056823c7891a04b2fec8903eb401ae3291743a54,beca.exe.exe,23808
|
|
9
|
-
b7afa7acf1b7ded2c4e3d0884b5cdaa230d9f82e,shell1.exe,24576
|
|
10
|
-
4b50b6b9157026ab408d966ece02d1cef8045f82,starggge.exe,27136
|
|
11
|
-
6042dfd50d33da40e383baec4a7ef7c75bf17481,8_32.exe,24064
|
|
@@ -1,4 +0,0 @@
|
|
|
1
|
-
md5, sha1, sha256
|
|
2
|
-
644087ccca16d2a728ef7685a4106f09, eabd6974ac71efd72d9e0688d5a6131f336d169c, 385e31c97e3a07bbb81513f0cd0979e64e6b014943902efd002f57b21eadd41e
|
|
3
|
-
34187a34d0a3c5d63016c26346371b54, ce8209ff9828aa8cb095bd7d1589fc4d394c298c, 5f815b8a8e77731c9ca2b3a07a27f880ef24d54e458d77bdabbbaf2269fe96c3
|
|
4
|
-
871aa15f4d61c85e1284e1be3f99f705, 236eac0b19f91117b27f1b198a4d8490d99ec2e5, b434bccf0a5ff75b27184e661df751466aef69f35fbd7b8b8692302b8b886262
|
|
Binary file
|
tests/email_testfiles/mail_1.msg
DELETED
|
Binary file
|