Azure-Sentinel/Sample Data/Custom/Group IB TIA/GIBTIA_compromised_card.json

84 строки
2.1 KiB
JSON

{
"baseName": "United States",
"cardInfo": {
"cvv": null,
"dump": null,
"issuer": {
"countryCode": "US",
"countryName": "UNITED STATES",
"issuer": "SOME BANK"
},
"number": "545123XXXXXXXXXX",
"system": "VISA",
"type": "CLASSIC",
"validThru": "09/2025"
},
"client": {
"ipv4": {
"asn": null,
"city": null,
"countryCode": null,
"countryName": null,
"ip": null,
"provider": null,
"region": null
}
},
"cnc": {
"cnc": "mandarincc.pw",
"domain": "mandarincc.pw",
"ipv4": {
"asn": null,
"city": "San Francisco",
"countryCode": "US",
"countryName": "United States",
"ip": "172.67.134.188",
"provider": "Cloudflare",
"region": "California"
},
"ipv6": null,
"url": null
},
"dateCompromised": "2019-12-12T10:41:00+00:00",
"dateDetected": "2019-12-12T10:57:49+00:00",
"evaluation": {
"admiraltyCode": "A2",
"credibility": 80,
"reliability": 90,
"severity": "red",
"tlp": "red",
"ttl": 90
},
"externalId": "12312",
"id": "ecda6f4dc85596f447314ce01e2152db9c9d3cbc",
"isFavourite": false,
"isHidden": false,
"malware": {
"id": "53013c863116aae720581ff2aa2b4f92d3cb2bd7",
"name": "mandarincc"
},
"oldId": "396798216",
"owner": {
"address": null,
"birthday": null,
"city": "Something",
"countryCode": "US",
"email": null,
"name": "xyz",
"passport": null,
"phone": "932876",
"state": "Ohio",
"taxNumber": null,
"zip": null
},
"portalLink": "https://bt.group-ib.com/cd/cards?searchValue=id:ecda6f4dc85596f447314ce01e2152db9c9d3cbc",
"price": {
"currency": "USD",
"value": "13213"
},
"seqUpdate": 1614923910464,
"serviceCode": null,
"sourceType": "Card shop",
"threatActor": null,
"track": []
}