[
  {
    "id": 2048842429,
    "indicator": "ccfde149220e87e97198c23fb8115d5a",
    "type": "FileHash-MD5",
    "created": "2019-10-02T17:58:00",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 1563019447,
    "indicator": "CVE-2018-8453",
    "type": "CVE",
    "created": "2019-10-02T17:58:00",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2119268804,
    "indicator": "246aea5a28ed117238ed0da8e6c96a9a9f1c627613d0f9f57da3e819f57231eb",
    "type": "FileHash-SHA256",
    "created": "2019-10-02T17:58:00",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2139735006,
    "indicator": "ef777a861ede95d3b02b0b135952d43a",
    "type": "FileHash-MD5",
    "created": "2019-10-02T17:58:00",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2139735002,
    "indicator": "39e4eb1ab854c4a7929e8e77ca0dbca37049154d",
    "type": "FileHash-SHA1",
    "created": "2019-10-02T17:58:00",
    "content": "",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2139797875,
    "indicator": "2b0b0ba708ad5d0d209c6efe3a1598b34bcb93f7",
    "type": "YARA",
    "created": "2019-10-02T17:58:00",
    "content": "rule Sodinokobi   \n   {   \n      \n   /*   \n      \n   This rule detects Sodinokobi Ransomware in memory in old samples and perhaps future.   \n      \n   */   \n      \n   meta:   \n      \n   author      = \"McAfee ATR team\"   \n      \n   version     = \"1.0\"   \n      \n   description = \"This rule detect Sodinokobi Ransomware in memory in old samples and perhaps future.\"   \n      \n   strings:   \n      \n   $a = { 40 0F B6 C8 89 4D FC 8A 94 0D FC FE FF FF 0F B6 C2 03 C6 0F B6 F0 8A 84 35 FC FE FF FF 88 84 0D FC FE FF FF 88 94 35 FC FE FF FF 0F B6 8C 0D FC FE FF FF }   \n      \n   $b = { 0F B6 C2 03 C8 8B 45 14 0F B6 C9 8A 8C 0D FC FE FF FF 32 0C 07 88 08 40 89 45 14 8B 45 FC 83 EB 01 75 AA }   \n      \n   condition:   \n      \n   all of them   \n      \n   }",
    "title": "",
    "description": "",
    "expiration": null,
    "is_active": 1
  }
]